Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: LHDYeQHRx+YxacRHJzTstbk0I4wjakoKCdZ08A6Lj5k=
Subject key identifier: B4:D1:67:24:E1:25:C3:9E:83:47:FB:41:50:6C:48:68:0A:2A:CA:88
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 01988FFE2F283CEED79F43DA76E2B3689D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 18:00:56 +0000
Manifest this update: Sat 09 Aug 2025 18:00:56 +0000
Manifest next update: Sun 10 Aug 2025 18:00:56 +0000
Files and hashes: 1: K4wUu7obHZ1pQeOh3vYsQgoummw.roa (hash: jArnZVWT3LFdRd35DdT9LyAFWuY1r/brZRKqPdnSEKo=)
2: gKseKjRnR67udMqIQaqApCcgBAY.roa (hash: abyNq8YPIR1WvDGgDgqiWSpvlJw/U2/7rDxHOpNSYwQ=)
3: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: LnWCPzimeXOXuQNh08vrvOMp9ZGczcU9pjM4XEI+h8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:2f:28:3c:ee:d7:9f:43:da:76:e2:b3:68:9d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Aug 9 18:00:56 2025 GMT
Not After : Aug 10 18:00:56 2025 GMT
Subject: CN=b4d16724e125c39e8347fb41506c48680a2aca88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:e0:32:99:e9:fb:89:5d:0d:00:23:be:48:
38:6c:fd:7e:ff:52:d9:20:bb:54:93:19:f4:40:be:
ec:10:3a:d9:d2:fe:27:fb:12:e2:83:c3:c7:80:31:
63:fb:f1:96:2e:3d:88:68:61:cf:7d:b4:5e:7f:96:
51:47:b6:5e:01:b8:25:22:08:c3:b2:19:4e:a8:41:
6e:40:41:ce:87:de:28:40:c5:72:68:0f:9a:d2:e6:
0f:fd:37:32:1c:92:82:42:aa:ce:d3:a9:79:73:54:
6b:62:95:25:02:6d:ea:d8:c2:7b:51:90:d3:95:36:
ba:bd:c5:cd:f8:ff:aa:bb:85:86:b7:83:60:d1:e9:
b5:26:22:4d:ab:4c:bc:95:e3:e9:6c:e6:ab:fa:af:
c7:2d:f2:4b:b3:97:fc:8e:55:2d:04:66:cc:10:83:
53:3e:bd:cb:84:a4:3f:85:cc:c1:50:28:e3:69:56:
9d:94:cc:2e:ee:bc:56:f0:1d:4a:c5:df:75:ec:bb:
66:23:40:e4:b0:59:6f:47:a8:48:c8:34:ab:1a:6a:
cd:57:8f:72:86:c4:e0:fa:b8:7e:73:cb:13:66:ad:
82:51:18:de:fa:eb:8c:48:3c:14:15:e8:10:d2:af:
60:ab:e3:17:77:e4:69:db:2e:c7:21:3a:d1:db:c0:
cd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D1:67:24:E1:25:C3:9E:83:47:FB:41:50:6C:48:68:0A:2A:CA:88
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7c:45:e4:de:d7:4e:07:28:e2:13:6e:b8:3d:37:12:aa:94:
8e:e7:52:c6:f4:16:ec:46:c1:e9:b1:d6:61:b6:8f:e9:e4:fa:
98:6c:72:4e:52:8e:75:33:1a:d6:82:38:5b:20:b3:58:c9:57:
61:ab:7d:03:50:08:4a:f9:85:14:e4:36:c1:12:27:0f:0b:bf:
d3:f1:f1:ba:38:18:cb:ca:65:88:05:00:8f:fe:ce:a4:04:e4:
51:1a:5a:5b:a0:e5:6c:07:55:74:1d:cd:87:3d:53:7e:a6:94:
7d:4d:57:5d:24:46:12:9f:4a:56:f5:db:db:40:ef:a5:80:98:
17:67:ae:dc:72:77:b4:e5:c3:f4:6f:57:4c:b5:5d:77:bc:e7:
67:27:f3:72:3c:a3:94:bc:fc:6e:86:19:18:4d:e2:cc:7e:e4:
b4:fd:ce:0b:ec:6b:99:38:d4:4e:f8:26:de:3a:eb:b4:7c:29:
98:35:93:4b:74:a9:f4:d4:d7:50:a8:27:51:94:d9:76:e7:74:
b5:f2:13:62:06:3b:c9:82:78:84:c7:70:25:1f:78:17:e4:54:
10:c1:9e:36:b4:69:dc:23:39:25:1c:05:50:dd:a2:2f:b7:8c:
34:0a:20:3e:6d:21:e5:77:47:88:5b:f3:8b:d3:f0:31:47:dc:
a8:db:3b:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiP/i8oPO7Xn0PaduKzaJ2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYzcyZWFlYmMyMDQ2MWMzMWNmOTQyZTRlMTU1ZjA3Yjhh
MDNjN2MwHhcNMjUwODA5MTgwMDU2WhcNMjUwODEwMTgwMDU2WjAzMTEwLwYDVQQD
EyhiNGQxNjcyNGUxMjVjMzllODM0N2ZiNDE1MDZjNDg2ODBhMmFjYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUvgMpnp+4ldDQAjvkg4bP1+/1LZ
ILtUkxn0QL7sEDrZ0v4n+xLig8PHgDFj+/GWLj2IaGHPfbRef5ZRR7ZeAbglIgjD
shlOqEFuQEHOh94oQMVyaA+a0uYP/TcyHJKCQqrO06l5c1RrYpUlAm3q2MJ7UZDT
lTa6vcXN+P+qu4WGt4Ng0em1JiJNq0y8lePpbOar+q/HLfJLs5f8jlUtBGbMEINT
Pr3LhKQ/hczBUCjjaVadlMwu7rxW8B1Kxd917LtmI0DksFlvR6hIyDSrGmrNV49y
hsTg+rh+c8sTZq2CURje+uuMSDwUFegQ0q9gq+MXd+Rp2y7HITrR28DNaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTRZyThJcOeg0f7QVBsSGgKKsqIMB8GA1UdIwQY
MBaAFIDHLq68IEYcMc+ULk4VXwe4oDx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNGIxYTEtZmU4OC00NDUwLWJkMzIt
ZDBjODNiZTQwMTg1LzEvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mNGIxYTEtZmU4OC00NDUwLWJkMzItZDBjODNiZTQwMTg1
LzEvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3xF5N7X
Tgco4hNuuD03EqqUjudSxvQW7EbB6bHWYbaP6eT6mGxyTlKOdTMa1oI4WyCzWMlX
Yat9A1AISvmFFOQ2wRInDwu/0/HxujgYy8pliAUAj/7OpATkURpaW6DlbAdVdB3N
hz1TfqaUfU1XXSRGEp9KVvXb20DvpYCYF2eu3HJ3tOXD9G9XTLVdd7znZyfzcjyj
lLz8boYZGE3izH7ktP3OC+xrmTjUTvgm3jrrtHwpmDWTS3Sp9NTXUKgnUZTZdud0
tfITYgY7yYJ4hMdwJR94F+RUEMGeNrRp3CM5JRwFUN2iL7eMNAogPm0h5XdHiFvz
i9PwMUfcqNs7ZA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:17:11 2025 by rpki-client