Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: lHyIROb8uTWlgZaXfuCdr2vVFflPtskZ55KEphGS9Wk=
Subject key identifier: 0D:58:74:19:1E:3A:1C:E3:06:73:50:82:54:4C:1D:F8:B3:44:D7:F2
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 0198733DC75C3FBDA55E806AB70E91161A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 12F8
Signing time: Mon 04 Aug 2025 04:01:25 +0000
Manifest this update: Mon 04 Aug 2025 04:01:25 +0000
Manifest next update: Tue 05 Aug 2025 04:01:25 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: 0MV6ZZvlomlHgzkTL6dP6j2+ih5GkzcsjYlFFS0zFh4=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:c7:5c:3f:bd:a5:5e:80:6a:b7:0e:91:16:1a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Aug 4 04:01:25 2025 GMT
Not After : Aug 5 04:01:25 2025 GMT
Subject: CN=0d5874191e3a1ce306735082544c1df8b344d7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:49:fe:cb:e3:e4:ef:00:4b:d6:ba:ba:1b:db:
cd:0b:a1:fc:d6:ab:91:e7:a5:27:c8:57:33:5b:b6:
f9:f7:12:fb:d1:c7:97:b9:75:46:c7:81:5d:96:ae:
39:90:dd:de:74:15:c3:65:42:1d:53:2d:de:cc:ac:
4f:7f:e6:87:7e:31:4b:18:ec:6c:b7:3e:8f:fd:e8:
ec:57:d3:f4:39:99:07:95:90:64:51:b5:41:39:b3:
db:da:c4:75:cc:5f:65:e9:3f:e8:e3:e2:34:43:92:
20:84:c7:c6:ee:20:8d:4a:fd:e2:ab:9f:00:2e:b8:
b8:cb:48:78:69:4a:b0:bc:30:76:22:9e:57:82:89:
6e:97:77:7d:b7:e8:54:b7:67:7d:d1:6d:d8:73:87:
b5:52:13:23:24:a4:70:87:35:bb:1c:74:34:36:3d:
34:4b:08:5a:fd:f3:18:90:59:5f:a9:3d:40:a2:22:
1b:22:bf:81:67:3e:8b:f8:7a:f8:63:b0:cd:e0:2b:
09:de:bb:a8:5b:c9:5c:4b:29:3f:f5:be:dc:78:6e:
aa:a1:88:e4:b7:e5:f1:95:03:1e:0c:8c:4c:17:23:
c5:31:fc:ee:5c:fc:86:7d:20:ae:8c:72:92:6c:9d:
95:43:6d:0d:77:21:cf:24:cf:c7:41:40:e9:3e:f6:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:58:74:19:1E:3A:1C:E3:06:73:50:82:54:4C:1D:F8:B3:44:D7:F2
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fd:06:3c:0a:f0:01:a6:67:f9:bd:1e:b2:70:8a:96:07:74:
1f:42:4a:20:0c:04:23:4f:2b:43:d0:d3:1d:4d:57:c1:51:fc:
b5:d5:2f:37:bf:20:b2:b1:41:32:b7:73:79:4f:3d:99:72:30:
a4:a9:9b:95:9f:7f:24:4d:c5:5f:79:05:f4:e0:d8:66:04:f1:
b2:95:bf:b2:e3:f4:f7:63:50:d2:da:d8:df:9b:2c:84:b4:f4:
81:a9:dd:86:14:f2:8a:44:c9:de:92:d1:fe:47:ad:87:8a:44:
2b:33:3c:2a:b8:54:73:c2:8c:21:7e:06:43:d6:9e:0f:5a:f1:
0f:0e:58:9d:1d:1f:53:02:d4:f8:d1:79:8b:9f:ba:49:f0:65:
5f:18:f1:87:3a:ce:1c:5e:24:de:a0:ed:bf:87:76:8e:cb:3e:
14:31:51:1c:1e:e4:9c:25:83:72:37:fa:58:e2:e9:82:f4:ca:
9e:ca:e8:be:aa:f0:a9:9e:8c:c7:41:80:1c:26:aa:d6:9f:06:
9e:a7:3e:f6:f1:af:c7:96:48:85:ec:eb:62:8b:b9:a7:d0:1e:
ab:a6:33:59:4b:7b:0e:0c:0d:b2:7b:41:ce:cb:18:2c:2b:dc:
e2:82:58:7a:e9:b4:ed:a6:87:6c:21:2e:6e:02:ea:8b:cd:24:
6e:fc:e9:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPcdcP72lXoBqtw6RFhpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjgwMGMzOTEyNmRiM2NhNGUwZDU2OTEwZjBhZDM3OTI1
N2U0YTAwHhcNMjUwODA0MDQwMTI1WhcNMjUwODA1MDQwMTI1WjAzMTEwLwYDVQQD
EygwZDU4NzQxOTFlM2ExY2UzMDY3MzUwODI1NDRjMWRmOGIzNDRkN2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Un+y+Pk7wBL1rq6G9vNC6H81quR
56UnyFczW7b59xL70ceXuXVGx4Fdlq45kN3edBXDZUIdUy3ezKxPf+aHfjFLGOxs
tz6P/ejsV9P0OZkHlZBkUbVBObPb2sR1zF9l6T/o4+I0Q5IghMfG7iCNSv3iq58A
Lri4y0h4aUqwvDB2Ip5Xgolul3d9t+hUt2d90W3Yc4e1UhMjJKRwhzW7HHQ0Nj00
Swha/fMYkFlfqT1AoiIbIr+BZz6L+Hr4Y7DN4CsJ3ruoW8lcSyk/9b7ceG6qoYjk
t+XxlQMeDIxMFyPFMfzuXPyGfSCujHKSbJ2VQ20NdyHPJM/HQUDpPvZeWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1YdBkeOhzjBnNQglRMHfizRNfyMB8GA1UdIwQY
MBaAFBm4AMORJts8pODVaRDwrTeSV+SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEt
ZjE4YWQ5ZjRjYzM0LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEtZjE4YWQ5ZjRjYzM0
LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVP0GPArw
AaZn+b0esnCKlgd0H0JKIAwEI08rQ9DTHU1XwVH8tdUvN78gsrFBMrdzeU89mXIw
pKmblZ9/JE3FX3kF9ODYZgTxspW/suP092NQ0trY35sshLT0gandhhTyikTJ3pLR
/keth4pEKzM8KrhUc8KMIX4GQ9aeD1rxDw5YnR0fUwLU+NF5i5+6SfBlXxjxhzrO
HF4k3qDtv4d2jss+FDFRHB7knCWDcjf6WOLpgvTKnsrovqrwqZ6Mx0GAHCaq1p8G
nqc+9vGvx5ZIhezrYou5p9Aeq6YzWUt7DgwNsntBzssYLCvc4oJYeum07aaHbCEu
bgLqi80kbvzp6g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:33 2025 by rpki-client