Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: eZG0c7eHoF/vLLx9/4MvjKqRIwpllCCntugFcg7czfk=
Subject key identifier: 64:0C:D8:15:13:48:70:98:6D:0C:4E:51:A1:FB:20:46:45:5D:0B:78
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 01976F2C6BFDE992D2AAD6269335A688E797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 11DB
Signing time: Sat 14 Jun 2025 16:01:11 +0000
Manifest this update: Sat 14 Jun 2025 16:01:11 +0000
Manifest next update: Sun 15 Jun 2025 16:01:11 +0000
Files and hashes: 1: S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa (hash: dO0JekyTej4OeFDJ56mfA43cKJlW68IvyEqWkG9TsF0=)
2: dMX9QwbYl-FTlUJ1R8o2dHt-Q3w.roa (hash: e2o3TSPgT1QYuW3l4VAbr/3mKHvbyIxxzpTJ+Xkb62A=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: 1Q8//6SBD0jA5g66C3J11kOdRIiR9hv1BxVE9v4pj8g=)
4: oICpP-Q_PLyVnvdAV2VhmetD0KU.roa (hash: m1kg9eS0Gm6DACbj0bQUXbsWOvls/kNIhGkM6VQRNuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:6b:fd:e9:92:d2:aa:d6:26:93:35:a6:88:e7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Jun 14 16:01:11 2025 GMT
Not After : Jun 15 16:01:11 2025 GMT
Subject: CN=640cd815134870986d0c4e51a1fb2046455d0b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:66:72:58:6b:11:e6:65:5e:66:83:fb:ed:
56:16:37:cd:b7:13:79:c8:56:1b:29:da:84:04:84:
c7:c5:01:4a:36:33:c8:13:8b:bf:f6:b9:bb:26:8e:
10:60:56:69:c1:38:b4:c5:86:2e:5c:5d:eb:6e:d2:
12:ac:e3:f4:81:66:57:9f:3a:ab:b0:5b:05:60:28:
3d:75:9a:e5:ce:eb:d9:01:4a:6f:e7:cd:e8:ec:7f:
5b:a0:d2:18:a4:40:1c:ff:43:26:b8:1d:24:86:4a:
6c:69:0d:56:47:0b:bc:54:72:8b:db:a0:0e:90:ba:
49:9a:66:93:f1:7b:8c:ab:9a:a5:a0:b9:65:15:69:
0a:42:91:60:9d:1b:1e:ac:ce:24:d1:91:b7:02:d5:
06:37:ca:4e:8c:a3:a0:50:b1:13:81:5c:8b:8f:f5:
94:1b:b1:bb:1a:4c:6e:aa:32:48:2e:2b:02:2a:95:
d5:2b:83:3d:23:ca:6f:d4:62:ad:f9:80:5c:84:4e:
1d:db:1d:70:6f:f3:da:2c:8b:77:12:47:c1:a8:31:
2b:06:b5:f1:c2:6f:1a:0f:9d:75:36:04:a2:07:83:
db:6e:22:0f:00:20:17:75:35:94:88:42:73:0a:6c:
43:fa:6b:30:40:cd:d6:9c:39:12:37:df:49:02:89:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0C:D8:15:13:48:70:98:6D:0C:4E:51:A1:FB:20:46:45:5D:0B:78
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8d:cb:5f:cb:08:a2:4b:6f:40:bc:51:05:90:8f:26:d6:89:
c9:75:72:e1:db:3c:66:ef:ba:95:bd:85:d8:fe:cf:07:bc:31:
4c:07:bb:55:3e:34:8e:e4:85:b8:37:ab:6d:da:f6:c0:a2:db:
73:58:c4:70:2d:04:cd:3e:86:e3:d8:53:64:f7:7c:e0:59:cf:
d2:36:76:6a:d6:4f:bc:f8:db:d8:1a:bf:d0:ed:51:c6:4c:d0:
98:99:fb:0e:51:9d:a0:f2:66:a8:f4:43:ab:97:b3:76:07:e9:
2c:50:11:da:ed:ef:bc:14:08:db:30:61:59:7b:89:47:5e:53:
df:d7:08:14:2f:fc:08:fb:b2:7d:aa:0d:01:96:1e:0a:03:d2:
80:80:85:40:a5:fe:8b:c3:02:26:b4:df:40:59:eb:e5:7f:19:
44:b8:f3:ff:d2:25:92:d3:96:f5:da:4e:e8:a2:7b:4e:83:54:
1a:40:60:77:6f:e8:d4:88:30:b4:b3:cd:75:7f:79:30:7b:2e:
25:e8:49:db:e0:f1:92:a4:99:07:f3:dd:e9:70:ed:ef:2a:13:
2a:cf:ac:cb:f6:90:1c:1f:41:ea:d0:26:2b:03:18:c7:1c:89:
28:da:bc:b2:48:8d:2b:63:1a:94:d0:b9:fc:e8:85:b2:2e:b7:
5f:08:b5:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLGv96ZLSqtYmkzWmiOeXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2RjMTdkYWQwM2JjYjliYzM0YTllMzc3YWIyMDcwODUy
ZGNhNjUwHhcNMjUwNjE0MTYwMTExWhcNMjUwNjE1MTYwMTExWjAzMTEwLwYDVQQD
Eyg2NDBjZDgxNTEzNDg3MDk4NmQwYzRlNTFhMWZiMjA0NjQ1NWQwYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DdmclhrEeZlXmaD++1WFjfNtxN5
yFYbKdqEBITHxQFKNjPIE4u/9rm7Jo4QYFZpwTi0xYYuXF3rbtISrOP0gWZXnzqr
sFsFYCg9dZrlzuvZAUpv583o7H9boNIYpEAc/0MmuB0khkpsaQ1WRwu8VHKL26AO
kLpJmmaT8XuMq5qloLllFWkKQpFgnRserM4k0ZG3AtUGN8pOjKOgULETgVyLj/WU
G7G7GkxuqjJILisCKpXVK4M9I8pv1GKt+YBchE4d2x1wb/PaLIt3EkfBqDErBrXx
wm8aD511NgSiB4PbbiIPACAXdTWUiEJzCmxD+mswQM3WnDkSN99JAonFBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQM2BUTSHCYbQxOUaH7IEZFXQt4MB8GA1UdIwQY
MBaAFIHNwX2tA7y5vDSp43erIHCFLcplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAt
MDE4NGU4MWFlYWQ5LzEvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAtMDE4NGU4MWFlYWQ5
LzEvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU43LX8sI
oktvQLxRBZCPJtaJyXVy4ds8Zu+6lb2F2P7PB7wxTAe7VT40juSFuDerbdr2wKLb
c1jEcC0EzT6G49hTZPd84FnP0jZ2atZPvPjb2Bq/0O1RxkzQmJn7DlGdoPJmqPRD
q5ezdgfpLFAR2u3vvBQI2zBhWXuJR15T39cIFC/8CPuyfaoNAZYeCgPSgICFQKX+
i8MCJrTfQFnr5X8ZRLjz/9IlktOW9dpO6KJ7ToNUGkBgd2/o1IgwtLPNdX95MHsu
JehJ2+DxkqSZB/Pd6XDt7yoTKs+sy/aQHB9B6tAmKwMYxxyJKNq8skiNK2MalNC5
/OiFsi63Xwi1NQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:07:02 2025 by rpki-client