Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File: gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier: /NPTzxm0QJpEm2MupHCs97xRpOUkdXgRq7GHSRjBxYI=
Subject key identifier: 99:0D:A8:65:94:7A:CC:9F:FD:0F:4D:18:B2:9F:16:72:18:31:04:3D
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 019889FC45F31C0F3066E81DCD5A103EF8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number: 1652
Signing time: Fri 08 Aug 2025 14:01:08 +0000
Manifest this update: Fri 08 Aug 2025 14:01:08 +0000
Manifest next update: Sat 09 Aug 2025 14:01:08 +0000
Files and hashes: 1: QFczUkAgEuyKmzEnbolrTA6X2HY.roa (hash: 9oqBYWgD2K4y/lveKI1WmKGPvOv0tK+0eRuH2GWZVYI=)
2: bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa (hash: IypY4fWGLD2Ctp5fhCv/SvpdxWW6HbfvIyIXTNzNYXY=)
3: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: SRYFJmcn3P26vL97RbeaDRkCMUT0nPN+IDmFG7Kks8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fc:45:f3:1c:0f:30:66:e8:1d:cd:5a:10:3e:f8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Aug 8 14:01:08 2025 GMT
Not After : Aug 9 14:01:08 2025 GMT
Subject: CN=990da865947acc9ffd0f4d18b29f16721831043d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:c5:7b:9e:e5:a7:7a:83:48:3b:e6:c6:fb:
c1:54:e1:72:42:bc:4b:b9:b5:6c:85:e7:73:04:59:
f9:da:9f:cd:6a:e1:ac:34:b8:04:22:5b:d4:de:cf:
07:f6:16:6e:24:ee:88:45:85:a6:6b:51:e7:f4:a5:
eb:7d:ca:4a:96:d5:4d:d5:df:e5:5c:6d:a7:be:e8:
66:a9:6f:22:69:df:ee:63:39:e4:c7:64:ab:39:fc:
eb:e5:60:a6:a2:05:af:79:d9:52:47:46:f2:9d:4f:
f4:66:59:1e:1a:bc:38:91:b1:41:a7:a6:3f:ed:6a:
20:9d:e3:e2:86:b1:fb:31:3f:fc:9f:a8:87:fa:fb:
12:85:1a:9a:71:16:9e:84:ac:db:10:bc:70:a5:78:
15:ca:54:92:76:bb:22:a8:d7:84:a3:cb:ac:13:83:
fc:e1:2a:93:e5:0a:56:eb:c5:72:63:b3:72:9a:25:
e8:97:03:58:20:9f:b4:d8:db:07:1e:76:43:ab:89:
c6:13:7b:31:84:1d:ba:bd:06:07:87:cc:24:b0:41:
34:15:7a:c6:8e:33:a9:bf:ee:ce:21:24:31:eb:e2:
91:9e:b3:9d:7f:c6:f4:03:2d:21:5c:ef:21:f9:7b:
d9:c7:a0:f0:14:e3:76:00:d7:93:9d:97:96:a0:f7:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0D:A8:65:94:7A:CC:9F:FD:0F:4D:18:B2:9F:16:72:18:31:04:3D
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:54:f2:17:7d:3b:65:7d:df:5d:90:8f:d6:be:95:2c:15:3c:
d1:8b:2f:cd:65:77:9f:ef:28:ce:7c:4a:c5:e2:41:ab:41:87:
33:44:d0:12:c8:3e:0c:ff:6d:6b:1f:e0:e7:e2:0e:95:8f:cd:
d6:f3:6c:0b:d3:53:d2:73:89:25:8c:a6:b5:ce:a1:89:42:18:
42:81:e1:11:73:53:5b:32:bf:60:67:c5:bd:08:51:33:df:49:
38:09:5e:73:f8:78:76:f5:c9:61:bf:6e:85:09:52:38:8c:60:
d1:84:d3:db:48:b1:96:5d:f1:42:e2:40:e8:2b:5e:f1:ba:9d:
4b:28:6f:a0:84:4a:40:d9:13:94:94:18:ea:a9:7d:62:b8:96:
65:d8:0b:6d:7b:18:75:b5:3d:dd:b3:f3:8e:76:28:76:30:0e:
76:1d:7f:9a:93:a2:58:c8:78:3e:04:5b:56:86:bd:a6:51:d8:
f4:65:a6:e1:e1:13:05:9e:d5:ef:7f:7a:9a:4f:51:45:3b:bf:
5a:80:c6:1c:93:9c:cf:25:57:5a:7e:fb:d1:8d:e6:50:58:0f:
d6:ff:23:53:74:34:06:c1:d3:5e:dc:b9:bd:41:c6:19:f4:92:
9b:4f:a9:1a:62:e1:ce:12:da:85:3b:ab:52:f0:1c:4b:1f:2c:
5b:52:17:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJ/EXzHA8wZugdzVoQPvjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYTlmZmY2M2EzNDc3OTU3ZmY3NWNjZGMwMDNkYWI2OGNm
OWQxNTUwHhcNMjUwODA4MTQwMTA4WhcNMjUwODA5MTQwMTA4WjAzMTEwLwYDVQQD
Eyg5OTBkYTg2NTk0N2FjYzlmZmQwZjRkMThiMjlmMTY3MjE4MzEwNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVPFe57lp3qDSDvmxvvBVOFyQrxL
ubVshedzBFn52p/NauGsNLgEIlvU3s8H9hZuJO6IRYWma1Hn9KXrfcpKltVN1d/l
XG2nvuhmqW8iad/uYznkx2SrOfzr5WCmogWvedlSR0bynU/0ZlkeGrw4kbFBp6Y/
7WognePihrH7MT/8n6iH+vsShRqacRaehKzbELxwpXgVylSSdrsiqNeEo8usE4P8
4SqT5QpW68VyY7NymiXolwNYIJ+02NsHHnZDq4nGE3sxhB26vQYHh8wksEE0FXrG
jjOpv+7OISQx6+KRnrOdf8b0Ay0hXO8h+XvZx6DwFON2ANeTnZeWoPfPfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkNqGWUesyf/Q9NGLKfFnIYMQQ9MB8GA1UdIwQY
MBaAFICp//Y6NHeVf/dczcAD2raM+dFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTIt
NDdkOThlNTg1NDVhLzEvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iMDg0YmYtYTQ1NC00M2NmLWFjOTItNDdkOThlNTg1NDVh
LzEvZ0tuXzlqbzBkNVZfOTF6TndBUGF0b3o1MFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFTyF307
ZX3fXZCP1r6VLBU80YsvzWV3n+8oznxKxeJBq0GHM0TQEsg+DP9tax/g5+IOlY/N
1vNsC9NT0nOJJYymtc6hiUIYQoHhEXNTWzK/YGfFvQhRM99JOAlec/h4dvXJYb9u
hQlSOIxg0YTT20ixll3xQuJA6Cte8bqdSyhvoIRKQNkTlJQY6ql9YriWZdgLbXsY
dbU93bPzjnYodjAOdh1/mpOiWMh4PgRbVoa9plHY9GWm4eETBZ7V7396mk9RRTu/
WoDGHJOczyVXWn770Y3mUFgP1v8jU3Q0BsHTXty5vUHGGfSSm0+pGmLhzhLahTur
UvAcSx8sW1IX2g==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:56 2025 by rpki-client