Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: /qjDEhiZmoinlg7S95tzOQmuGsSUL0XLK0JhbVGt4V0=
Subject key identifier: DB:CC:85:32:E8:3C:76:3B:59:CA:67:E2:FC:97:5D:35:2F:0C:D5:69
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 0197658483AF49752627A37C5BC44D0D70F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 151D
Signing time: Thu 12 Jun 2025 19:01:12 +0000
Manifest this update: Thu 12 Jun 2025 19:01:12 +0000
Manifest next update: Fri 13 Jun 2025 19:01:12 +0000
Files and hashes: 1: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: QDWK0VEU1lx63BqGw4I1DKBQFSGDFGB3qY9iEY2N+hA=)
2: n3bBKfncJSw0BedT5BmrufOi-w4.roa (hash: payevUddDm69dVPoygf/tnvW3ppO/jdm5/2U7r6MPRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:84:83:af:49:75:26:27:a3:7c:5b:c4:4d:0d:70:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Jun 12 19:01:12 2025 GMT
Not After : Jun 13 19:01:12 2025 GMT
Subject: CN=dbcc8532e83c763b59ca67e2fc975d352f0cd569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:1d:05:1a:d4:ab:c5:d1:e5:42:76:a4:33:
76:bb:89:07:32:e4:fc:d8:31:0e:d0:27:f7:a1:3c:
f4:8d:4e:81:65:f3:6e:d1:02:93:ba:09:87:b8:dd:
4a:95:19:74:e7:58:35:5d:cc:67:73:9e:cc:f1:2c:
f6:cd:ec:db:0d:5b:d0:86:0a:a9:5d:24:1f:79:6f:
cc:ae:3e:e8:16:0e:88:47:1d:df:31:20:3b:43:61:
0f:d3:1d:70:25:46:7e:15:78:a8:fd:5f:be:c2:af:
7e:7b:c0:97:56:e5:a3:19:d3:2e:6e:2b:70:5b:8f:
3a:b6:61:49:a7:a4:8e:1f:38:cf:93:b5:eb:d3:14:
c2:26:3f:86:0e:55:b0:4a:23:6e:ea:66:d8:67:97:
31:58:fb:f5:92:9d:af:80:a7:3a:19:1c:6e:14:93:
f7:7c:4d:0d:27:70:27:f8:a7:85:d5:7f:88:51:27:
cb:11:69:7b:7b:93:1a:a4:04:df:79:96:b9:bc:42:
78:90:19:fe:3b:e1:83:a5:de:47:6b:26:f6:38:94:
8d:b7:77:f7:dd:b2:e4:ac:ed:6a:4e:b8:8c:09:30:
28:28:0d:c4:f1:f3:b0:36:5e:5c:ad:8f:7f:1c:a7:
a2:83:e2:13:06:17:f4:26:22:de:94:ba:f2:27:25:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CC:85:32:E8:3C:76:3B:59:CA:67:E2:FC:97:5D:35:2F:0C:D5:69
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6a:b3:d9:ee:4a:9c:18:67:b8:3f:ed:a4:a6:c7:ee:1c:0e:
36:0e:4a:4b:cb:40:f8:af:2b:47:f9:61:f8:fc:54:ad:76:ee:
47:15:d5:14:f4:67:6e:69:59:37:e9:38:88:87:50:a3:7d:b7:
40:7b:e9:b2:03:82:f8:1f:fc:ea:90:28:b3:4c:cd:63:0d:d3:
89:6b:ba:16:b9:92:be:fd:d7:10:65:27:19:5f:4a:0c:ec:c1:
ad:9c:34:72:a9:f8:1c:4f:a3:50:cd:99:26:dc:00:ea:77:4c:
db:7c:e8:6c:b0:2f:de:25:f0:4f:dd:ad:5e:95:c5:98:fa:76:
a9:f7:a1:99:f3:82:e4:c3:72:49:5e:f3:6f:ab:07:63:ab:c0:
b9:f2:3e:dd:f1:1c:c3:99:4f:8b:d9:a8:71:17:a7:91:8c:43:
f9:31:42:c8:cc:8a:39:13:29:9a:94:ae:5d:6f:2f:88:3a:fe:
f0:a6:1c:42:49:ee:2b:f8:4b:43:de:d5:66:14:df:7b:32:6c:
f5:9d:41:21:e1:96:21:a1:c0:4a:fe:6a:da:81:e8:b6:84:2f:
38:2b:53:4d:3f:a7:69:69:6b:a8:60:b2:f3:78:a3:32:80:e2:
fd:4d:ff:51:f0:c7:23:97:24:46:f2:12:87:ac:ea:b4:36:3c:
5b:69:b4:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdlhIOvSXUmJ6N8W8RNDXDzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OGVkNDg4NGYxMTE5MzljYTZjN2YwZjM0YjI3OTJiMzli
OTM0MjMwHhcNMjUwNjEyMTkwMTEyWhcNMjUwNjEzMTkwMTEyWjAzMTEwLwYDVQQD
EyhkYmNjODUzMmU4M2M3NjNiNTljYTY3ZTJmYzk3NWQzNTJmMGNkNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuIdBRrUq8XR5UJ2pDN2u4kHMuT8
2DEO0Cf3oTz0jU6BZfNu0QKTugmHuN1KlRl051g1Xcxnc57M8Sz2zezbDVvQhgqp
XSQfeW/Mrj7oFg6IRx3fMSA7Q2EP0x1wJUZ+FXio/V++wq9+e8CXVuWjGdMubitw
W486tmFJp6SOHzjPk7Xr0xTCJj+GDlWwSiNu6mbYZ5cxWPv1kp2vgKc6GRxuFJP3
fE0NJ3An+KeF1X+IUSfLEWl7e5MapATfeZa5vEJ4kBn+O+GDpd5Hayb2OJSNt3f3
3bLkrO1qTriMCTAoKA3E8fOwNl5crY9/HKeig+ITBhf0JiLelLryJyUDEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvMhTLoPHY7Wcpn4vyXXTUvDNVpMB8GA1UdIwQY
MBaAFBiO1IhPERk5ymx/DzSyeSs5uTQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQt
NWUwNzc3YjA0MDQ5LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQtNWUwNzc3YjA0MDQ5
LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2qz2e5K
nBhnuD/tpKbH7hwONg5KS8tA+K8rR/lh+PxUrXbuRxXVFPRnbmlZN+k4iIdQo323
QHvpsgOC+B/86pAos0zNYw3TiWu6FrmSvv3XEGUnGV9KDOzBrZw0cqn4HE+jUM2Z
JtwA6ndM23zobLAv3iXwT92tXpXFmPp2qfehmfOC5MNySV7zb6sHY6vAufI+3fEc
w5lPi9mocRenkYxD+TFCyMyKORMpmpSuXW8viDr+8KYcQknuK/hLQ97VZhTfezJs
9Z1BIeGWIaHASv5q2oHotoQvOCtTTT+naWlrqGCy83ijMoDi/U3/UfDHI5ckRvIS
h6zqtDY8W2m0Qw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 23:35:32 2025 by rpki-client