Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: Bl1D7yh7pX+tsi4VoTLWLPkYUa7zJvHoNV9IBQo6HCI=
Subject key identifier: 48:C6:52:32:83:B1:8F:FA:D0:32:D0:55:48:33:5B:24:D6:73:9E:71
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 0198744FA15831CE52078580980CBDADC8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 15AA
Signing time: Mon 04 Aug 2025 09:00:32 +0000
Manifest this update: Mon 04 Aug 2025 09:00:32 +0000
Manifest next update: Tue 05 Aug 2025 09:00:32 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: 8YJ4El47guyLLNWXpZLrLpWbbkJOdRX8zDwxo71Adyw=)
2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:a1:58:31:ce:52:07:85:80:98:0c:bd:ad:c8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Aug 4 09:00:32 2025 GMT
Not After : Aug 5 09:00:32 2025 GMT
Subject: CN=48c6523283b18ffad032d05548335b24d6739e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:44:bf:d1:09:2b:7a:a1:2e:48:53:d6:63:
0c:93:73:2a:24:ba:b6:e5:a8:d5:15:48:65:5a:0c:
40:d7:36:86:b6:5d:48:70:0c:2f:6a:87:13:32:22:
99:13:e5:18:21:c6:8a:7b:2f:36:41:38:a6:7b:ab:
39:2c:fe:b6:c7:25:e9:1c:dd:07:12:42:da:f4:ee:
c1:eb:f0:ca:17:68:8c:70:fe:60:ac:1f:24:cd:bd:
f8:60:d6:0e:98:08:4f:0e:5c:38:00:87:84:28:57:
a5:17:45:a2:00:42:16:aa:48:38:d4:7b:dd:77:7c:
22:9e:05:5d:ba:5c:06:56:79:46:6b:b4:4c:89:4a:
63:d7:45:88:a3:31:a5:83:f3:53:f9:7f:c1:f6:79:
43:7f:0a:0e:ea:89:9a:40:61:d2:44:f1:de:4e:fe:
ef:a6:73:71:10:4d:a6:3d:11:5f:3a:cf:e2:5c:2e:
cc:fe:b1:35:a0:8c:c4:f3:00:3b:c3:b6:63:62:83:
e3:da:63:af:18:67:45:1e:61:c9:0f:37:5a:ed:64:
03:92:d8:64:f7:95:09:23:05:bb:74:d8:5a:d4:be:
0e:c0:40:ae:44:3d:7b:32:ab:74:c6:b0:1c:36:fc:
ed:ab:7f:0e:b5:74:97:e1:07:7a:59:dd:18:6c:60:
d7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C6:52:32:83:B1:8F:FA:D0:32:D0:55:48:33:5B:24:D6:73:9E:71
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:f8:d4:80:13:b7:6f:a3:f2:fd:1f:db:c1:54:9a:3a:56:5b:
6a:50:3b:d0:9b:a1:96:dd:2b:fe:14:1f:44:80:07:d6:86:e3:
da:14:bb:8b:cf:9d:4a:e5:a5:9a:e7:2c:f6:e4:db:8f:22:c2:
57:44:bc:bf:e3:ea:ea:d6:51:68:f8:61:80:aa:5e:6c:8c:ae:
0d:79:f9:19:13:7b:fc:e5:40:79:6d:82:6e:e7:1b:30:48:67:
e9:51:1f:ce:b1:9a:db:66:57:5e:6c:9d:71:1d:4b:e6:7b:78:
1d:5c:72:44:87:a7:bf:4f:ab:a9:e8:42:90:3a:e9:85:fb:a4:
73:af:49:f0:d2:52:02:46:b0:08:9f:dc:1d:e4:bd:3c:28:56:
25:41:c3:81:c7:0d:2e:f6:68:d4:69:ce:b6:57:94:65:3e:e3:
1e:79:19:b8:fb:b2:ac:94:10:92:71:87:96:1a:90:f4:42:f9:
3d:cd:06:0e:95:e6:ed:1e:4a:cf:30:ff:fd:a9:b9:3c:e9:a8:
10:16:ca:05:de:c5:89:fc:6b:4a:c4:f2:74:00:4e:2b:2e:5d:
e9:be:dc:9b:04:c1:7e:01:31:d4:06:c3:22:72:ff:e1:eb:17:
48:4f:24:01:f7:13:b0:46:7f:9b:7f:59:c7:00:bb:51:84:f2:
60:4a:e8:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T6FYMc5SB4WAmAy9rcjPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDkwZWQwMDI3ZjBlMzNhNzU0YzI1OWY3ZGM4OGJiN2E3
MmZmYTgwHhcNMjUwODA0MDkwMDMyWhcNMjUwODA1MDkwMDMyWjAzMTEwLwYDVQQD
Eyg0OGM2NTIzMjgzYjE4ZmZhZDAzMmQwNTU0ODMzNWIyNGQ2NzM5ZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8xEv9EJK3qhLkhT1mMMk3MqJLq2
5ajVFUhlWgxA1zaGtl1IcAwvaocTMiKZE+UYIcaKey82QTime6s5LP62xyXpHN0H
EkLa9O7B6/DKF2iMcP5grB8kzb34YNYOmAhPDlw4AIeEKFelF0WiAEIWqkg41Hvd
d3wingVdulwGVnlGa7RMiUpj10WIozGlg/NT+X/B9nlDfwoO6omaQGHSRPHeTv7v
pnNxEE2mPRFfOs/iXC7M/rE1oIzE8wA7w7ZjYoPj2mOvGGdFHmHJDzda7WQDkthk
95UJIwW7dNha1L4OwECuRD17Mqt0xrAcNvztq38OtXSX4Qd6Wd0YbGDXgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjGUjKDsY/60DLQVUgzWyTWc55xMB8GA1UdIwQY
MBaAFBgJDtACfw4zp1TCWffciLt6cv+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjIt
Y2ZmYWQ1MzI5MmNlLzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjItY2ZmYWQ1MzI5MmNl
LzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1fjUgBO3
b6Py/R/bwVSaOlZbalA70Juhlt0r/hQfRIAH1obj2hS7i8+dSuWlmucs9uTbjyLC
V0S8v+Pq6tZRaPhhgKpebIyuDXn5GRN7/OVAeW2CbucbMEhn6VEfzrGa22ZXXmyd
cR1L5nt4HVxyRIenv0+rqehCkDrphfukc69J8NJSAkawCJ/cHeS9PChWJUHDgccN
LvZo1GnOtleUZT7jHnkZuPuyrJQQknGHlhqQ9EL5Pc0GDpXm7R5KzzD//am5POmo
EBbKBd7FifxrSsTydABOKy5d6b7cmwTBfgEx1AbDInL/4esXSE8kAfcTsEZ/m39Z
xwC7UYTyYEroYw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:03:35 2025 by rpki-client