Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
File: GR7jr4IFY0lGR1UaUgbvDEXPlck.mft (raw, json)
Hash identifier: +HxpskIbjc+cSTP0XSEOIRGRXECLcDh9ke19FXQ5ik4=
Subject key identifier: 18:71:38:87:37:C0:01:D1:DE:F2:FA:CE:43:84:DB:34:5B:58:CD:50
Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
Certificate issuer: /CN=191ee3af820563494647551a5206ef0c45cf95c9
Certificate serial: 01988E7DE21757F5BF2A48E5202A38E0E20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 11:01:11 +0000
Manifest this update: Sat 09 Aug 2025 11:01:11 +0000
Manifest next update: Sun 10 Aug 2025 11:01:11 +0000
Files and hashes: 1: BEsMLWTZET1iCxcF6Yr9DbU-sOY.roa (hash: lrX59TnlMsRdeVpivsyzgLMhZv4xei7A/LZNbKN1beE=)
2: GR7jr4IFY0lGR1UaUgbvDEXPlck.crl (hash: nZod6CBwWNfnmNVWyhFN5Pmh8I3lJRUXggOQ/zf/Dtc=)
3: Ntv9RDyDnipoS4LeMeLEjPH2YeE.roa (hash: IEPnmuJHaBFNEPjVzbbu0LZ28Z15YinFb5L8V+9myGI=)
4: tSQQLL0kf6kwJJyAahpRS-4QjTQ.roa (hash: ROWhC0CwWY3GF+PkYJD3Eyf1AgXDuZrPy+fBil3clUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:e2:17:57:f5:bf:2a:48:e5:20:2a:38:e0:e2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9
Validity
Not Before: Aug 9 11:01:11 2025 GMT
Not After : Aug 10 11:01:11 2025 GMT
Subject: CN=1871388737c001d1def2face4384db345b58cd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:16:38:70:f6:01:97:0a:79:4e:be:f9:b0:
80:58:a0:f4:24:75:f0:5b:e0:48:43:21:79:3d:e8:
66:9e:e9:60:b4:d0:c8:b5:52:07:13:ff:e7:60:f8:
85:4b:70:54:be:16:90:b7:16:fa:87:91:ef:fc:32:
6e:d1:4e:a8:82:e9:34:7a:08:10:7f:d5:c7:d8:83:
e1:e4:ac:0e:7e:ed:8b:82:68:fd:32:7f:9a:96:80:
3f:49:b7:39:e5:bd:27:65:a2:10:08:53:4d:88:5c:
2a:15:68:a6:3c:51:00:00:a2:a9:6c:7f:96:85:13:
bc:af:a6:ee:e1:76:e3:35:41:a5:36:2c:b6:6b:f6:
fd:1a:2a:18:82:e5:5d:c4:a5:96:4a:32:24:8a:20:
ba:b5:ef:2c:ff:ae:50:8f:d8:34:66:ad:7a:15:fb:
d1:17:bf:a0:29:45:95:fb:bb:fc:6d:17:33:6e:81:
0c:ac:0a:80:88:df:8d:fe:22:63:3c:ef:f7:40:89:
c9:df:3d:4b:cb:49:b0:e4:02:9b:bd:d0:53:b2:31:
dc:33:2a:dc:62:2d:f4:a0:b4:a6:90:eb:e3:ca:69:
fa:87:c2:99:72:c4:53:e4:94:9e:64:12:65:c4:65:
1a:2d:f4:a1:2e:0f:98:df:3b:5a:90:53:73:83:02:
5e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:71:38:87:37:C0:01:D1:DE:F2:FA:CE:43:84:DB:34:5B:58:CD:50
X509v3 Authority Key Identifier:
keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:73:6c:fe:15:0e:63:e9:21:15:82:27:40:20:e0:4f:d5:62:
