Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
File: GQoJUehsDePU6zKmwyaJECtyel8.mft (raw, json)
Hash identifier: /tvsrmEHFoThG2Poa/DeF6c1hlf1Ceohlu7qXMm0ZG0=
Subject key identifier: 54:3D:EE:43:55:C0:B2:00:A6:AD:9C:AC:5A:B3:CC:D6:9C:52:6A:D6
Authority key identifier: 19:0A:09:51:E8:6C:0D:E3:D4:EB:32:A6:C3:26:89:10:2B:72:7A:5F
Certificate issuer: /CN=190a0951e86c0de3d4eb32a6c32689102b727a5f
Certificate serial: 01974A43A1EF82A5367A97CA011C146BD264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQoJUehsDePU6zKmwyaJECtyel8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
Manifest number: 31
Signing time: Sat 07 Jun 2025 12:00:35 +0000
Manifest this update: Sat 07 Jun 2025 12:00:35 +0000
Manifest next update: Sun 08 Jun 2025 12:00:35 +0000
Files and hashes: 1: GQoJUehsDePU6zKmwyaJECtyel8.crl (hash: wdKpwHe+BpGytPR1OyXIhvyt+L6sW3Ka7Fy0MCh9mvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQoJUehsDePU6zKmwyaJECtyel8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:a1:ef:82:a5:36:7a:97:ca:01:1c:14:6b:d2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190a0951e86c0de3d4eb32a6c32689102b727a5f
Validity
Not Before: Jun 7 12:00:35 2025 GMT
Not After : Jun 8 12:00:35 2025 GMT
Subject: CN=543dee4355c0b200a6ad9cac5ab3ccd69c526ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:d9:5c:31:14:96:cc:bf:c5:b2:40:82:dd:
e8:56:ae:0c:2c:c6:2c:db:cf:1c:c3:42:d9:4f:e9:
fc:7a:bd:ff:2f:81:9d:fd:67:c9:77:e5:97:4d:8a:
05:c7:e2:40:f7:d6:66:84:7f:d0:14:0f:b2:4b:6d:
ed:73:0c:e2:7a:fc:bf:ba:3c:9e:cd:18:7c:05:ae:
09:6f:95:b9:96:11:f3:b2:77:90:fb:a6:b8:63:40:
66:a8:5f:87:e5:74:8e:88:7e:44:4e:79:de:aa:e1:
11:8d:df:a9:c6:8a:1d:4d:7d:e8:03:f8:22:26:a8:
02:96:6f:49:4a:cd:37:4a:ee:5e:20:c1:d4:3f:93:
6d:ee:35:20:77:72:f7:1d:98:43:45:36:76:ae:63:
bb:6a:48:44:a5:8a:7a:44:04:63:aa:0e:9a:64:6b:
9b:2c:85:4c:cf:83:d0:4d:f0:c6:cf:92:d3:58:eb:
ad:3a:5b:2e:2f:6e:53:01:e6:68:f8:0e:33:3d:c8:
2c:49:09:69:cb:ee:30:94:17:65:a7:e0:ea:45:67:
b8:40:f6:e3:c4:8b:de:14:5e:7a:0d:c3:37:e0:69:
03:8a:0a:92:b0:89:d3:38:ec:1d:54:68:b5:a2:30:
ec:d2:ea:23:0b:15:0e:2e:c6:57:00:5e:0b:12:3a:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3D:EE:43:55:C0:B2:00:A6:AD:9C:AC:5A:B3:CC:D6:9C:52:6A:D6
X509v3 Authority Key Identifier:
keyid:19:0A:09:51:E8:6C:0D:E3:D4:EB:32:A6:C3:26:89:10:2B:72:7A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQoJUehsDePU6zKmwyaJECtyel8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:25:7f:be:f7:cc:b5:6f:88:c5:a7:9b:a6:12:f6:9d:9a:92:
