
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: WzpuRJQ/5rfVFTIWVR/ZEZ26MZIuTdMHM8FqYhs1Ko0=
Subject key identifier: 9B:2B:E2:3C:E9:88:E6:D3:C6:3A:C3:DB:C9:FD:25:E9:3F:CA:97:27
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 01988FFE350ABC1D8591E4E34553EC85B65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 18:00:58 +0000
Manifest this update: Sat 09 Aug 2025 18:00:58 +0000
Manifest next update: Sun 10 Aug 2025 18:00:58 +0000
Files and hashes: 1: DEbqDj-D0KhPe_ozDfopNhqgvZc.roa (hash: 6XoIqk1u5dfBbYPK0R4bSxJz+kGjtKoT47/COVdRMu0=)
2: FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa (hash: Vq9OXxCy4cXw387lqVrsEZN9rZ1lStx9VD3OgQ3YBXs=)
3: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: aMBECVaD9TAWrl04krTIS4YRmpI1IRlLVSHZrWOOmM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:35:0a:bc:1d:85:91:e4:e3:45:53:ec:85:b6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Aug 9 18:00:58 2025 GMT
Not After : Aug 10 18:00:58 2025 GMT
Subject: CN=9b2be23ce988e6d3c63ac3dbc9fd25e93fca9727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:b2:b0:8e:da:9c:a3:0c:80:ec:d8:49:23:
fa:7c:01:b7:e9:dc:19:8d:fc:ed:f7:36:ff:b9:0b:
d9:38:07:21:ba:8e:86:55:69:a3:6d:fa:9c:38:70:
9b:66:ab:91:4a:1c:43:fe:2c:e3:c2:94:97:e6:a6:
23:15:34:ee:1c:03:cd:53:1a:1e:62:87:32:db:8e:
bc:ca:9d:13:c6:55:01:4c:5b:07:c7:1f:85:43:67:
10:57:e1:e2:8e:38:d9:b4:81:80:ac:fb:8f:e3:b0:
b9:fa:1f:6d:bd:0b:68:66:0c:39:78:a9:30:f3:46:
16:67:95:54:15:05:8d:48:81:98:a9:e7:8c:87:b2:
9a:8e:e0:f1:92:d0:48:05:03:37:49:3a:aa:88:ec:
47:0e:22:a2:5d:c3:12:03:ed:82:c8:f3:17:56:92:
91:e1:1b:c7:94:38:19:17:db:b0:c4:74:bf:7b:3e:
4d:bb:8a:92:c8:58:6f:ba:06:b7:f9:3f:10:fd:9d:
d5:b7:8b:7b:a1:fb:2a:ad:9b:19:39:5c:03:c4:9b:
d8:48:9c:96:72:95:de:bd:36:59:2e:6a:ef:d7:3a:
2d:8f:8a:56:33:4a:3c:62:db:87:63:1a:b1:aa:39:
95:72:2d:f2:20:04:8c:85:e6:24:4f:b4:69:c8:fb:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:E2:3C:E9:88:E6:D3:C6:3A:C3:DB:C9:FD:25:E9:3F:CA:97:27
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6d:42:fa:e5:56:24:65:fc:0e:33:6e:67:c5:05:e5:90:cc:
bf:00:64:a6:56:df:0a:ab:41:86:d0:ad:f4:71:42:d4:b8:8b:
c2:91:d2:ab:3a:5c:fc:ed:9d:45:ec:b2:24:a4:b6:21:dd:2d:
94:8a:68:52:50:4e:da:8f:1e:e3:5b:70:98:cb:d1:06:af:6c:
09:cb:a4:6f:46:0e:2e:a3:87:35:4f:dd:77:34:d5:eb:d1:ed:
91:2d:e6:2b:e3:0d:09:2e:b0:2b:88:f5:2a:4c:dd:db:7b:44:
1a:1c:e1:3d:6f:ec:78:92:1b:34:6d:45:50:e4:21:be:6b:3a:
fb:2c:1a:88:00:2a:e3:b5:02:f9:e8:ae:29:e7:58:8c:e3:be:
c1:81:8b:12:bf:67:45:03:ae:5d:78:04:12:55:37:cd:4b:4c:
23:f8:76:b3:ae:90:d9:f6:70:ac:cc:1d:bf:52:da:c3:2b:5b:
b4:a0:22:aa:3e:4b:dc:64:5a:c6:e0:5d:79:34:94:ac:9b:43:
10:2d:5b:e0:18:63:3c:81:e9:44:aa:ee:dc:88:d6:64:5c:5c:
71:44:c4:20:2c:27:1d:ab:7c:6c:62:0d:67:e2:94:29:ce:e8:
eb:32:7f:7f:51:5c:d8:e3:b1:44:1a:d2:ef:72:63:f3:52:13:
94:33:03:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiP/jUKvB2FkeTjRVPshbZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZWJhZjJjYmE4MzU5NDM4ZTQzNDEyM2RkYTdhNWEzOTZm
NWY1MTkwHhcNMjUwODA5MTgwMDU4WhcNMjUwODEwMTgwMDU4WjAzMTEwLwYDVQQD
Eyg5YjJiZTIzY2U5ODhlNmQzYzYzYWMzZGJjOWZkMjVlOTNmY2E5NzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaSysI7anKMMgOzYSSP6fAG36dwZ
jfzt9zb/uQvZOAchuo6GVWmjbfqcOHCbZquRShxD/izjwpSX5qYjFTTuHAPNUxoe
Yocy2468yp0TxlUBTFsHxx+FQ2cQV+HijjjZtIGArPuP47C5+h9tvQtoZgw5eKkw
80YWZ5VUFQWNSIGYqeeMh7KajuDxktBIBQM3STqqiOxHDiKiXcMSA+2CyPMXVpKR
4RvHlDgZF9uwxHS/ez5Nu4qSyFhvuga3+T8Q/Z3Vt4t7ofsqrZsZOVwDxJvYSJyW
cpXevTZZLmrv1zotj4pWM0o8YtuHYxqxqjmVci3yIASMheYkT7RpyPujSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsr4jzpiObTxjrD28n9Jek/ypcnMB8GA1UdIwQY
MBaAFIDrryy6g1lDjkNBI92npaOW9fUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDkt
Zjc4YmRiNmY2MGMyLzEvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDktZjc4YmRiNmY2MGMy
LzEvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIW1C+uVW
JGX8DjNuZ8UF5ZDMvwBkplbfCqtBhtCt9HFC1LiLwpHSqzpc/O2dReyyJKS2Id0t
lIpoUlBO2o8e41twmMvRBq9sCcukb0YOLqOHNU/ddzTV69HtkS3mK+MNCS6wK4j1
Kkzd23tEGhzhPW/seJIbNG1FUOQhvms6+ywaiAAq47UC+eiuKedYjOO+wYGLEr9n
RQOuXXgEElU3zUtMI/h2s66Q2fZwrMwdv1LawytbtKAiqj5L3GRaxuBdeTSUrJtD
EC1b4BhjPIHpRKru3IjWZFxccUTEICwnHat8bGINZ+KUKc7o6zJ/f1Fc2OOxRBrS
73Jj81ITlDMDFg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:24 2025 by rpki-client