Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
File: gq09xArNGFL8dKzdN9jwe7sCXRg.mft (raw, json)
Hash identifier: riOTa+mLPdGHXG29oKh1ztZAWKSTXUfiWRbk6wIAxl8=
Subject key identifier: 1B:4B:CC:A5:BD:2D:C6:D1:FE:72:14:08:6C:3E:FB:35:60:2C:E1:B4
Authority key identifier: 82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
Certificate issuer: /CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Certificate serial: 019880C22055C41DD7852854F6098717F12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
Manifest number: 0205
Signing time: Wed 06 Aug 2025 19:01:02 +0000
Manifest this update: Wed 06 Aug 2025 19:01:02 +0000
Manifest next update: Thu 07 Aug 2025 19:01:02 +0000
Files and hashes: 1: gq09xArNGFL8dKzdN9jwe7sCXRg.crl (hash: XOUt+wAd2/atzzC9AIOoj/UbgwH+HLEQQNB8MkY0d8Q=)
2: moIHrCUIysvqre1db9iG8YhXiD4.roa (hash: 3qmhRdBwt3IbZM/x/JJkjl8tv0bK7oEsrL8A8nVm2tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:20:55:c4:1d:d7:85:28:54:f6:09:87:17:f1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Validity
Not Before: Aug 6 19:01:02 2025 GMT
Not After : Aug 7 19:01:02 2025 GMT
Subject: CN=1b4bcca5bd2dc6d1fe7214086c3efb35602ce1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9d:72:75:f5:ff:c2:dd:95:e2:01:f4:53:55:
7a:56:0a:aa:0f:3b:74:f4:97:f0:e7:fa:5f:66:d2:
c6:3c:1c:89:77:52:4a:a9:2f:7a:53:43:47:26:4a:
31:f9:41:a0:fd:c2:3b:e6:6d:83:a3:de:4c:63:b6:
da:0d:0a:dc:ae:25:35:bf:63:39:47:53:f2:64:99:
22:c7:ac:37:6f:9a:6a:f0:4e:35:a4:b5:47:00:0e:
6e:41:f4:ff:46:52:d1:20:a7:28:3f:8a:f9:52:a8:
9b:19:65:98:83:9c:5e:44:0b:c7:9f:5e:9a:16:fe:
08:bf:2c:9f:02:d9:81:4d:3d:55:63:78:f8:44:eb:
2c:d8:af:ce:ef:3d:94:b4:e4:8a:63:1e:ea:c5:76:
1d:7e:fd:c9:a0:cd:85:14:f0:d6:21:4b:23:d0:2a:
b8:ae:8a:07:cf:f8:dc:71:f3:8d:e4:40:4c:d7:09:
18:08:1a:dd:5d:f9:9f:1d:9d:a5:b8:e1:b5:14:98:
8d:e4:bf:2f:31:c0:f0:7f:91:65:de:9d:c3:38:40:
02:ff:3a:89:45:3b:37:d3:07:26:ec:44:3e:61:64:
b7:dc:d9:25:1e:c6:ab:a8:57:70:7b:fc:1e:48:f8:
b4:1e:b5:08:12:7e:14:4d:5c:10:e4:72:67:09:56:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4B:CC:A5:BD:2D:C6:D1:FE:72:14:08:6C:3E:FB:35:60:2C:E1:B4
X509v3 Authority Key Identifier:
keyid:82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:31:91:42:fc:9f:48:cc:cb:bb:21:2a:e6:bf:bb:65:17:01:
f4:82:29:1f:c6:bd:2d:b0:db:7c:64:78:4c:5a:3f:d9:d3:f5:
