Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier: olNT2CemFWIxprsimsGs4ByXp+km8pmhrQhDsnqxBHc=
Subject key identifier: 8B:2D:8E:AA:DE:55:5C:87:5B:10:9A:41:1F:56:87:54:09:90:96:3A
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial: 019774C028B98C0AB70C7D5AD699687ECDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number: 0F8D
Signing time: Sun 15 Jun 2025 18:00:39 +0000
Manifest this update: Sun 15 Jun 2025 18:00:39 +0000
Manifest next update: Mon 16 Jun 2025 18:00:39 +0000
Files and hashes: 1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: 5JeSjsdyhr44bz9rf7I5VkQa8eJajXMLWx99EHsLYAk=)
2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:c0:28:b9:8c:0a:b7:0c:7d:5a:d6:99:68:7e:cd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
Validity
Not Before: Jun 15 18:00:39 2025 GMT
Not After : Jun 16 18:00:39 2025 GMT
Subject: CN=8b2d8eaade555c875b109a411f5687540990963a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:ea:81:d5:42:97:14:dd:9c:8b:86:25:31:
6b:7d:bc:10:c9:43:45:7a:aa:50:3e:e8:51:46:ba:
55:41:af:ee:50:22:eb:0e:03:cf:c3:67:44:8d:69:
f9:43:f5:78:a5:ac:d3:d2:46:47:20:74:18:0c:cb:
40:eb:f6:1a:ac:52:3f:40:5f:ed:75:42:ba:dd:00:
94:86:51:0e:be:b6:05:03:d8:71:d3:46:e3:d4:97:
98:19:68:90:90:db:1d:38:ce:69:81:2c:b6:69:8f:
48:82:5f:eb:dc:6d:5b:5a:ef:22:19:65:87:4f:6d:
4a:6e:41:4c:34:d9:bf:f2:b0:91:04:18:e8:6e:b3:
ed:e1:63:ae:82:d2:5c:b9:72:c2:f1:20:f1:53:df:
3e:d0:bc:5c:72:4f:c7:23:d7:79:7b:c3:8f:bc:28:
df:0c:ab:44:15:af:bc:93:7d:61:4f:b1:87:73:ad:
89:cb:eb:1c:ae:a2:36:bf:67:aa:91:45:d4:a2:fa:
08:e2:91:88:f9:59:0d:07:1f:30:72:3d:70:f0:46:
7f:ef:de:66:cd:e6:58:ea:1b:57:ee:75:95:f4:55:
68:f8:8f:1e:52:20:21:13:97:a5:83:47:1f:1d:ad:
8b:82:5e:c6:b0:25:b4:ae:6b:38:ec:4e:fe:b8:7e:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2D:8E:AA:DE:55:5C:87:5B:10:9A:41:1F:56:87:54:09:90:96:3A
X509v3 Authority Key Identifier:
keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1c:fc:8a:ed:52:95:8f:1e:3e:c7:06:e5:68:20:df:86:e4:
35:0d:2d:e2:c8:e7:9c:2c:05:a5:fc:04:67:f6:ed:09:50:f1:
a5:42:5b:d4:7f:07:90:3c:57:54:98:a3:47:02:6d:b7:01:47:
d6:ad:ce:9f:7e:b6:21:ba:2b:fa:8d:92:bc:de:a2:8a:b7:18:
e4:b1:ac:ec:66:23:c3:46:44:a0:79:60:70:80:8b:46:4d:a4:
4c:9d:da:47:37:f9:f9:e6:2f:ae:5b:8e:4e:a8:69:06:7b:ad:
c4:d9:b4:32:49:d8:55:24:f2:0c:ca:f0:56:81:27:7e:4c:ed:
32:ef:a8:5a:41:ed:e6:c7:bf:0e:0b:66:6e:10:0e:8e:25:96:
d9:ec:a7:a2:36:46:02:d6:48:b8:0b:aa:f7:86:f6:1d:d4:2f:
7c:51:3a:5c:2d:ac:ee:3c:84:33:5a:92:57:51:bd:16:8d:a4:
66:dd:91:f2:da:cd:de:30:06:87:3d:c7:4a:50:5a:b7:e1:6f:
18:bb:c8:42:b6:e5:a9:05:78:f8:c9:71:d3:43:0e:ed:86:e7:
b4:94:7a:c9:94:56:b0:c2:69:5c:8b:58:2f:6e:9f:d4:6c:49:
7d:52:da:ae:ac:32:9b:15:18:24:76:60:3a:64:47:f9:47:56:
3b:1f:fb:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0wCi5jAq3DH1a1plofs38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDYwYTUxODUyOGU4NmE4ZWE3N2YxODhhMDI2Mzc5MGMw
OGY2YjkwHhcNMjUwNjE1MTgwMDM5WhcNMjUwNjE2MTgwMDM5WjAzMTEwLwYDVQQD
Eyg4YjJkOGVhYWRlNTU1Yzg3NWIxMDlhNDExZjU2ODc1NDA5OTA5NjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+XqgdVClxTdnIuGJTFrfbwQyUNF
eqpQPuhRRrpVQa/uUCLrDgPPw2dEjWn5Q/V4pazT0kZHIHQYDMtA6/YarFI/QF/t
dUK63QCUhlEOvrYFA9hx00bj1JeYGWiQkNsdOM5pgSy2aY9Igl/r3G1bWu8iGWWH
T21KbkFMNNm/8rCRBBjobrPt4WOugtJcuXLC8SDxU98+0Lxcck/HI9d5e8OPvCjf
DKtEFa+8k31hT7GHc62Jy+scrqI2v2eqkUXUovoI4pGI+VkNBx8wcj1w8EZ/795m
zeZY6htX7nWV9FVo+I8eUiAhE5elg0cfHa2Lgl7GsCW0rms47E7+uH5tRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIstjqreVVyHWxCaQR9Wh1QJkJY6MB8GA1UdIwQY
MBaAFIEGClGFKOhqjqd/GIoCY3kMCPa5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAt
ZjE5NjAwYzdhZDU0LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAtZjE5NjAwYzdhZDU0
LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxz8iu1S
lY8ePscG5Wgg34bkNQ0t4sjnnCwFpfwEZ/btCVDxpUJb1H8HkDxXVJijRwJttwFH
1q3On362Ibor+o2SvN6iircY5LGs7GYjw0ZEoHlgcICLRk2kTJ3aRzf5+eYvrluO
TqhpBnutxNm0MknYVSTyDMrwVoEnfkztMu+oWkHt5se/DgtmbhAOjiWW2eynojZG
AtZIuAuq94b2HdQvfFE6XC2s7jyEM1qSV1G9Fo2kZt2R8trN3jAGhz3HSlBat+Fv
GLvIQrblqQV4+Mlx00MO7YbntJR6yZRWsMJpXItYL26f1GxJfVLarqwymxUYJHZg
OmRH+UdWOx/7XQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:40:20 2025 by rpki-client