Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier: e3hnORFbQx2j02rbS66FEGYixZ9WrPbWMO9JQ+nO7kE=
Subject key identifier: 33:91:60:70:CB:96:E3:53:E2:B5:9D:3C:9D:E6:E9:A2:21:9F:97:DA
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 019891EC5D1548B50197A865297CAA1BDD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number: 0701
Signing time: Sun 10 Aug 2025 03:00:43 +0000
Manifest this update: Sun 10 Aug 2025 03:00:43 +0000
Manifest next update: Mon 11 Aug 2025 03:00:43 +0000
Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: e2Dw15KOpjnsXSvBb29KSF4wx7MzhkG/VmvhK2YXpo8=)
2: YdrEYumUdtVM8J8IIs8UcIvimLU.roa (hash: Q1VxicqBbCeOUqKh1Ex9vJAFuLnRZwsg3d3+Cv9fZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:5d:15:48:b5:01:97:a8:65:29:7c:aa:1b:dd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Aug 10 03:00:43 2025 GMT
Not After : Aug 11 03:00:43 2025 GMT
Subject: CN=33916070cb96e353e2b59d3c9de6e9a2219f97da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:72:32:2e:b0:83:84:bf:a8:05:f6:b9:ee:
b2:b6:db:bc:35:64:82:f3:a4:70:8f:ca:a7:f8:8a:
80:50:6b:90:9b:50:f7:37:f4:5f:20:e0:47:52:f3:
e4:dc:c1:09:17:9b:be:75:f4:00:0c:9c:25:ca:e2:
17:b9:12:95:ef:6a:51:a2:08:93:93:98:b5:f4:ae:
bb:0e:a6:a5:b9:75:48:df:4e:68:ab:03:b5:48:1b:
ff:b9:a1:05:9f:54:fe:9e:2a:b7:5b:06:8a:33:8a:
8d:7b:8f:7b:bd:07:e0:9c:7f:0d:1c:eb:47:3a:c4:
20:30:ce:84:c4:2f:3d:ff:f0:96:f7:21:9a:6f:d1:
28:f3:3f:c4:f4:08:6a:b6:22:14:3a:9b:c0:9a:4d:
28:f6:41:ba:c0:6f:47:4d:43:23:e7:02:b3:d8:87:
c0:a5:1f:48:6a:ac:ff:88:d3:ac:9c:26:2f:4a:22:
22:b3:26:08:69:c0:00:64:06:42:ca:77:18:3d:b0:
2f:7f:5f:32:83:ff:0c:22:a7:d8:64:c8:3a:3a:da:
39:45:37:61:8c:a8:64:3b:5f:c1:96:e4:7c:a9:bf:
e3:a2:b7:e6:13:bf:ed:d6:91:6f:fc:89:c5:d1:ff:
7c:2f:bb:20:5e:ef:e4:72:ff:e2:cf:ae:fa:60:18:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:91:60:70:CB:96:E3:53:E2:B5:9D:3C:9D:E6:E9:A2:21:9F:97:DA
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3b:e8:3f:c8:60:d8:2d:9b:66:8f:6b:5c:91:a1:f4:85:52:
8c:44:f9:09:a2:4b:59:68:74:25:86:d9:14:22:a0:78:40:9c:
9f:5f:25:24:34:a6:6b:a2:32:8a:92:68:be:6f:e1:7e:9a:76:
74:df:fb:35:1f:ed:89:73:7b:d0:60:7b:ac:fb:07:50:47:9e:
1b:c8:75:27:91:73:f7:82:14:35:7e:2d:dc:b0:8c:7d:dd:ec:
84:42:a6:52:d3:25:ee:30:8f:34:e6:b1:60:0b:21:3d:52:40:
a3:0d:7e:c7:8c:51:09:5a:26:0c:5f:1c:fb:9b:5c:75:77:02:
1b:4a:46:65:2a:3b:66:b3:88:ff:45:d3:bd:72:2c:d8:b1:72:
71:e5:f1:55:99:9e:23:88:10:2a:83:c4:64:06:1a:0e:3f:90:
e0:84:76:42:19:f6:36:7f:74:63:3a:1a:ba:73:69:af:86:26:
f1:cf:32:3e:7d:71:f5:2e:bc:83:2c:ca:4e:4e:16:70:b4:1e:
82:7c:80:21:a2:96:54:70:bd:ce:fb:d6:37:ad:bc:c1:e9:53:
0a:59:a6:72:26:b1:e0:ac:f8:af:d7:1b:68:6b:43:72:92:d8:
0b:24:31:e0:ed:5d:dc:c3:f2:75:85:aa:f5:72:3e:a1:b5:24:
b4:40:e9:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiR7F0VSLUBl6hlKXyqG91DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTRiMmVlM2ZkOTgxOTQwMWRhY2JhNDNlYzBhYzIwMGIy
OTU5YzAwHhcNMjUwODEwMDMwMDQzWhcNMjUwODExMDMwMDQzWjAzMTEwLwYDVQQD
EygzMzkxNjA3MGNiOTZlMzUzZTJiNTlkM2M5ZGU2ZTlhMjIxOWY5N2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLNyMi6wg4S/qAX2ue6yttu8NWSC
86Rwj8qn+IqAUGuQm1D3N/RfIOBHUvPk3MEJF5u+dfQADJwlyuIXuRKV72pRogiT
k5i19K67DqaluXVI305oqwO1SBv/uaEFn1T+niq3WwaKM4qNe497vQfgnH8NHOtH
OsQgMM6ExC89//CW9yGab9Eo8z/E9AhqtiIUOpvAmk0o9kG6wG9HTUMj5wKz2IfA
pR9Iaqz/iNOsnCYvSiIisyYIacAAZAZCyncYPbAvf18yg/8MIqfYZMg6Oto5RTdh
jKhkO1/BluR8qb/jorfmE7/t1pFv/InF0f98L7sgXu/kcv/iz676YBisYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDORYHDLluNT4rWdPJ3m6aIhn5faMB8GA1UdIwQY
MBaAFBoUsu4/2YGUAdrLpD7ArCALKVnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDct
ZmRhOWNkYzkwZmUzLzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDctZmRhOWNkYzkwZmUz
LzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszvoP8hg
2C2bZo9rXJGh9IVSjET5CaJLWWh0JYbZFCKgeECcn18lJDSma6IyipJovm/hfpp2
dN/7NR/tiXN70GB7rPsHUEeeG8h1J5Fz94IUNX4t3LCMfd3shEKmUtMl7jCPNOax
YAshPVJAow1+x4xRCVomDF8c+5tcdXcCG0pGZSo7ZrOI/0XTvXIs2LFyceXxVZme
I4gQKoPEZAYaDj+Q4IR2Qhn2Nn90YzoaunNpr4Ym8c8yPn1x9S68gyzKTk4WcLQe
gnyAIaKWVHC9zvvWN628welTClmmciax4Kz4r9cbaGtDcpLYCyQx4O1d3MPydYWq
9XI+obUktEDp7g==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:32:56 2025 by rpki-client