Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier: nXqqIQ99dcuMpYP2pNC5ocrJ1G3upFVSnYdmAoBh98U=
Subject key identifier: 56:0A:D4:B7:A5:A1:4E:39:51:1B:06:E0:F5:22:09:3C:AB:0F:C7:25
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 01988D6AB0654BE90DD7F9448FB26F8A5202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 06:00:36 +0000
Manifest this update: Sat 09 Aug 2025 06:00:36 +0000
Manifest next update: Sun 10 Aug 2025 06:00:36 +0000
Files and hashes: 1: LjTHS4WiiLbIvDv29J3ieyKf9N4.roa (hash: 0M1gHDPS8KhOTlzfhUcKPBiuX1DLKJxKwDXRimBbw2c=)
2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: 4H1p379O2Zh9yNzG7BDb81M1/wdfhtm63suF7BmoiyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:b0:65:4b:e9:0d:d7:f9:44:8f:b2:6f:8a:52:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Aug 9 06:00:36 2025 GMT
Not After : Aug 10 06:00:36 2025 GMT
Subject: CN=560ad4b7a5a14e39511b06e0f522093cab0fc725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:6c:14:9e:d7:e7:09:06:a5:f0:b7:ff:5b:
cd:f7:9b:85:7e:84:41:19:72:99:44:71:10:ef:6b:
6a:83:3d:32:73:4a:6b:d7:b8:bc:6b:7d:c6:ce:6a:
56:53:28:62:54:66:f7:c1:82:f4:95:41:4a:49:9e:
fd:34:f2:a6:e3:e1:cf:b3:7f:ea:56:56:1e:68:95:
4f:db:ba:a9:7c:9b:4e:f1:87:b8:b3:dd:91:71:09:
e8:80:0b:73:84:aa:a0:af:60:33:ca:05:a0:d9:50:
67:40:5e:eb:6f:58:40:5e:2e:a6:58:18:0c:9d:c4:
2f:bd:e0:6e:5b:56:78:21:e3:09:83:e1:4c:7f:9b:
52:24:7f:3d:26:cc:45:95:53:ac:31:78:6b:fd:89:
e5:19:37:06:43:11:88:8f:7c:3a:65:48:0e:8b:43:
b8:58:40:b3:f0:6b:30:cd:5f:c2:21:5e:cc:32:ef:
0e:90:37:30:cb:48:ca:7d:76:50:67:df:f9:64:cd:
9f:f9:87:84:ec:23:4a:cd:84:e1:26:3d:93:4b:a3:
1e:97:1b:03:ed:17:fa:0a:c4:28:46:22:f5:4f:c4:
55:50:70:0f:25:d8:9f:6f:07:84:b0:56:9f:97:ae:
24:da:16:71:75:d0:73:66:4f:61:ff:d8:e4:71:78:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0A:D4:B7:A5:A1:4E:39:51:1B:06:E0:F5:22:09:3C:AB:0F:C7:25
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:01:53:93:f7:b2:a2:60:fd:51:20:37:6f:71:db:2e:ec:3f:
7a:99:4a:b0:59:55:ae:49:b5:1a:6d:fb:88:6d:e0:8d:88:3d:
87:af:aa:c2:50:55:71:a9:e6:45:e8:cb:3f:21:f3:91:f8:68:
72:91:26:52:5f:a7:2e:95:93:fa:92:fb:0f:27:c3:51:87:46:
ac:51:09:db:0e:3e:92:c0:a7:07:fc:3f:53:e3:05:7f:3e:2a:
a0:fa:01:70:97:1e:38:d5:49:aa:7d:de:98:8d:d7:40:cb:fd:
32:9b:89:f7:4d:2b:52:ae:cc:b8:3c:ec:58:38:de:49:91:f6:
ea:51:73:70:d7:89:f0:df:b9:84:08:24:b5:53:12:fc:34:d2:
06:e7:4c:03:45:51:62:a6:ff:02:f8:30:7d:7d:45:51:a4:8e:
d0:83:43:ab:52:79:35:66:5c:66:7c:75:92:b0:da:21:2f:86:
28:73:1c:c0:c3:8b:66:93:72:00:56:08:5a:a1:7d:1c:14:d1:
c1:3d:e3:79:df:19:e9:2b:83:20:ea:55:c4:83:37:2c:52:61:
b3:c8:97:a9:c0:7f:48:b1:ae:32:83:80:1d:7a:d4:97:5a:59:
c0:21:67:4b:55:96:f6:33:0d:8f:18:bc:e7:75:3c:fe:2b:ac:
4b:e5:c6:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNarBlS+kN1/lEj7JvilICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMTI0ZDA0MTFhMjBmZDJiYjU0Njk3MGVhODAxMTZlZjI3
NmRiYWIwHhcNMjUwODA5MDYwMDM2WhcNMjUwODEwMDYwMDM2WjAzMTEwLwYDVQQD
Eyg1NjBhZDRiN2E1YTE0ZTM5NTExYjA2ZTBmNTIyMDkzY2FiMGZjNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx21sFJ7X5wkGpfC3/1vN95uFfoRB
GXKZRHEQ72tqgz0yc0pr17i8a33GzmpWUyhiVGb3wYL0lUFKSZ79NPKm4+HPs3/q
VlYeaJVP27qpfJtO8Ye4s92RcQnogAtzhKqgr2AzygWg2VBnQF7rb1hAXi6mWBgM
ncQvveBuW1Z4IeMJg+FMf5tSJH89JsxFlVOsMXhr/YnlGTcGQxGIj3w6ZUgOi0O4
WECz8GswzV/CIV7MMu8OkDcwy0jKfXZQZ9/5ZM2f+YeE7CNKzYThJj2TS6MelxsD
7Rf6CsQoRiL1T8RVUHAPJdifbweEsFafl64k2hZxddBzZk9h/9jkcXgaWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYK1LeloU45URsG4PUiCTyrD8clMB8GA1UdIwQY
MBaAFIMSTQQRog/Su1RpcOqAEW7ydturMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmIt
ZmNmMGYxNTk0ZDJmLzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmItZmNmMGYxNTk0ZDJm
LzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngFTk/ey
omD9USA3b3HbLuw/eplKsFlVrkm1Gm37iG3gjYg9h6+qwlBVcanmRejLPyHzkfho
cpEmUl+nLpWT+pL7DyfDUYdGrFEJ2w4+ksCnB/w/U+MFfz4qoPoBcJceONVJqn3e
mI3XQMv9MpuJ900rUq7MuDzsWDjeSZH26lFzcNeJ8N+5hAgktVMS/DTSBudMA0VR
Yqb/AvgwfX1FUaSO0INDq1J5NWZcZnx1krDaIS+GKHMcwMOLZpNyAFYIWqF9HBTR
wT3jed8Z6SuDIOpVxIM3LFJhs8iXqcB/SLGuMoOAHXrUl1pZwCFnS1WW9jMNjxi8
53U8/iusS+XGeA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:47 2025 by rpki-client