19:f2:d1:d4:c8:72:88:70:6c:cf:65:9e:85:0b:20:7d:3d:22:
a6:65:4a:e4:9a:0d:97:f5:d1:dd:67:22:a8:d2:71:eb:b4:ac:
f0:b6:b8:d3:d0:d7:b4:ac:14:c5:a5:20:8f:f4:58:e0:00:4e:
61:4c:f4:fd:18:bb:4f:a3:33:3d:f5:fc:51:4d:39:15:51:88:
03:58:ac:0a:b5:ff:bb:42:31:33:56:31:08:1e:90:4c:df:bd:
2e:50:78:95:1a:47:d1:13:08:6a:3b:63:34:14:53:dc:da:89:
d9:b2:61:1d:3a:f8:3c:6c:18:80:96:95:05:16:26:88:e9:c2:
84:f3:93:da:9c:7c:a9:bc:96:91:c6:42:b6:31:34:4e:22:0f:
d6:2c:2a:ff:5a:80:d3:8d:0c:c4:3b:50:90:70:e0:79:e9:e6:
1e:ee:b2:bc:36:17:95:43:6b:fb:54:8a:93:0e:9d:50:31:80:
6b:7a:a3:13:d4:53:31:e0:3b:ab:8d:3f:00:93:36:f5:f4:21:
f3:13:1d:65:44:9a:85:fe:88:d9:67:d6:ed:cf:70:1a:bf:96:
e4:bd:06:55:dc:83:88:db:98:de:f3:c4:ff:aa:c4:e9:5a:2d:
53:21:e2:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ6HvgqU2epfKARwUa9JkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MGEwOTUxZTg2YzBkZTNkNGViMzJhNmMzMjY4OTEwMmI3
MjdhNWYwHhcNMjUwNjA3MTIwMDM1WhcNMjUwNjA4MTIwMDM1WjAzMTEwLwYDVQQD
Eyg1NDNkZWU0MzU1YzBiMjAwYTZhZDljYWM1YWIzY2NkNjljNTI2YWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwTZXDEUlsy/xbJAgt3oVq4MLMYs
288cw0LZT+n8er3/L4Gd/WfJd+WXTYoFx+JA99ZmhH/QFA+yS23tcwzievy/ujye
zRh8Ba4Jb5W5lhHzsneQ+6a4Y0BmqF+H5XSOiH5ETnnequERjd+pxoodTX3oA/gi
JqgClm9JSs03Su5eIMHUP5Nt7jUgd3L3HZhDRTZ2rmO7akhEpYp6RARjqg6aZGub
LIVMz4PQTfDGz5LTWOutOlsuL25TAeZo+A4zPcgsSQlpy+4wlBdlp+DqRWe4QPbj
xIveFF56DcM34GkDigqSsInTOOwdVGi1ojDs0uojCxUOLsZXAF4LEjq45wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQ97kNVwLIApq2crFqzzNacUmrWMB8GA1UdIwQY
MBaAFBkKCVHobA3j1OsypsMmiRArcnpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FvSlVlaHNEZVBVNnpLbXd5YUpFQ3R5ZWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jZmI2ZjctZWMyZi00MGM0LTk0YWIt
MDU5NjA2MWU4MDYwLzEvR1FvSlVlaHNEZVBVNnpLbXd5YUpFQ3R5ZWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jZmI2ZjctZWMyZi00MGM0LTk0YWItMDU5NjA2MWU4MDYw
LzEvR1FvSlVlaHNEZVBVNnpLbXd5YUpFQ3R5ZWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyV/vvfM
tW+IxaebphL2nZqSGfLR1MhyiHBsz2WehQsgfT0ipmVK5JoNl/XR3WciqNJx67Ss
8La409DXtKwUxaUgj/RY4ABOYUz0/Ri7T6MzPfX8UU05FVGIA1isCrX/u0IxM1Yx
CB6QTN+9LlB4lRpH0RMIajtjNBRT3NqJ2bJhHTr4PGwYgJaVBRYmiOnChPOT2px8
qbyWkcZCtjE0TiIP1iwq/1qA040MxDtQkHDgeenmHu6yvDYXlUNr+1SKkw6dUDGA
a3qjE9RTMeA7q40/AJM29fQh8xMdZUSahf6I2WfW7c9wGr+W5L0GVdyDiNuY3vPE
/6rE6VotUyHiBA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:15:37 2025 by rpki-client