Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
File: GXXTHyIv7CWL1HYY_flMURzl4G4.mft (raw, json)
Hash identifier: O1TCgEV7sBWG/KZMotzBzYTMAQ2cdldctkW9tNifmDw=
Subject key identifier: 01:6F:06:22:92:CE:A9:68:13:01:57:E1:8B:1A:C4:D1:C7:4F:AE:59
Authority key identifier: 19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
Certificate issuer: /CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Certificate serial: 01974A7B4DDA403D40D3EB986BEDD35BD430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
Manifest number: 0CC0
Signing time: Sat 07 Jun 2025 13:01:24 +0000
Manifest this update: Sat 07 Jun 2025 13:01:24 +0000
Manifest next update: Sun 08 Jun 2025 13:01:24 +0000
Files and hashes: 1: GXXTHyIv7CWL1HYY_flMURzl4G4.crl (hash: wsF9xI9eutAt1Uxkjv3rfvmFe1h2Yz7s8jQo7U9WzEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:4d:da:40:3d:40:d3:eb:98:6b:ed:d3:5b:d4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Validity
Not Before: Jun 7 13:01:24 2025 GMT
Not After : Jun 8 13:01:24 2025 GMT
Subject: CN=016f062292cea968130157e18b1ac4d1c74fae59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:75:67:ee:fc:e8:31:82:80:ee:17:87:88:
88:de:54:f5:a6:db:e7:d8:ed:73:f5:96:8e:c2:af:
34:5f:42:c1:fe:86:ae:27:f9:1a:2a:61:6a:6b:48:
12:01:07:eb:7d:8e:71:01:e6:3f:e1:a9:61:29:99:
de:62:b0:73:dd:e8:28:2b:00:92:e1:7f:09:26:0f:
06:7c:53:7e:f1:57:8e:15:f4:53:f8:2f:c4:4b:3d:
7b:6d:fd:e5:e2:d5:e7:71:56:ac:a3:b0:8b:80:b9:
b0:88:03:13:c4:87:8e:1b:d0:83:4a:b8:a7:19:22:
a0:5c:ba:6c:97:89:fa:81:b7:0e:b4:a3:d5:79:87:
c3:3b:dc:6a:df:4c:63:90:91:4a:82:37:35:03:ba:
95:a9:1a:75:31:02:86:a2:6c:af:21:83:f2:5f:bc:
c7:96:76:12:25:73:cd:1e:9b:8b:67:7f:78:c7:31:
74:8e:27:6f:eb:f6:bb:87:98:3e:de:22:19:b5:a6:
0b:1d:bd:45:10:25:27:0b:90:04:fa:c9:52:e6:52:
97:11:75:df:20:c2:bd:ef:46:9d:3e:1a:e7:7c:6d:
9e:5f:2d:54:32:88:a9:84:0e:5f:d1:45:ce:90:05:
f9:83:2f:f4:c3:79:c1:be:f7:cf:d9:aa:32:6f:bd:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6F:06:22:92:CE:A9:68:13:01:57:E1:8B:1A:C4:D1:C7:4F:AE:59
X509v3 Authority Key Identifier:
keyid:19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ab:63:aa:68:53:7d:fb:44:07:8d:49:83:9e:71:86:4e:79:
20:05:eb:8c:11:0f:3b:81:fc:f6:e2:37:41:35:89:18:2d:9e:
af:c4:16:39:32:21:9a:2f:1b:bb:9b:b0:12:75:b4:70:20:aa:
a8:fc:0a:7a:78:ed:ba:32:3a:ac:c8:2b:d1:0e:59:2d:6e:18:
01:5a:1b:31:6c:62:eb:df:6d:97:a8:af:e8:ee:a5:1d:5b:ee:
27:c5:b8:b3:63:b3:1e:63:13:b8:25:f8:e6:3d:45:3c:54:5c:
b4:ad:62:d2:ee:a7:e4:84:36:89:0f:03:ed:7e:e9:7c:0e:b3:
33:3f:66:53:f8:cf:a5:7c:d4:8d:94:77:93:90:d8:38:5c:d1:
12:7e:1d:94:d6:3d:97:45:52:59:93:ea:5d:e5:39:21:25:6c:
74:49:40:77:f6:fd:ad:45:14:b2:19:9a:3e:fe:88:9d:3c:15:
0d:9c:d0:72:63:be:fb:5f:b6:45:80:ea:cc:80:68:4b:d2:28:
ff:38:df:bd:35:2d:fd:1b:29:5f:df:e4:78:45:de:80:61:2e:
0f:44:97:03:ea:29:64:d6:9c:44:7e:18:42:04:48:32:e8:13:
36:3e:3c:e1:59:0e:9e:b5:2a:df:01:c7:b6:fd:1a:87:23:ed:
ac:59:d6:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe03aQD1A0+uYa+3TW9QwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NzVkMzFmMjIyZmVjMjU4YmQ0NzYxOGZkZjk0YzUxMWNl
NWUwNmUwHhcNMjUwNjA3MTMwMTI0WhcNMjUwNjA4MTMwMTI0WjAzMTEwLwYDVQQD
EygwMTZmMDYyMjkyY2VhOTY4MTMwMTU3ZTE4YjFhYzRkMWM3NGZhZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhh1Z+786DGCgO4Xh4iI3lT1ptvn
2O1z9ZaOwq80X0LB/oauJ/kaKmFqa0gSAQfrfY5xAeY/4alhKZneYrBz3egoKwCS
4X8JJg8GfFN+8VeOFfRT+C/ESz17bf3l4tXncVaso7CLgLmwiAMTxIeOG9CDSrin
GSKgXLpsl4n6gbcOtKPVeYfDO9xq30xjkJFKgjc1A7qVqRp1MQKGomyvIYPyX7zH
lnYSJXPNHpuLZ394xzF0jidv6/a7h5g+3iIZtaYLHb1FECUnC5AE+slS5lKXEXXf
IMK970adPhrnfG2eXy1UMoiphA5f0UXOkAX5gy/0w3nBvvfP2aoyb72+sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFvBiKSzqloEwFX4YsaxNHHT65ZMB8GA1UdIwQY
MBaAFBl10x8iL+wli9R2GP35TFEc5eBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1hYVEh5SXY3Q1dMMUhZWV9mbE1VUnpsNEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82Y2NhYTktOWJmNi00NWMxLWI5YWMt
NjE1ZjY2ZmRlZGVjLzEvR1hYVEh5SXY3Q1dMMUhZWV9mbE1VUnpsNEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82Y2NhYTktOWJmNi00NWMxLWI5YWMtNjE1ZjY2ZmRlZGVj
LzEvR1hYVEh5SXY3Q1dMMUhZWV9mbE1VUnpsNEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmatjqmhT
fftEB41Jg55xhk55IAXrjBEPO4H89uI3QTWJGC2er8QWOTIhmi8bu5uwEnW0cCCq
qPwKenjtujI6rMgr0Q5ZLW4YAVobMWxi699tl6iv6O6lHVvuJ8W4s2OzHmMTuCX4
5j1FPFRctK1i0u6n5IQ2iQ8D7X7pfA6zMz9mU/jPpXzUjZR3k5DYOFzREn4dlNY9
l0VSWZPqXeU5ISVsdElAd/b9rUUUshmaPv6InTwVDZzQcmO++1+2RYDqzIBoS9Io
/zjfvTUt/RspX9/keEXegGEuD0SXA+opZNacRH4YQgRIMugTNj484VkOnrUq3wHH
tv0ahyPtrFnWHg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:23:18 2025 by rpki-client