
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: kzmGTIn4DOJXVGV3TYQhHGCTNJlqUSQr1W5xNbG+8KI=
Subject key identifier: 3A:95:E5:62:84:40:9C:B9:B7:B0:08:29:62:C3:33:FF:10:D3:B5:BE
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 0198819E5C60351FCD63204EFBD49B436E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 07B2
Signing time: Wed 06 Aug 2025 23:01:35 +0000
Manifest this update: Wed 06 Aug 2025 23:01:35 +0000
Manifest next update: Thu 07 Aug 2025 23:01:35 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: 8njdFMd4XDJWCAyMr+RB0HlbnC+wOYa2ITE4q5f4FO0=)
2: i3e8wCKSQ41m2OIaVF9MlCgeLgA.roa (hash: 4qgbTrajbEXgLsjqzkg5VgJTQJvi2U7RCx9bgextP3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:5c:60:35:1f:cd:63:20:4e:fb:d4:9b:43:6e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Aug 6 23:01:35 2025 GMT
Not After : Aug 7 23:01:35 2025 GMT
Subject: CN=3a95e56284409cb9b7b0082962c333ff10d3b5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:e4:84:c3:14:84:d9:d3:68:36:e4:5d:2c:
e2:b0:43:52:8a:ca:21:11:58:1b:b1:e1:d3:8b:e0:
bc:52:34:ba:0f:b2:a8:b5:9b:00:16:e9:65:b0:0f:
81:45:fd:23:57:b3:01:5a:7d:87:29:3d:ba:cc:98:
b9:63:fb:64:d0:15:7b:cf:19:e9:8b:00:87:40:81:
3b:8e:10:fc:ab:d7:48:20:0c:8a:f3:a1:9a:f6:db:
08:ad:dc:10:d6:63:3e:f6:6a:2d:d3:d6:3f:83:1d:
5b:28:59:fc:70:3c:59:c5:c2:8f:74:d9:d9:9d:96:
6e:dd:a1:74:a9:37:9b:79:0c:7c:44:be:2a:58:c0:
38:5a:ee:f6:1a:b7:c4:64:b6:a6:c7:fe:d1:9c:4b:
d9:3f:c2:2d:46:0f:84:4b:32:5d:89:6f:d8:61:f5:
aa:83:8e:bb:90:c7:d6:cd:46:3f:d9:12:4c:63:1c:
ad:98:bb:1f:f6:61:a5:7e:c5:ed:c1:2e:97:14:18:
51:ab:46:95:f6:7a:3f:e3:d9:7a:64:ca:3d:d2:90:
77:15:39:ef:c5:16:88:bf:f7:f6:3d:17:3a:b8:28:
41:3d:b0:e9:1f:b9:3b:31:9f:56:cb:7c:b5:2c:10:
ee:41:a9:e4:b6:f4:ac:f5:10:a0:7b:df:d7:89:b2:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:95:E5:62:84:40:9C:B9:B7:B0:08:29:62:C3:33:FF:10:D3:B5:BE
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b2:35:c5:fc:d8:6e:8d:be:a5:12:b8:88:1c:fd:15:4b:97:
e3:86:3e:3f:20:8c:ad:41:98:81:9e:b8:1f:0c:d1:83:a5:e0:
ff:60:cb:6c:ac:ae:dc:1a:ce:2b:ed:7e:68:00:40:27:56:2b:
66:fd:dc:35:95:eb:73:cc:7b:19:57:45:8e:a3:ed:48:30:be:
0a:f0:dc:0e:af:bc:2f:a7:77:bc:d8:42:4b:ae:f4:de:4a:84:
7d:9a:3a:b5:46:ac:47:fb:e0:af:30:93:08:58:dd:e8:d1:cd:
03:c3:de:fb:bc:b1:49:c1:a0:ec:9c:4a:ec:5d:4a:84:e9:cc:
df:c6:74:5c:05:7c:c7:dd:9c:59:31:af:c7:a7:35:44:b3:42:
8a:29:c9:15:e4:98:46:59:29:8a:27:a0:6b:97:2a:52:27:a9:
fc:00:7e:70:4b:09:e4:67:fc:85:bd:15:0a:24:ba:95:a1:41:
0b:9f:06:57:81:ec:c6:85:8a:5b:03:44:0b:cd:b5:8a:27:02:
bf:c2:9b:13:01:88:c9:8d:7f:50:9c:f0:e2:d0:85:19:b0:d1:
25:9a:67:24:88:08:35:e8:0f:84:58:30:01:9b:17:f9:da:5a:
d3:b3:d3:ee:cb:46:67:c0:84:8d:13:ec:48:cf:9a:8e:73:07:
55:df:d9:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBnlxgNR/NYyBO+9SbQ25XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDU4MDI5Yzk2Y2UyOGFmODAxOGQ1N2Y4ZmE0MDMxMjYx
NTFiZTYwHhcNMjUwODA2MjMwMTM1WhcNMjUwODA3MjMwMTM1WjAzMTEwLwYDVQQD
EygzYTk1ZTU2Mjg0NDA5Y2I5YjdiMDA4Mjk2MmMzMzNmZjEwZDNiNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk3khMMUhNnTaDbkXSzisENSisoh
EVgbseHTi+C8UjS6D7KotZsAFullsA+BRf0jV7MBWn2HKT26zJi5Y/tk0BV7zxnp
iwCHQIE7jhD8q9dIIAyK86Ga9tsIrdwQ1mM+9mot09Y/gx1bKFn8cDxZxcKPdNnZ
nZZu3aF0qTebeQx8RL4qWMA4Wu72GrfEZLamx/7RnEvZP8ItRg+ESzJdiW/YYfWq
g467kMfWzUY/2RJMYxytmLsf9mGlfsXtwS6XFBhRq0aV9no/49l6ZMo90pB3FTnv
xRaIv/f2PRc6uChBPbDpH7k7MZ9Wy3y1LBDuQanktvSs9RCge9/XibKK0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqV5WKEQJy5t7AIKWLDM/8Q07W+MB8GA1UdIwQY
MBaAFBoFgCnJbOKK+AGNV/j6QDEmFRvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wOWUzMjAtYTNiNi00NWNiLTg3YzAt
MjI4Mzk3NjY5NjBhLzEvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wOWUzMjAtYTNiNi00NWNiLTg3YzAtMjI4Mzk3NjY5NjBh
LzEvR2dXQUtjbHM0b3I0QVkxWC1QcEFNU1lWRy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7I1xfzY
bo2+pRK4iBz9FUuX44Y+PyCMrUGYgZ64HwzRg6Xg/2DLbKyu3BrOK+1+aABAJ1Yr
Zv3cNZXrc8x7GVdFjqPtSDC+CvDcDq+8L6d3vNhCS6703kqEfZo6tUasR/vgrzCT
CFjd6NHNA8Pe+7yxScGg7JxK7F1KhOnM38Z0XAV8x92cWTGvx6c1RLNCiinJFeSY
Rlkpiiega5cqUiep/AB+cEsJ5Gf8hb0VCiS6laFBC58GV4HsxoWKWwNEC821iicC
v8KbEwGIyY1/UJzw4tCFGbDRJZpnJIgINegPhFgwAZsX+dpa07PT7stGZ8CEjRPs
SM+ajnMHVd/ZbA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:37:47 2025 by rpki-client