Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
File: Gq51omzPhiEiKBakccy3wNXnFuI.mft (raw, json)
Hash identifier: JnY4MFLqd/EEdI8qvbbdJ8QiiQLQMtxL5BDEV6SHZoY=
Subject key identifier: 4E:19:9E:9A:12:F6:B2:39:71:84:21:4C:EC:F0:A0:8C:38:80:C7:A6
Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
Certificate issuer: /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Certificate serial: 0198819DD2DE8F918F146812538594382D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
Manifest number: 0928
Signing time: Wed 06 Aug 2025 23:01:00 +0000
Manifest this update: Wed 06 Aug 2025 23:01:00 +0000
Manifest next update: Thu 07 Aug 2025 23:01:00 +0000
Files and hashes: 1: Gq51omzPhiEiKBakccy3wNXnFuI.crl (hash: 4SdSqJ/BjFG5RapGo4rnkTe1gwdCOXnIm6TyVCxK4WA=)
2: e-R839WD2s0lY-SLIuwOK0gz1NA.roa (hash: Br/dbcJ4O349JzP2gYAkSObA1wvRVc0Vvam1hapVqyI=)
3: wQpXfE9JEQ0xae3JNQ5WII9BPtg.roa (hash: Wc6T5r1GtvbV1icqr7Rl021bCXOyiaZtPpB0GH2eHqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:d2:de:8f:91:8f:14:68:12:53:85:94:38:2d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Validity
Not Before: Aug 6 23:01:00 2025 GMT
Not After : Aug 7 23:01:00 2025 GMT
Subject: CN=4e199e9a12f6b2397184214cecf0a08c3880c7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:1b:53:da:31:4c:8c:3f:46:04:ef:98:45:
12:07:b0:6f:3c:6e:89:1b:f9:64:e3:78:47:8b:7d:
ed:18:9c:80:90:3b:d3:ce:94:0f:32:8c:f8:78:71:
c6:73:f1:6b:1e:0c:88:38:2a:b3:be:97:d1:f1:8e:
1e:ed:97:f8:12:fa:ca:a4:92:73:76:55:4d:a0:14:
d3:63:02:01:1f:b2:24:41:83:dc:26:b8:39:95:77:
52:bb:81:b9:60:c5:71:07:ea:15:6f:93:72:f8:8a:
88:fd:64:6c:68:e3:83:0d:37:8c:02:27:c4:33:b2:
e3:72:55:a7:2a:46:d1:9a:cf:81:1a:61:47:de:63:
e4:4f:77:4d:26:db:3c:5e:2d:fd:ec:d7:f8:31:4d:
d3:36:f5:dc:02:c2:44:b7:f1:ea:60:f0:cb:3a:13:
84:be:ac:36:88:d4:e1:37:ee:58:70:28:ef:02:ae:
bc:96:9d:71:b4:09:0a:51:ca:26:e6:8b:8b:c3:62:
76:9d:ec:8e:04:23:93:21:9e:f3:e5:3c:f1:4c:40:
a4:f0:9c:dd:23:c7:35:94:e4:da:2a:0b:57:a5:a2:
ea:b2:2b:6a:bd:b2:56:cc:33:be:dc:39:ef:44:c9:
91:aa:3a:0e:69:e1:ca:d0:f7:74:9c:88:8b:5c:6e:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:19:9E:9A:12:F6:B2:39:71:84:21:4C:EC:F0:A0:8C:38:80:C7:A6
X509v3 Authority Key Identifier:
keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:36:69:0c:16:5e:07:ea:fb:00:26:01:17:9b:4d:ad:7f:a7:
b9:e4:9f:5b:61:e4:f2:89:40:f7:d6:4d:b0:11:09:72:7d:ac:
a3:07:84:16:ce:71:fa:c8:5e:db:35:69:c8:a3:21:90:a9:1b:
aa:34:b9:4e:0a:d4:6a:11:34:61:82:0f:ee:28:c0:f0:4d:2e:
86:b8:fe:eb:b8:6b:e8:e3:07:cb:17:1e:7f:1e:a5:c0:d5:99:
ed:ce:b1:37:02:e1:c2:b6:f8:59:de:24:ee:23:10:82:5e:72:
95:53:06:6e:f0:f3:cc:1c:a5:0e:b5:c3:4e:dc:b2:4e:f2:69:
ff:74:e5:0b:48:23:2b:18:df:2b:18:c2:85:ad:4c:24:3a:3f:
aa:88:fe:23:67:89:c5:cb:2e:71:08:da:0f:2c:48:d9:77:7a:
98:21:f0:09:fd:89:cb:b0:fd:19:b9:c5:00:b8:43:62:ad:eb:
dc:16:36:b8:a3:7d:b9:e6:d0:76:8b:4d:4a:fd:fd:21:ad:f9:
25:b3:93:18:bf:a2:04:5b:75:95:a2:60:58:52:25:ab:9a:0c:
38:d0:53:aa:0d:16:3f:a8:51:78:38:4c:ce:d3:31:42:b9:54:
d5:b4:b6:1e:c2:2f:55:d8:80:a7:18:ea:f1:6c:28:49:8e:d8:
4d:66:ae:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBndLej5GPFGgSU4WUOC00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYWU3NWEyNmNjZjg2MjEyMjI4MTZhNDcxY2NiN2MwZDVl
NzE2ZTIwHhcNMjUwODA2MjMwMTAwWhcNMjUwODA3MjMwMTAwWjAzMTEwLwYDVQQD
Eyg0ZTE5OWU5YTEyZjZiMjM5NzE4NDIxNGNlY2YwYTA4YzM4ODBjN2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUgbU9oxTIw/RgTvmEUSB7BvPG6J
G/lk43hHi33tGJyAkDvTzpQPMoz4eHHGc/FrHgyIOCqzvpfR8Y4e7Zf4EvrKpJJz
dlVNoBTTYwIBH7IkQYPcJrg5lXdSu4G5YMVxB+oVb5Ny+IqI/WRsaOODDTeMAifE
M7LjclWnKkbRms+BGmFH3mPkT3dNJts8Xi397Nf4MU3TNvXcAsJEt/HqYPDLOhOE
vqw2iNThN+5YcCjvAq68lp1xtAkKUcom5ouLw2J2neyOBCOTIZ7z5TzxTECk8Jzd
I8c1lOTaKgtXpaLqsitqvbJWzDO+3DnvRMmRqjoOaeHK0Pd0nIiLXG6QIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4ZnpoS9rI5cYQhTOzwoIw4gMemMB8GA1UdIwQY
MBaAFBqudaJsz4YhIigWpHHMt8DV5xbiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZTcwNTQtZmQ1MC00ZjkxLTljYzct
MjY0ZjBjYzVmZjgwLzEvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84ZTcwNTQtZmQ1MC00ZjkxLTljYzctMjY0ZjBjYzVmZjgw
LzEvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjZpDBZe
B+r7ACYBF5tNrX+nueSfW2Hk8olA99ZNsBEJcn2soweEFs5x+she2zVpyKMhkKkb
qjS5TgrUahE0YYIP7ijA8E0uhrj+67hr6OMHyxcefx6lwNWZ7c6xNwLhwrb4Wd4k
7iMQgl5ylVMGbvDzzBylDrXDTtyyTvJp/3TlC0gjKxjfKxjCha1MJDo/qoj+I2eJ
xcsucQjaDyxI2Xd6mCHwCf2Jy7D9GbnFALhDYq3r3BY2uKN9uebQdotNSv39Ia35
JbOTGL+iBFt1laJgWFIlq5oMONBTqg0WP6hReDhMztMxQrlU1bS2HsIvVdiApxjq
8WwoSY7YTWauzg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:43:20 2025 by rpki-client