Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: K3h+kxOuidNWzpfqyoEbATGyz6AoLK7U9ILYndBorlk=
Subject key identifier: 10:A3:0D:E9:48:6F:EE:F1:07:24:E9:25:30:08:B2:CC:3A:82:17:86
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 019891109C5EE828FED593D5860B24338A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 23:00:41 +0000
Manifest this update: Sat 09 Aug 2025 23:00:41 +0000
Manifest next update: Sun 10 Aug 2025 23:00:41 +0000
Files and hashes: 1: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: nr3FnOfWqbTnvXxuBNkdzknuasL3J/9zcSNEUGI/U8A=)
2: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (hash: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=)
3: Y2jaKnMLOg7L7yt3a5FoJKVZD9M.roa (hash: E77+sc63md8h3e/NARC1FrCtInem3ClY6WQ72Z8aT70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:10:9c:5e:e8:28:fe:d5:93:d5:86:0b:24:33:8a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Aug 9 23:00:41 2025 GMT
Not After : Aug 10 23:00:41 2025 GMT
Subject: CN=10a30de9486feef10724e9253008b2cc3a821786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:a0:14:35:11:f4:b7:f3:10:e7:1b:f1:12:
12:ed:28:58:60:b7:b5:6f:96:c1:f8:b9:5b:a8:c8:
89:d8:49:9f:8d:6e:1c:50:42:25:ac:e0:1a:7a:90:
9a:6d:45:67:ca:f7:64:a7:de:d5:be:49:7f:3c:d5:
a3:a0:37:19:d2:a9:c5:31:c9:40:a9:63:b9:22:da:
8a:89:74:92:65:c1:12:64:f8:58:31:ad:12:b6:22:
87:59:1b:3f:c4:e0:e0:1b:7a:fa:5d:8f:cd:f5:23:
05:0d:5b:f4:09:84:1a:ef:a6:27:38:c3:fa:9b:c3:
ef:72:14:df:b1:17:35:63:06:28:c1:d0:8b:fb:10:
5c:b3:f8:58:81:bd:e2:55:b6:89:92:96:3d:e3:9e:
b8:32:8b:77:87:a7:27:0e:cc:aa:e8:c1:d1:31:2b:
a6:b4:88:dd:8a:76:21:28:dc:ac:78:d2:f0:b3:55:
51:7f:c7:f1:03:a9:5b:30:34:3f:a4:e5:9e:ec:81:
b6:56:c0:da:a5:53:06:de:ea:3c:e1:76:20:5f:4b:
c5:d3:59:79:c8:3d:f8:49:79:90:24:f9:4e:14:f5:
87:be:da:6c:4e:b7:f1:92:c7:80:4e:f5:5f:c9:04:
09:9b:53:09:37:55:bd:eb:a5:8c:7c:79:74:74:65:
ea:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A3:0D:E9:48:6F:EE:F1:07:24:E9:25:30:08:B2:CC:3A:82:17:86
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:17:50:d8:a4:66:ac:b0:ed:81:01:e8:2d:26:5b:74:4d:15:
46:d6:39:56:00:d6:82:df:2d:40:dd:7c:d9:be:af:46:35:49:
bb:22:2c:54:1a:82:89:3e:5d:a0:df:38:85:3a:bf:f4:f8:71:
dd:d3:34:58:15:3a:d4:cc:a2:2b:2e:0a:82:c7:ac:b6:30:ee:
6b:66:67:3c:57:55:32:7f:1d:6e:d4:8b:17:cd:e1:fb:82:ca:
f8:38:ad:75:40:1c:ef:4d:c4:75:a1:3a:86:ac:e6:d4:db:88:
f2:e9:4d:42:d1:47:32:f5:30:35:b9:43:30:1f:81:72:de:5a:
3f:b4:86:68:fa:cc:1f:9b:2a:dc:f5:6b:02:c0:86:83:d7:06:
43:c0:2f:c6:11:e2:49:3e:91:71:2b:6d:c5:61:bb:3c:de:47:
cc:ba:ec:66:08:40:42:38:de:9d:7b:e6:8d:3d:b2:3d:23:8e:
75:d8:65:0e:dd:fb:a4:2f:aa:b2:a8:0d:ce:9a:e4:be:8b:a1:
9f:46:c0:e8:56:8e:b6:d2:0d:93:42:4a:c9:c3:9c:1e:fa:8c:
60:1a:33:a1:5a:f1:34:55:24:59:94:0f:b4:d1:21:d7:98:a4:
b6:f6:05:04:ab:06:80:08:7b:57:76:35:2f:51:0a:84:95:0d:
f3:8d:73:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiREJxe6Cj+1ZPVhgskM4olMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmM3NzM4Y2QwZmQwZTA0NDdmOWQ3NDljZTZhMzkwNDdm
ZGNiYWMwHhcNMjUwODA5MjMwMDQxWhcNMjUwODEwMjMwMDQxWjAzMTEwLwYDVQQD
EygxMGEzMGRlOTQ4NmZlZWYxMDcyNGU5MjUzMDA4YjJjYzNhODIxNzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW2gFDUR9LfzEOcb8RIS7ShYYLe1
b5bB+LlbqMiJ2EmfjW4cUEIlrOAaepCabUVnyvdkp97Vvkl/PNWjoDcZ0qnFMclA
qWO5ItqKiXSSZcESZPhYMa0StiKHWRs/xODgG3r6XY/N9SMFDVv0CYQa76YnOMP6
m8PvchTfsRc1YwYowdCL+xBcs/hYgb3iVbaJkpY94564Mot3h6cnDsyq6MHRMSum
tIjdinYhKNyseNLws1VRf8fxA6lbMDQ/pOWe7IG2VsDapVMG3uo84XYgX0vF01l5
yD34SXmQJPlOFPWHvtpsTrfxkseATvVfyQQJm1MJN1W966WMfHl0dGXqiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCjDelIb+7xByTpJTAIssw6gheGMB8GA1UdIwQY
MBaAFBv8dzjND9DgRH+ddJzmo5BH/cusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2Ut
MTQ4YWJmZjkxOWFkLzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2UtMTQ4YWJmZjkxOWFk
LzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRdQ2KRm
rLDtgQHoLSZbdE0VRtY5VgDWgt8tQN182b6vRjVJuyIsVBqCiT5doN84hTq/9Phx
3dM0WBU61MyiKy4KgsestjDua2ZnPFdVMn8dbtSLF83h+4LK+DitdUAc703EdaE6
hqzm1NuI8ulNQtFHMvUwNblDMB+Bct5aP7SGaPrMH5sq3PVrAsCGg9cGQ8AvxhHi
ST6RcSttxWG7PN5HzLrsZghAQjjenXvmjT2yPSOOddhlDt37pC+qsqgNzprkvouh
n0bA6FaOttINk0JKycOcHvqMYBozoVrxNFUkWZQPtNEh15iktvYFBKsGgAh7V3Y1
L1EKhJUN841zXg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:43:56 2025 by rpki-client