Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
File: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json)
Hash identifier: S9vFzyNmqbN3zpFMTrQTvVAXaDN8uWw/usRVaOdPx0E=
Subject key identifier: 73:28:D3:CB:52:CF:D5:15:8D:02:5A:C0:C2:F2:D1:44:16:A5:AC:F4
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial: 01988AA12198313045C88ACCE53D1C7EB9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
Manifest number: 0DAA
Signing time: Fri 08 Aug 2025 17:01:12 +0000
Manifest this update: Fri 08 Aug 2025 17:01:12 +0000
Manifest next update: Sat 09 Aug 2025 17:01:12 +0000
Files and hashes: 1: 8eWD8Ql-1KtgIOkNC8YKuoueCck.roa (hash: r76wcz0I4RjQIe4PO8q2P9lP7fbFaLdOJ6XIYZNCtEg=)
2: ClDShRWVAJsP6NoIbSAj2Ahd24Q.roa (hash: vntq+Z6Tbd8s/QqwS6T999xv/EcabW8VhdgxR1iSPhU=)
3: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: 6a0k74R4cbQq5VwJaJzUkMynT06BW6MHT7ehXkPBrkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a1:21:98:31:30:45:c8:8a:cc:e5:3d:1c:7e:b9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Validity
Not Before: Aug 8 17:01:12 2025 GMT
Not After : Aug 9 17:01:12 2025 GMT
Subject: CN=7328d3cb52cfd5158d025ac0c2f2d14416a5acf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:f2:7c:64:88:6e:51:e1:b4:51:17:95:78:
30:ba:69:48:70:8c:97:c2:4d:31:1c:69:df:9e:c8:
c0:72:62:01:3a:db:b6:e2:ed:e1:a1:2e:03:84:d9:
e8:95:de:5d:25:ad:45:37:66:d0:6a:b8:a3:3a:39:
84:4d:5c:77:c6:15:6b:6d:a7:0a:2c:08:f1:50:1e:
4f:dc:6f:36:dd:0b:60:b3:18:51:10:29:f5:e0:f7:
4f:27:5d:ea:7c:97:2f:a2:f6:86:09:b3:53:9d:5e:
d0:0c:d9:0a:57:e3:83:65:7c:97:88:3d:45:68:28:
6a:25:83:a1:3c:81:5a:12:50:ae:e1:ea:66:47:b9:
97:08:ef:73:07:5d:61:ad:29:19:77:3f:65:c0:77:
31:2b:2c:26:70:46:42:5e:2f:a7:34:32:6a:11:12:
cc:3d:22:81:38:1a:2f:e0:f3:71:23:9c:3a:38:53:
d6:24:24:47:49:7e:ed:a5:c1:3b:b1:83:d9:10:43:
15:b9:89:23:32:cd:d8:16:36:3f:32:29:5b:be:02:
f2:01:fc:98:f6:2e:4d:cc:d6:02:b8:a4:8b:7d:5e:
7a:c3:86:a4:6a:f9:fd:d6:24:36:56:3b:b3:05:fe:
5c:56:8e:ed:b0:bf:f1:be:8b:39:6f:72:16:7a:de:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:28:D3:CB:52:CF:D5:15:8D:02:5A:C0:C2:F2:D1:44:16:A5:AC:F4
X509v3 Authority Key Identifier:
keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:29:15:b9:b2:0d:53:59:2d:fd:d9:33:06:8c:32:05:b0:2b:
15:68:51:b6:37:7a:95:d9:74:30:62:38:1b:1e:77:02:44:cb:
ce:77:e2:27:7f:6a:9c:02:f5:50:74:13:83:8b:7a:96:ee:af:
41:20:4d:52:58:d9:af:36:87:c5:3d:2b:79:59:99:2a:8d:22:
81:8c:ec:68:80:1f:9e:48:f2:0a:38:0d:83:e5:54:8e:ae:c1:
02:1e:9a:18:c2:41:84:61:30:d8:4f:f3:2b:e6:c0:d1:11:76:
12:bd:54:8d:71:d8:bc:7c:9c:16:a9:d7:17:b4:3c:74:95:39:
b5:85:8b:0a:a1:6f:a5:8c:50:cb:92:5d:b9:3b:eb:8b:f1:8a:
56:b5:c9:a9:39:ae:40:32:85:ca:8c:0b:52:fa:d3:5d:59:e6:
76:9f:d5:f7:0c:1c:84:1f:9a:fa:7b:60:b0:87:a4:55:b8:6d:
1b:1b:cd:75:c3:7c:13:10:22:67:5d:ae:94:e1:f6:0b:74:5a:
5d:e7:15:b1:9a:8a:48:75:d9:86:58:01:a1:98:7a:8c:1a:fe:
37:b3:91:fa:59:bb:8a:f0:7b:62:2f:23:c2:54:e1:b5:17:72:
2a:96:41:21:09:25:df:80:76:ce:91:03:7f:d9:f7:c5:a5:5e:
56:3f:71:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKoSGYMTBFyIrM5T0cfrmuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODEyMzg1YjgyZGRhMGZkNDgyNmFiYjdhZWZlYjBkZjNl
YjhmZmQwHhcNMjUwODA4MTcwMTEyWhcNMjUwODA5MTcwMTEyWjAzMTEwLwYDVQQD
Eyg3MzI4ZDNjYjUyY2ZkNTE1OGQwMjVhYzBjMmYyZDE0NDE2YTVhY2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz67yfGSIblHhtFEXlXgwumlIcIyX
wk0xHGnfnsjAcmIBOtu24u3hoS4DhNnold5dJa1FN2bQarijOjmETVx3xhVrbacK
LAjxUB5P3G823QtgsxhRECn14PdPJ13qfJcvovaGCbNTnV7QDNkKV+ODZXyXiD1F
aChqJYOhPIFaElCu4epmR7mXCO9zB11hrSkZdz9lwHcxKywmcEZCXi+nNDJqERLM
PSKBOBov4PNxI5w6OFPWJCRHSX7tpcE7sYPZEEMVuYkjMs3YFjY/MilbvgLyAfyY
9i5NzNYCuKSLfV56w4akavn91iQ2VjuzBf5cVo7tsL/xvos5b3IWet7PCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMo08tSz9UVjQJawMLy0UQWpaz0MB8GA1UdIwQY
MBaAFIGBI4W4LdoP1IJqu3rv6w3z64/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEt
ZGEyZWM4Y2ZiODg4LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEtZGEyZWM4Y2ZiODg4
LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSkVubIN
U1kt/dkzBowyBbArFWhRtjd6ldl0MGI4Gx53AkTLznfiJ39qnAL1UHQTg4t6lu6v
QSBNUljZrzaHxT0reVmZKo0igYzsaIAfnkjyCjgNg+VUjq7BAh6aGMJBhGEw2E/z
K+bA0RF2Er1UjXHYvHycFqnXF7Q8dJU5tYWLCqFvpYxQy5JduTvri/GKVrXJqTmu
QDKFyowLUvrTXVnmdp/V9wwchB+a+ntgsIekVbhtGxvNdcN8ExAiZ12ulOH2C3Ra
XecVsZqKSHXZhlgBoZh6jBr+N7OR+lm7ivB7Yi8jwlThtRdyKpZBIQkl34B2zpED
f9n3xaVeVj9x5g==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:24 2025 by rpki-client