Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: 7V0uVCdQwdkB5JGZxlk4eg5YO56M6QlpZHvIwqQpfEs=
Subject key identifier: 05:CA:9D:99:A3:2C:6B:9D:E8:75:40:42:80:3C:FD:99:29:29:E9:01
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 019894B66CDB40B8EF60E7E1DC55B708E114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 084B
Signing time: Sun 10 Aug 2025 16:00:40 +0000
Manifest this update: Sun 10 Aug 2025 16:00:40 +0000
Manifest next update: Mon 11 Aug 2025 16:00:40 +0000
Files and hashes: 1: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: jRnML5aeHMviZykkBPVSYQ3zQEpoRfzvaXjb7oSIW+Q=)
2: RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa (hash: z3IHW9wPnoAAyV5Yp5JV/XIyxcaRpjPHnzXPpTc3PGc=)
3: zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa (hash: b0+r/Py1tsQMqZ9+iwYrxYKeaOWfr9BHfO+bAPyD5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:6c:db:40:b8:ef:60:e7:e1:dc:55:b7:08:e1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Aug 10 16:00:40 2025 GMT
Not After : Aug 11 16:00:40 2025 GMT
Subject: CN=05ca9d99a32c6b9de8754042803cfd992929e901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:54:6b:5d:ff:7f:81:99:d6:4d:72:8a:86:
a8:6a:32:bf:72:7e:51:c4:10:23:26:d5:39:ff:dd:
1b:3a:62:8b:56:bc:ce:f9:97:0f:4d:81:33:34:6d:
f4:69:3c:2f:2e:59:24:61:4b:48:ab:fb:c9:61:38:
66:ad:72:cf:74:de:7d:42:83:a7:30:e8:c3:db:ca:
84:f5:1a:1e:40:91:f7:97:31:6d:2e:3e:7b:10:fd:
23:b7:0d:52:5f:b3:14:bd:7a:24:1a:3c:35:d4:2a:
6e:f0:a6:04:b2:cb:ce:19:9d:b6:b8:37:de:66:6a:
a2:41:49:3d:da:bf:77:9c:4a:4b:04:7a:42:d6:fd:
04:3f:54:04:71:51:b1:ac:ce:a7:bd:af:3f:f5:d6:
b6:15:ab:16:c1:11:ec:cf:30:99:22:2b:ef:fa:d2:
18:bc:e5:c9:01:eb:15:42:b2:9d:10:ed:46:90:5b:
03:08:6a:c1:b6:49:96:e1:9e:71:5e:ba:70:dd:59:
15:94:6f:20:e7:59:bd:43:81:7a:d3:43:d3:97:00:
91:e1:9f:39:4f:a0:12:3f:1d:90:2d:5e:b5:17:f8:
27:c6:e9:55:2d:2c:3f:5d:7c:11:8f:dd:06:38:31:
c9:b4:28:45:4d:d1:27:b0:48:6a:41:c4:91:a4:68:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CA:9D:99:A3:2C:6B:9D:E8:75:40:42:80:3C:FD:99:29:29:E9:01
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b7:4d:04:fb:42:c8:bc:2d:54:d0:c2:bd:87:52:ea:72:f5:
1f:19:6e:fe:db:d7:32:ab:41:f5:fd:14:a3:83:82:f7:37:91:
04:72:df:7d:eb:7b:0c:4d:36:36:8d:87:a0:a6:88:b6:71:10:
e8:bf:17:dc:6f:c8:b3:86:9d:71:5c:f3:d3:16:61:68:2a:ce:
c1:b0:63:3f:d0:a3:28:66:e9:04:0e:cf:fe:33:4e:f5:96:82:
eb:96:6d:28:d4:fa:2c:85:e3:3b:26:30:7b:63:7a:a1:84:03:
61:7e:e0:b4:ff:2d:77:9c:94:a0:48:5b:ef:9c:dc:03:70:be:
d8:1f:b6:20:50:87:91:17:50:45:4d:96:5a:1f:19:18:79:d3:
59:66:5b:11:09:41:69:89:fa:a7:30:77:58:a5:26:f9:13:61:
50:0e:ca:7b:25:1c:34:a2:d2:6f:1c:b9:3d:90:45:46:82:d8:
b3:3f:33:67:82:6d:70:22:83:e4:a7:1a:4b:d5:87:53:0e:ca:
3d:2b:93:88:fc:20:72:42:e9:75:4b:4a:1d:14:5d:7a:3a:99:
74:49:f1:9f:b6:4c:c6:5f:c4:dc:98:95:78:62:9a:51:8e:94:
d6:20:9c:a4:31:cc:5c:48:ed:e2:91:e3:ea:0f:78:c2:4f:6b:
bf:1a:eb:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUtmzbQLjvYOfh3FW3COEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NWEyZjY3ZDI0NWNiYTk1MThiMDE3MDYxYTcxNjkyZWU3
OWU3ZmYwHhcNMjUwODEwMTYwMDQwWhcNMjUwODExMTYwMDQwWjAzMTEwLwYDVQQD
EygwNWNhOWQ5OWEzMmM2YjlkZTg3NTQwNDI4MDNjZmQ5OTI5MjllOTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotlUa13/f4GZ1k1yioaoajK/cn5R
xBAjJtU5/90bOmKLVrzO+ZcPTYEzNG30aTwvLlkkYUtIq/vJYThmrXLPdN59QoOn
MOjD28qE9RoeQJH3lzFtLj57EP0jtw1SX7MUvXokGjw11Cpu8KYEssvOGZ22uDfe
ZmqiQUk92r93nEpLBHpC1v0EP1QEcVGxrM6nva8/9da2FasWwRHszzCZIivv+tIY
vOXJAesVQrKdEO1GkFsDCGrBtkmW4Z5xXrpw3VkVlG8g51m9Q4F600PTlwCR4Z85
T6ASPx2QLV61F/gnxulVLSw/XXwRj90GODHJtChFTdEnsEhqQcSRpGgP+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXKnZmjLGud6HVAQoA8/ZkpKekBMB8GA1UdIwQY
MBaAFBhaL2fSRcupUYsBcGGnFpLueef/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTkt
YmIwMThjZmJlYWEyLzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTktYmIwMThjZmJlYWEy
LzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbdNBPtC
yLwtVNDCvYdS6nL1Hxlu/tvXMqtB9f0Uo4OC9zeRBHLffet7DE02No2HoKaItnEQ
6L8X3G/Is4adcVzz0xZhaCrOwbBjP9CjKGbpBA7P/jNO9ZaC65ZtKNT6LIXjOyYw
e2N6oYQDYX7gtP8td5yUoEhb75zcA3C+2B+2IFCHkRdQRU2WWh8ZGHnTWWZbEQlB
aYn6pzB3WKUm+RNhUA7KeyUcNKLSbxy5PZBFRoLYsz8zZ4JtcCKD5KcaS9WHUw7K
PSuTiPwgckLpdUtKHRRdejqZdEnxn7ZMxl/E3JiVeGKaUY6U1iCcpDHMXEjt4pHj
6g94wk9rvxrrag==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:24:10 2025 by rpki-client