Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
File: 0GmJqc1r0vLDwN7GCKKL49O6ToE.mft (raw, json)
Hash identifier: ZimBoEtU2DfM9UYY3NmBqbEfNi+7NVBNMFelpluqB1o=
Subject key identifier: B0:84:DF:DD:93:3B:59:67:F7:DF:A5:79:3F:68:C1:4E:4C:0E:8E:F4
Authority key identifier: D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
Certificate issuer: /CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Certificate serial: 019892FF686C840C351C09D9D717A78E3A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 08:01:08 +0000
Manifest this update: Sun 10 Aug 2025 08:01:08 +0000
Manifest next update: Mon 11 Aug 2025 08:01:08 +0000
Files and hashes: 1: 0GmJqc1r0vLDwN7GCKKL49O6ToE.crl (hash: 28gqs8+K5zVZfIprMG7CsuXKq7sOoZrH/8emzQiWGiQ=)
2: QxqcS0TVGSUgUZVV2ZivYzu4jmI.roa (hash: ZdHOHVJoAbkKGlM6IZatNPTQ3rdTLS0gUgU+DGM3k0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:68:6c:84:0c:35:1c:09:d9:d7:17:a7:8e:3a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Validity
Not Before: Aug 10 08:01:08 2025 GMT
Not After : Aug 11 08:01:08 2025 GMT
Subject: CN=b084dfdd933b5967f7dfa5793f68c14e4c0e8ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:34:8e:db:67:6b:2b:79:fc:f5:61:9a:e4:
d9:3d:1b:5f:61:4a:a4:a5:40:53:e6:3d:3a:ed:49:
72:bd:0e:eb:ae:aa:b3:7c:2b:68:89:54:ae:b0:af:
10:75:43:58:35:6a:b2:2b:a7:4c:96:4a:5d:fe:80:
4e:3c:82:df:0d:bf:13:89:23:d6:19:be:18:e3:ea:
10:8f:85:0d:80:c4:cd:69:8b:1f:1b:59:83:7c:da:
3c:4b:17:39:63:1c:c9:68:3a:31:58:d5:89:f3:19:
c7:2a:20:5d:9d:14:08:22:68:3f:fa:61:9c:4e:99:
d3:ad:54:f9:00:81:f9:a6:ba:fb:76:97:e9:be:62:
f9:12:1e:0e:5c:2e:b9:c8:94:d3:16:bc:05:fe:d8:
6c:2d:50:7a:74:7d:75:fe:37:29:7a:9d:5e:9c:b9:
af:64:38:bc:82:b8:e2:10:96:17:71:05:dd:8f:c4:
88:8a:30:c3:4e:a6:b2:a3:f3:e0:b3:39:ed:c7:5f:
ff:f2:b5:1b:84:ca:e8:53:c8:d9:8b:2c:28:9e:05:
d7:3b:60:0a:30:24:e9:4c:ed:fd:b9:e3:24:1d:02:
94:bb:6d:48:f5:9a:03:92:bb:4c:25:5d:71:bb:0c:
18:7b:c8:87:70:f6:3a:61:2c:b8:b5:27:78:15:3b:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:84:DF:DD:93:3B:59:67:F7:DF:A5:79:3F:68:C1:4E:4C:0E:8E:F4
X509v3 Authority Key Identifier:
keyid:D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:66:e3:0b:cc:9c:e1:8d:c3:85:3e:d7:75:92:94:e6:62:f0:
d1:e2:d5:ba:f3:76:5b:eb:a5:3b:66:57:99:c1:93:27:8d:5b:
cb:b4:e8:8c:b9:e4:84:8f:79:37:89:f7:29:8d:e2:20:7f:21:
