Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: eaPPYbgbx9BmaZ5PKnaid1Uuc1IVsAfJ20IMQEo+Oac=
Subject key identifier: 84:BD:88:70:20:94:E3:FC:C4:EC:60:86:F8:DE:30:4B:1F:BE:14:72
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 01987F7A01DEFB65921D8434A08574022A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 0F60
Signing time: Wed 06 Aug 2025 13:02:38 +0000
Manifest this update: Wed 06 Aug 2025 13:02:38 +0000
Manifest next update: Thu 07 Aug 2025 13:02:38 +0000
Files and hashes: 1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: kwV5P/tQBOjKO8eu6IK6B01zcCe+ak+Hl8ayAmhRZlQ=)
2: qWiRXpCL0NKtXzFBLcgeaF0mM4A.roa (hash: V0gkUhFHDtKhWrN/3cVBozf0t4RmZJghnQqebhSHl+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:7a:01:de:fb:65:92:1d:84:34:a0:85:74:02:2a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Aug 6 13:02:38 2025 GMT
Not After : Aug 7 13:02:38 2025 GMT
Subject: CN=84bd88702094e3fcc4ec6086f8de304b1fbe1472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:85:37:cd:8c:dc:00:57:f3:5d:a5:8a:fc:
f4:0f:0c:10:27:51:f3:11:0b:80:6f:d4:9e:5f:35:
40:0f:70:e4:99:50:e4:b0:40:88:9a:cd:6f:21:af:
43:6b:13:e8:77:52:f2:8d:9f:00:a3:d0:1d:41:30:
43:3c:36:b7:b2:9c:33:fa:b8:80:9b:ce:f4:fe:d4:
83:ad:e1:a8:75:02:c3:ae:75:ac:b0:6e:27:2a:71:
03:e9:23:dd:3f:47:d2:50:ab:88:72:18:26:f1:0d:
c0:6d:46:f7:6b:29:8f:1a:5d:2c:10:7f:99:89:c6:
f7:37:44:91:bb:56:42:68:a0:2d:59:fe:fd:a5:4e:
cb:41:eb:93:b4:c3:2f:55:a6:65:92:f4:a4:7b:69:
80:1b:d3:22:68:5a:fc:7c:9b:47:8d:8a:4b:c7:8b:
cd:61:6a:02:db:7d:61:bb:2d:0c:5f:e0:20:68:c8:
fe:c4:2b:ae:3e:77:83:95:c5:6d:a3:45:d5:df:d8:
e2:a6:e1:8b:00:7c:fb:e9:d6:d9:4a:3e:91:6c:20:
a7:b9:27:7f:99:dd:64:a3:90:9e:35:db:ce:0d:41:
02:e9:7e:bc:14:cb:4c:9d:d9:ba:dc:9c:c6:56:56:
05:16:bb:39:a5:9d:93:ba:a7:40:13:88:c6:bb:cb:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BD:88:70:20:94:E3:FC:C4:EC:60:86:F8:DE:30:4B:1F:BE:14:72
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fd:ca:23:a1:83:a5:05:2d:fc:9b:46:38:fb:39:36:6a:41:
a7:2e:22:d3:28:b2:5d:22:69:f7:26:48:bb:c8:80:c9:f1:6b:
ae:f2:5d:a0:76:c4:3e:01:1b:89:5d:e0:12:64:cd:9e:7a:c7:
97:32:99:ed:cc:ca:e8:49:2b:2c:45:13:67:f6:6f:f0:c4:08:
58:4a:ba:89:39:48:16:bc:0b:0f:fc:4d:4b:00:69:b9:f0:0e:
c2:03:02:42:31:6c:d1:24:1a:5c:98:9f:28:a5:7c:f4:a1:ac:
04:a8:83:b5:93:f4:f3:ae:dc:ac:a1:cf:e6:77:fb:19:13:aa:
20:d0:57:d3:b0:aa:b4:d0:ac:d5:01:db:ea:ad:f4:8b:31:5f:
f5:f4:df:74:c1:60:21:6b:66:2c:1b:60:d2:49:4e:a2:eb:da:
81:56:f2:0f:db:be:95:df:70:a8:b9:5d:44:f3:a9:66:16:62:
07:e1:a3:6e:a4:b1:9b:c8:98:a5:f4:df:b8:5f:a7:4b:6a:18:
5e:ed:11:a9:63:70:82:93:f3:33:5a:64:60:c5:40:c6:63:7a:
2c:d0:52:3b:a6:ee:39:a7:b8:bc:57:f5:64:14:e7:15:52:6d:
82:d6:e8:02:75:00:6d:d7:c6:fe:95:e4:7a:35:30:b7:c8:4a:
9d:07:38:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/egHe+2WSHYQ0oIV0AipMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MGVjN2FhYjIwZmM0YzgwMWM2Nzk2M2U1OWU0ZjkzNjAw
ZTQwMWQwHhcNMjUwODA2MTMwMjM4WhcNMjUwODA3MTMwMjM4WjAzMTEwLwYDVQQD
Eyg4NGJkODg3MDIwOTRlM2ZjYzRlYzYwODZmOGRlMzA0YjFmYmUxNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy32FN82M3ABX812livz0DwwQJ1Hz
EQuAb9SeXzVAD3DkmVDksECIms1vIa9DaxPod1LyjZ8Ao9AdQTBDPDa3spwz+riA
m870/tSDreGodQLDrnWssG4nKnED6SPdP0fSUKuIchgm8Q3AbUb3aymPGl0sEH+Z
icb3N0SRu1ZCaKAtWf79pU7LQeuTtMMvVaZlkvSke2mAG9MiaFr8fJtHjYpLx4vN
YWoC231huy0MX+AgaMj+xCuuPneDlcVto0XV39jipuGLAHz76dbZSj6RbCCnuSd/
md1ko5CeNdvODUEC6X68FMtMndm63JzGVlYFFrs5pZ2TuqdAE4jGu8uKCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIS9iHAglOP8xOxghvjeMEsfvhRyMB8GA1UdIwQY
MBaAFBkOx6qyD8TIAcZ5Y+WeT5NgDkAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgt
ZGFiOWI0ODNjMTIzLzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgtZGFiOWI0ODNjMTIz
LzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgv3KI6GD
pQUt/JtGOPs5NmpBpy4i0yiyXSJp9yZIu8iAyfFrrvJdoHbEPgEbiV3gEmTNnnrH
lzKZ7czK6EkrLEUTZ/Zv8MQIWEq6iTlIFrwLD/xNSwBpufAOwgMCQjFs0SQaXJif
KKV89KGsBKiDtZP0867crKHP5nf7GROqINBX07CqtNCs1QHb6q30izFf9fTfdMFg
IWtmLBtg0klOouvagVbyD9u+ld9wqLldRPOpZhZiB+GjbqSxm8iYpfTfuF+nS2oY
Xu0RqWNwgpPzM1pkYMVAxmN6LNBSO6buOae4vFf1ZBTnFVJtgtboAnUAbdfG/pXk
ejUwt8hKnQc4mw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 19:27:39 2025 by rpki-client