Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
File: GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft (raw, json)
Hash identifier: DKC38zWmcPxQPZwNZbBK+SrCa5OgV+Y0oEduXHk1J10=
Subject key identifier: 6B:BF:AA:CB:5E:C2:0A:CD:3C:23:AA:53:0A:6E:FC:48:81:3F:50:98
Authority key identifier: 18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48
Certificate issuer: /CN=1877b19d4847fc3f495af936c5b1a1928c912748
Certificate serial: 0199221F3143381687D319BC75DC198919FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:01:33 +0000
Manifest this update: Sun 07 Sep 2025 03:01:33 +0000
Manifest next update: Mon 08 Sep 2025 03:01:33 +0000
Files and hashes: 1: GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl (hash: 920QJywlJjQIEEXOIGhghtBrgKdVNNtWFBQK4r8+3YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:31:43:38:16:87:d3:19:bc:75:dc:19:89:19:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1877b19d4847fc3f495af936c5b1a1928c912748
Validity
Not Before: Sep 7 03:01:33 2025 GMT
Not After : Sep 8 03:01:33 2025 GMT
Subject: CN=6bbfaacb5ec20acd3c23aa530a6efc48813f5098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:e0:1b:0f:85:c5:da:ef:fd:e4:04:75:9d:
4c:2f:05:12:1c:4c:1e:9b:40:5b:10:30:54:d8:a0:
d2:f2:41:e9:3e:c4:8b:af:94:f9:43:0c:7f:b9:b2:
33:21:39:19:26:a7:e0:28:39:f3:31:90:62:ad:8e:
b2:75:cc:66:86:fc:3e:06:7c:25:81:8c:8a:b7:c8:
80:f0:09:24:de:f5:87:ae:71:b3:30:b2:7a:bd:74:
28:87:ab:0a:a3:f8:22:7d:f6:c3:65:e8:43:4c:77:
da:c1:e0:e3:f2:42:b6:9d:44:7b:ba:48:6a:d6:0d:
cb:65:29:5f:11:44:be:9f:25:22:3f:3e:32:47:48:
59:f5:c2:91:28:2b:c7:0f:da:18:40:aa:35:bd:fa:
e6:93:74:22:19:c9:cf:f5:9f:88:0a:4d:03:66:99:
e4:8c:8e:03:7f:a7:4b:06:b0:4d:58:25:79:e4:b1:
26:b4:48:9c:c1:8c:16:80:c9:fd:5f:51:ba:74:fe:
d9:af:d6:cf:d6:27:ae:08:77:48:8b:94:86:91:71:
a3:de:a2:d5:80:c2:f5:2b:4a:80:50:3a:12:db:2f:
b1:0f:f1:66:00:9b:6d:5c:54:3b:28:05:5f:c7:9b:
28:ae:d5:45:4e:37:d1:17:24:f3:a8:fc:88:fa:c3:
5e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BF:AA:CB:5E:C2:0A:CD:3C:23:AA:53:0A:6E:FC:48:81:3F:50:98
X509v3 Authority Key Identifier:
keyid:18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4c:23:1d:58:9b:17:29:93:fe:dd:54:42:ab:b6:f4:8a:33:
c3:e5:4c:7f:33:a1:b9:85:41:16:45:a4:fb:c3:9b:b0:4a:71:
f6:c7:50:a0:c4:3c:4f:9d:f9:88:bf:85:c8:1e:14:ff:44:40:
d9:51:74:c2:76:b3:09:58:cd:99:a1:5f:45:63:b4:89:99:80:
45:d0:6f:c2:1c:36:bb:4d:70:53:5b:e9:cc:fe:ad:6f:91:f7:
56:b8:1c:b6:c1:41:38:06:5d:41:fc:7e:89:ae:47:46:4a:6f:
43:3d:ea:57:93:e2:fa:48:3a:fa:24:41:0a:55:0d:63:b8:2a:
d9:92:7d:bf:1b:0b:7f:6c:46:86:40:60:07:0f:70:4a:30:fa:
3f:42:03:fe:8d:79:e4:21:9d:45:99:bb:24:df:92:44:38:6e:
74:52:a7:a7:45:6a:b0:02:7f:0f:02:18:8e:61:74:7a:c8:00:
b4:3e:bf:ef:6d:61:cd:1a:1d:af:f2:78:03:e9:a8:7a:13:1e:
cb:15:f5:2a:da:1e:6b:12:be:2c:c9:95:aa:18:ce:53:14:c7:
ad:25:af:41:45:8b:34:96:cb:c7:e8:79:b0:16:9b:b8:6d:8f:
c1:fa:dc:07:13:ac:d8:c8:f3:7b:79:17:d6:6a:b8:95:b1:af:
ba:2e:35:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHzFDOBaH0xm8ddwZiRn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NzdiMTlkNDg0N2ZjM2Y0OTVhZjkzNmM1YjFhMTkyOGM5
MTI3NDgwHhcNMjUwOTA3MDMwMTMzWhcNMjUwOTA4MDMwMTMzWjAzMTEwLwYDVQQD
Eyg2YmJmYWFjYjVlYzIwYWNkM2MyM2FhNTMwYTZlZmM0ODgxM2Y1MDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39HgGw+Fxdrv/eQEdZ1MLwUSHEwe
m0BbEDBU2KDS8kHpPsSLr5T5Qwx/ubIzITkZJqfgKDnzMZBirY6ydcxmhvw+Bnwl
gYyKt8iA8Akk3vWHrnGzMLJ6vXQoh6sKo/giffbDZehDTHfaweDj8kK2nUR7ukhq
1g3LZSlfEUS+nyUiPz4yR0hZ9cKRKCvHD9oYQKo1vfrmk3QiGcnP9Z+ICk0DZpnk
jI4Df6dLBrBNWCV55LEmtEicwYwWgMn9X1G6dP7Zr9bP1ieuCHdIi5SGkXGj3qLV
gML1K0qAUDoS2y+xD/FmAJttXFQ7KAVfx5sortVFTjfRFyTzqPyI+sNeFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGu/qstewgrNPCOqUwpu/EiBP1CYMB8GA1UdIwQY
MBaAFBh3sZ1IR/w/SVr5NsWxoZKMkSdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0hleG5VaEhfRDlKV3ZrMnhiR2hrb3lSSjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jMTIyYTctNTcxMi00YmJkLWI2Mzgt
YWM5YTkzMTcxYWE1LzEvR0hleG5VaEhfRDlKV3ZrMnhiR2hrb3lSSjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9jMTIyYTctNTcxMi00YmJkLWI2MzgtYWM5YTkzMTcxYWE1
LzEvR0hleG5VaEhfRDlKV3ZrMnhiR2hrb3lSSjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkwjHVib
FymT/t1UQqu29Iozw+VMfzOhuYVBFkWk+8ObsEpx9sdQoMQ8T535iL+FyB4U/0RA
2VF0wnazCVjNmaFfRWO0iZmARdBvwhw2u01wU1vpzP6tb5H3VrgctsFBOAZdQfx+
ia5HRkpvQz3qV5Pi+kg6+iRBClUNY7gq2ZJ9vxsLf2xGhkBgBw9wSjD6P0ID/o15
5CGdRZm7JN+SRDhudFKnp0VqsAJ/DwIYjmF0esgAtD6/721hzRodr/J4A+moehMe
yxX1KtoeaxK+LMmVqhjOUxTHrSWvQUWLNJbLx+h5sBabuG2PwfrcBxOs2Mjze3kX
1mq4lbGvui41vQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:27 2025 by rpki-client