a3:93:3f:86:e9:86:08:fd:c1:15:38:3d:0f:5a:78:6f:cf:00:
7a:db:70:0d:47:2f:c7:dc:63:c2:57:c6:1a:24:1d:71:34:2a:
01:72:d0:c3:83:83:3a:dc:a6:cd:bc:ef:61:67:ee:8f:7d:bd:
e6:b5:35:dc:94:ca:1d:57:30:b2:89:dd:c0:dc:44:6b:70:03:
23:d3:1c:fc:c8:40:26:81:73:33:01:84:c9:27:e2:bb:53:51:
84:3f:d1:31:34:c6:10:d4:04:7b:46:a3:39:4a:02:32:58:a3:
87:c2:cc:22:29:75:bc:b1:c5:4a:bf:7b:1b:19:00:5e:be:54:
b6:42:18:0c:61:7e:92:99:5d:31:f8:41:61:fb:7f:9e:e6:65:
51:41:b5:e8:d0:84:aa:cb:a6:2d:18:47:2e:cb:f3:90:86:bf:
06:be:36:98:01:f1:ee:ea:d9:3a:3f:9e:b0:48:c1:1d:ab:c7:
d2:5e:06:a1:50:d8:54:23:0e:47:ab:dc:97:92:12:62:8a:d3:
02:44:87:dd:39:d0:8e:9e:a3:5c:dd:36:3e:14:d4:ef:27:64:
67:53:31:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwiBVxB3XhShU9gmHF/EuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYWQzZGM0MGFjZDE4NTJmYzc0YWNkZDM3ZDhmMDdiYmIw
MjVkMTgwHhcNMjUwODA2MTkwMTAyWhcNMjUwODA3MTkwMTAyWjAzMTEwLwYDVQQD
EygxYjRiY2NhNWJkMmRjNmQxZmU3MjE0MDg2YzNlZmIzNTYwMmNlMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z1ydfX/wt2V4gH0U1V6VgqqDzt0
9Jfw5/pfZtLGPByJd1JKqS96U0NHJkox+UGg/cI75m2Do95MY7baDQrcriU1v2M5
R1PyZJkix6w3b5pq8E41pLVHAA5uQfT/RlLRIKcoP4r5UqibGWWYg5xeRAvHn16a
Fv4IvyyfAtmBTT1VY3j4ROss2K/O7z2UtOSKYx7qxXYdfv3JoM2FFPDWIUsj0Cq4
rooHz/jccfON5EBM1wkYCBrdXfmfHZ2luOG1FJiN5L8vMcDwf5Fl3p3DOEAC/zqJ
RTs30wcm7EQ+YWS33NklHsarqFdwe/weSPi0HrUIEn4UTVwQ5HJnCVYVowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtLzKW9LcbR/nIUCGw++zVgLOG0MB8GA1UdIwQY
MBaAFIKtPcQKzRhS/HSs3TfY8Hu7Al0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3EwOXhBck5HRkw4ZEt6ZE45andlN3NDWFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yMTdiNzMtMDU2Mi00NzZlLThkODMt
ODQ5YzVjODhkYmZjLzEvZ3EwOXhBck5HRkw4ZEt6ZE45andlN3NDWFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yMTdiNzMtMDU2Mi00NzZlLThkODMtODQ5YzVjODhkYmZj
LzEvZ3EwOXhBck5HRkw4ZEt6ZE45andlN3NDWFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDGRQvyf
SMzLuyEq5r+7ZRcB9IIpH8a9LbDbfGR4TFo/2dP1o5M/humGCP3BFTg9D1p4b88A
ettwDUcvx9xjwlfGGiQdcTQqAXLQw4ODOtymzbzvYWfuj3295rU13JTKHVcwsond
wNxEa3ADI9Mc/MhAJoFzMwGEySfiu1NRhD/RMTTGENQEe0ajOUoCMlijh8LMIil1
vLHFSr97GxkAXr5UtkIYDGF+kpldMfhBYft/nuZlUUG16NCEqsumLRhHLsvzkIa/
Br42mAHx7urZOj+esEjBHavH0l4GoVDYVCMOR6vcl5ISYorTAkSH3TnQjp6jXN02
PhTU7ydkZ1Mx1A==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:05:33 2025 by rpki-client