7e:1d:8c:bd:33:1a:9e:79:ce:6b:db:ff:62:8e:ea:16:94:71:
b1:ff:fd:9a:9f:88:ff:5e:97:68:d9:51:bd:59:a4:fa:ec:3c:
a5:35:2f:8d:56:3a:49:40:56:59:af:33:33:b5:fa:43:fb:6e:
a4:b7:bf:c6:a8:c8:5d:2a:36:05:02:7b:83:6c:49:7f:63:df:
2a:b4:6f:44:32:f8:88:ac:42:72:e1:bd:80:f4:c1:fc:48:3f:
25:ac:99:65:08:1a:4f:69:2c:a4:6a:55:13:6c:19:b0:fb:a7:
ea:cd:e1:87:81:09:f6:9a:7c:0b:c8:97:a0:83:c7:c2:13:2e:
1e:7a:4e:75:30:23:3c:03:6c:e4:ad:bc:2a:b7:45:67:34:2a:
84:f6:24:d1:57:a7:56:ae:eb:74:01:93:80:96:65:b1:e7:90:
3e:f9:4a:23:c8:4f:59:f3:7b:3d:55:ec:28:c1:b8:2e:32:f5:
89:01:ba:02:f4:2d:6b:43:74:06:0b:24:82:6d:1b:b8:b3:6d:
1e:9c:20:df:da:b8:bd:3e:d0:3d:ea:51:cc:6c:0b:b4:01:c2:
d4:a7:5a:50:7f:72:4f:42:50:8f:8c:b5:aa:6f:32:d8:f6:d4:
5d:a9:55:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiOfeIXV/W/KkjlICo44OIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MWVlM2FmODIwNTYzNDk0NjQ3NTUxYTUyMDZlZjBjNDVj
Zjk1YzkwHhcNMjUwODA5MTEwMTExWhcNMjUwODEwMTEwMTExWjAzMTEwLwYDVQQD
EygxODcxMzg4NzM3YzAwMWQxZGVmMmZhY2U0Mzg0ZGIzNDViNThjZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6usWOHD2AZcKeU6++bCAWKD0JHXw
W+BIQyF5PehmnulgtNDItVIHE//nYPiFS3BUvhaQtxb6h5Hv/DJu0U6oguk0eggQ
f9XH2IPh5KwOfu2Lgmj9Mn+aloA/Sbc55b0nZaIQCFNNiFwqFWimPFEAAKKpbH+W
hRO8r6bu4XbjNUGlNiy2a/b9GioYguVdxKWWSjIkiiC6te8s/65Qj9g0Zq16FfvR
F7+gKUWV+7v8bRczboEMrAqAiN+N/iJjPO/3QInJ3z1Ly0mw5AKbvdBTsjHcMyrc
Yi30oLSmkOvjymn6h8KZcsRT5JSeZBJlxGUaLfShLg+Y3ztakFNzgwJe6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhxOIc3wAHR3vL6zkOE2zRbWM1QMB8GA1UdIwQY
MBaAFBke46+CBWNJRkdVGlIG7wxFz5XJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1I3anI0SUZZMGxHUjFVYVVnYnZERVhQbGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hM2RmODEtMjA5Ni00OTNkLWIxMDYt
NDZkNmNlYTIwMzQyLzEvR1I3anI0SUZZMGxHUjFVYVVnYnZERVhQbGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hM2RmODEtMjA5Ni00OTNkLWIxMDYtNDZkNmNlYTIwMzQy
LzEvR1I3anI0SUZZMGxHUjFVYVVnYnZERVhQbGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHNs/hUO
Y+khFYInQCDgT9Vifh2MvTMannnOa9v/Yo7qFpRxsf/9mp+I/16XaNlRvVmk+uw8
pTUvjVY6SUBWWa8zM7X6Q/tupLe/xqjIXSo2BQJ7g2xJf2PfKrRvRDL4iKxCcuG9
gPTB/Eg/JayZZQgaT2kspGpVE2wZsPun6s3hh4EJ9pp8C8iXoIPHwhMuHnpOdTAj
PANs5K28KrdFZzQqhPYk0VenVq7rdAGTgJZlseeQPvlKI8hPWfN7PVXsKMG4LjL1
iQG6AvQta0N0Bgskgm0buLNtHpwg39q4vT7QPepRzGwLtAHC1KdaUH9yT0JQj4y1
qm8y2PbUXalVlA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:12:26 2025 by rpki-client