Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
File: GzVUSY88jdU5wlqdhTSPq4F-2iM.mft (raw, json)
Hash identifier: ebtCfVxjXczpxhosQ+PV9vMgacf1sJILPjJdw3exSbg=
Subject key identifier: E8:C3:4B:64:C3:77:03:54:29:71:4F:50:1E:71:C6:EB:A6:1C:A5:4D
Authority key identifier: 1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
Certificate issuer: /CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Certificate serial: 019770E34BFEA0ECB7BB9B6476D6F3B6A09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
Manifest number: 0A85
Signing time: Sun 15 Jun 2025 00:00:33 +0000
Manifest this update: Sun 15 Jun 2025 00:00:33 +0000
Manifest next update: Mon 16 Jun 2025 00:00:33 +0000
Files and hashes: 1: GzVUSY88jdU5wlqdhTSPq4F-2iM.crl (hash: 2hkU8ndZ3XOBqdCecQUHBIklZyVPQVzhc9K26JIoGEM=)
2: TJqYJ8PgowX2_0fLvr-J92tN24Y.roa (hash: SyEDMYr3gmhjsEM3DpobXAPSbcOSlzfmvEvbnyrm1xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:4b:fe:a0:ec:b7:bb:9b:64:76:d6:f3:b6:a0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Validity
Not Before: Jun 15 00:00:33 2025 GMT
Not After : Jun 16 00:00:33 2025 GMT
Subject: CN=e8c34b64c377035429714f501e71c6eba61ca54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:b5:94:c4:91:43:48:8e:b0:18:93:f7:61:
6b:4e:c8:8e:a1:a6:f1:c9:23:39:b4:f2:ee:d8:38:
5c:8a:bd:d1:0b:ef:a4:91:24:18:63:de:5a:07:8f:
d1:dc:36:8f:f7:42:a9:4f:00:67:6b:91:85:03:e7:
28:d5:56:c3:74:a0:0d:af:31:8c:e1:c3:a1:70:02:
0e:ca:3d:f4:a3:a5:fb:dc:64:c9:44:19:bc:fa:be:
da:ee:97:a0:a4:a1:51:bc:04:5b:a8:9f:53:3f:9f:
22:c1:c5:e9:e9:67:0c:46:14:c9:5a:b5:1d:82:9b:
6a:a9:fb:b0:f2:4b:ab:d4:a2:5a:e8:8c:c6:1d:27:
4a:d3:09:ef:5f:eb:d3:95:0f:a3:a6:b4:1e:64:51:
7c:ae:ef:39:20:7f:6a:56:b7:40:13:b9:f7:62:8e:
cc:19:8e:fd:30:f7:4f:0e:59:7a:dd:eb:8b:0b:01:
8d:1a:f2:94:4d:27:24:13:54:ae:f2:05:70:5d:98:
b9:f9:0e:0b:2f:81:a2:bb:b9:d9:c7:11:4a:e6:96:
e4:01:51:f0:c4:62:19:d0:21:8f:fb:df:62:37:71:
9a:a1:e8:f1:d4:e3:56:9c:67:71:f6:19:8c:5e:19:
2b:84:a1:4b:5e:eb:7c:88:aa:10:87:44:fd:b1:1c:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:4B:64:C3:77:03:54:29:71:4F:50:1E:71:C6:EB:A6:1C:A5:4D
X509v3 Authority Key Identifier:
keyid:1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f0:0a:dd:fd:7f:3c:41:29:46:89:b8:c2:e1:ef:2e:64:8e:
88:71:1b:61:5f:c2:c5:38:bb:1f:5e:67:8a:ec:9b:d9:d8:41:
98:89:e0:df:89:be:da:cd:68:c4:54:3d:42:65:5c:cc:fe:b3:
66:95:0c:bb:7e:d0:b7:61:26:92:b6:16:9b:c3:99:36:ad:fc:
53:cc:c2:98:46:00:ae:08:f9:ba:dc:6d:3e:78:f4:87:1a:be:
e0:c4:03:7a:c8:12:6d:b1:99:b8:b0:46:e7:bb:21:c5:75:0c:
dc:2f:81:69:a2:0c:8d:6c:d3:80:7f:16:9c:01:8f:22:f0:8b:
ee:21:35:78:37:7c:46:c6:6b:e2:37:c1:87:a1:dd:db:51:97:
7e:06:78:de:22:fc:58:9b:f0:e1:a2:9e:ed:47:58:c4:04:81:
79:6d:38:59:20:b3:d1:93:a2:c5:b8:54:c5:d0:74:e6:ed:0e:
ee:bd:3d:77:90:d0:1b:c8:bf:4b:fa:fc:8b:8e:33:4b:96:36:
99:b0:ee:ad:1d:31:ad:7f:58:6c:f7:94:1c:6b:58:0c:5f:6f:
c4:c5:4b:cd:51:ee:b6:90:e6:32:fa:24:57:d3:a8:20:0c:d4:
be:a1:43:65:11:05:02:02:22:20:56:d8:f0:d1:e6:e6:36:24:
65:dd:cc:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdw40v+oOy3u5tkdtbztqCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzU1NDQ5OGYzYzhkZDUzOWMyNWE5ZDg1MzQ4ZmFiODE3
ZWRhMjMwHhcNMjUwNjE1MDAwMDMzWhcNMjUwNjE2MDAwMDMzWjAzMTEwLwYDVQQD
EyhlOGMzNGI2NGMzNzcwMzU0Mjk3MTRmNTAxZTcxYzZlYmE2MWNhNTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+K1lMSRQ0iOsBiT92FrTsiOoabx
ySM5tPLu2Dhcir3RC++kkSQYY95aB4/R3DaP90KpTwBna5GFA+co1VbDdKANrzGM
4cOhcAIOyj30o6X73GTJRBm8+r7a7pegpKFRvARbqJ9TP58iwcXp6WcMRhTJWrUd
gptqqfuw8kur1KJa6IzGHSdK0wnvX+vTlQ+jprQeZFF8ru85IH9qVrdAE7n3Yo7M
GY79MPdPDll63euLCwGNGvKUTSckE1Su8gVwXZi5+Q4LL4Giu7nZxxFK5pbkAVHw
xGIZ0CGP+99iN3Gaoejx1ONWnGdx9hmMXhkrhKFLXut8iKoQh0T9sRxEFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjDS2TDdwNUKXFPUB5xxuumHKVNMB8GA1UdIwQY
MBaAFBs1VEmPPI3VOcJanYU0j6uBftojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3pWVVNZODhqZFU1d2xxZGhUU1BxNEYtMmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy83YjAzZDEtMGU2OC00NDRmLTkxODgt
NzZlNWNlYjAzZmQ5LzEvR3pWVVNZODhqZFU1d2xxZGhUU1BxNEYtMmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy83YjAzZDEtMGU2OC00NDRmLTkxODgtNzZlNWNlYjAzZmQ5
LzEvR3pWVVNZODhqZFU1d2xxZGhUU1BxNEYtMmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavAK3f1/
PEEpRom4wuHvLmSOiHEbYV/CxTi7H15niuyb2dhBmIng34m+2s1oxFQ9QmVczP6z
ZpUMu37Qt2EmkrYWm8OZNq38U8zCmEYArgj5utxtPnj0hxq+4MQDesgSbbGZuLBG
57shxXUM3C+BaaIMjWzTgH8WnAGPIvCL7iE1eDd8RsZr4jfBh6Hd21GXfgZ43iL8
WJvw4aKe7UdYxASBeW04WSCz0ZOixbhUxdB05u0O7r09d5DQG8i/S/r8i44zS5Y2
mbDurR0xrX9YbPeUHGtYDF9vxMVLzVHutpDmMvokV9OoIAzUvqFDZREFAgIiIFbY
8NHm5jYkZd3Mlg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:11:33 2025 by rpki-client