eb:af:c4:e3:fd:39:c3:ce:e8:66:0e:ce:8c:1d:81:1b:a5:47:
f3:5c:aa:bd:bd:79:b8:35:15:05:97:7c:fd:78:dc:02:af:1a:
9a:01:81:f4:48:46:e4:a5:4f:6f:5d:45:a7:b6:2e:78:7b:ef:
3e:46:0f:92:89:ff:a6:3e:f4:06:d5:59:e1:7c:ee:d4:39:a5:
ad:e8:66:88:da:6d:90:d7:98:76:23:14:03:78:90:30:9d:d3:
93:60:61:94:c4:9b:2c:c1:61:fb:59:be:85:03:7c:64:19:d2:
23:e2:da:4c:9f:5f:b1:7e:df:c5:7d:12:fa:8d:cb:48:68:f5:
ed:70:e5:30:69:e8:fd:d6:b9:6f:e5:d2:c4:a0:23:c3:54:5b:
4e:fa:c9:04:9c:0c:8e:f2:48:a2:83:a5:b6:1e:9f:59:7e:0e:
9b:98:ff:fc:62:15:37:44:2a:50:9b:25:16:96:58:90:0c:73:
6f:a5:8a:a5:b0:3c:c4:10:34:0e:61:e1:09:f0:6f:64:8c:6f:
b3:93:e0:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiS/2hshAw1HAnZ1xenjjpVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNjk4OWE5Y2Q2YmQyZjJjM2MwZGVjNjA4YTI4YmUzZDNi
YTRlODEwHhcNMjUwODEwMDgwMTA4WhcNMjUwODExMDgwMTA4WjAzMTEwLwYDVQQD
EyhiMDg0ZGZkZDkzM2I1OTY3ZjdkZmE1NzkzZjY4YzE0ZTRjMGU4ZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yA0jttnayt5/PVhmuTZPRtfYUqk
pUBT5j067UlyvQ7rrqqzfCtoiVSusK8QdUNYNWqyK6dMlkpd/oBOPILfDb8TiSPW
Gb4Y4+oQj4UNgMTNaYsfG1mDfNo8Sxc5YxzJaDoxWNWJ8xnHKiBdnRQIImg/+mGc
TpnTrVT5AIH5prr7dpfpvmL5Eh4OXC65yJTTFrwF/thsLVB6dH11/jcpep1enLmv
ZDi8grjiEJYXcQXdj8SIijDDTqayo/Pgszntx1//8rUbhMroU8jZiywongXXO2AK
MCTpTO39ueMkHQKUu21I9ZoDkrtMJV1xuwwYe8iHcPY6YSy4tSd4FTuhYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCE392TO1ln99+leT9owU5MDo70MB8GA1UdIwQY
MBaAFNBpianNa9Lyw8Dexgiii+PTuk6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEdtSnFjMXIwdkxEd043R0NLS0w0OU82VG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZTZmZDMtNjdlZi00NWFiLWE0MjAt
NDg3N2ZjNTlkMzE5LzEvMEdtSnFjMXIwdkxEd043R0NLS0w0OU82VG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81ZTZmZDMtNjdlZi00NWFiLWE0MjAtNDg3N2ZjNTlkMzE5
LzEvMEdtSnFjMXIwdkxEd043R0NLS0w0OU82VG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmbjC8yc
4Y3DhT7XdZKU5mLw0eLVuvN2W+ulO2ZXmcGTJ41by7TojLnkhI95N4n3KY3iIH8h
66/E4/05w87oZg7OjB2BG6VH81yqvb15uDUVBZd8/XjcAq8amgGB9EhG5KVPb11F
p7YueHvvPkYPkon/pj70BtVZ4Xzu1DmlrehmiNptkNeYdiMUA3iQMJ3Tk2BhlMSb
LMFh+1m+hQN8ZBnSI+LaTJ9fsX7fxX0S+o3LSGj17XDlMGno/da5b+XSxKAjw1Rb
TvrJBJwMjvJIooOlth6fWX4Om5j//GIVN0QqUJslFpZYkAxzb6WKpbA8xBA0DmHh
CfBvZIxvs5Pg/Q==
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:36:03 2025 by rpki-client