Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier: Ky9VbXgAKIIToyklx+H7/9VNg+JMGRt0lpKVfXBIAR0=
Subject key identifier: F9:19:47:F9:12:29:E7:AE:8B:F4:94:E4:6F:ED:64:09:0B:F7:5D:2B
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 01976A0587CBF28DCC9D4F8A4A59ABE666C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number: 1594
Signing time: Fri 13 Jun 2025 16:00:36 +0000
Manifest this update: Fri 13 Jun 2025 16:00:36 +0000
Manifest next update: Sat 14 Jun 2025 16:00:36 +0000
Files and hashes: 1: dUjydhDtv2Ysc8dEDoiT2yx34lg.roa (hash: ebc83oZNm2ylmobsykoAv58WP6zLL9GO+02NODZysqQ=)
2: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: Q7rsaF/mJvU+kUodUOsnTvFQZIjY+up8pcXvv0dXcro=)
3: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:87:cb:f2:8d:cc:9d:4f:8a:4a:59:ab:e6:66:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Jun 13 16:00:36 2025 GMT
Not After : Jun 14 16:00:36 2025 GMT
Subject: CN=f91947f91229e7ae8bf494e46fed64090bf75d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:94:6f:cf:a0:f2:1f:d0:d8:e0:77:dd:c9:
17:9e:19:e9:e0:79:bb:ba:9f:d0:ce:73:c1:ec:f2:
55:ca:43:b4:2e:6e:7f:09:7f:0f:c3:90:43:87:e7:
43:52:5a:de:da:e8:62:38:a7:58:c5:c5:2a:31:52:
6a:ea:4a:1d:ae:35:7c:e8:34:2e:c3:48:56:c9:46:
c7:34:b9:24:4e:cb:60:28:3a:e0:12:e5:d9:b7:87:
f2:89:c5:14:47:7c:89:bf:4d:b5:53:f4:33:d2:17:
ab:b3:37:8c:f6:c7:e6:a6:9b:da:65:2d:20:0b:08:
59:96:9b:13:f5:f7:53:cf:62:63:d5:ca:1e:c0:3c:
be:c7:68:16:2b:1b:99:1e:8b:0e:29:d8:5a:39:d8:
97:a6:4a:a1:a3:db:b5:55:94:b7:12:41:97:85:b9:
7e:14:21:6f:da:6d:ce:6f:05:d9:eb:7a:60:dd:aa:
2b:8e:36:c6:08:73:36:23:f4:5f:07:db:88:46:62:
50:ff:cf:ae:02:15:bb:2f:37:88:de:f7:c9:2f:d8:
9c:70:61:3a:1e:2a:c9:a3:fb:51:95:8c:f2:29:8d:
5d:71:c7:05:15:5b:f7:e3:be:64:e7:f4:80:f8:5a:
b3:5b:ad:9c:8c:e5:95:f5:ab:b6:55:f9:10:b2:cc:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:47:F9:12:29:E7:AE:8B:F4:94:E4:6F:ED:64:09:0B:F7:5D:2B
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ed:d2:16:1a:e1:dc:c7:e0:4e:6b:f3:ee:5a:77:1f:df:44:
64:6f:a3:c9:0f:98:7d:df:0b:ad:22:4b:d4:62:a4:1a:77:e7:
7d:54:ce:9a:da:52:fc:23:76:c7:c1:40:a4:43:a3:aa:fd:29:
bc:2e:21:e0:a7:02:51:e8:d7:6b:9c:96:2d:55:f5:be:79:3b:
d2:6c:bd:38:09:74:f5:10:ef:a6:08:df:80:30:e4:0f:7e:28:
f8:d8:31:b0:ef:fe:26:90:a7:72:25:53:d6:5f:05:7e:4d:d9:
d4:2a:8a:21:20:fe:dc:9c:5e:05:30:e5:59:ee:82:fe:d8:dd:
7c:09:58:55:fc:ea:69:6f:75:90:f3:96:7a:4b:70:f9:51:eb:
2d:a8:19:f2:45:89:40:a7:10:41:6c:84:9e:06:bc:ee:75:f9:
cb:4f:d6:77:f7:90:b7:e1:26:59:5c:b9:de:b3:c7:5f:1f:a1:
6a:97:70:45:85:aa:5b:ce:39:bd:6d:d6:75:a0:5a:00:58:83:
23:f6:3c:73:11:22:b2:1f:f0:d7:51:67:2a:f2:83:b0:2d:0f:
8e:f1:32:f6:f7:8d:73:69:00:c3:b0:97:0b:f6:46:8b:1b:90:
fa:5c:56:01:25:14:5c:ba:15:9a:12:ce:66:97:4e:33:76:10:
05:c7:22:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBYfL8o3MnU+KSlmr5mbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjE1MzE1ZGM3NTBjMDNlNjBmYzM2YTc1MGM1ZTNmZjY2
ZWFjOTQwHhcNMjUwNjEzMTYwMDM2WhcNMjUwNjE0MTYwMDM2WjAzMTEwLwYDVQQD
EyhmOTE5NDdmOTEyMjllN2FlOGJmNDk0ZTQ2ZmVkNjQwOTBiZjc1ZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu6Ub8+g8h/Q2OB33ckXnhnp4Hm7
up/QznPB7PJVykO0Lm5/CX8Pw5BDh+dDUlre2uhiOKdYxcUqMVJq6kodrjV86DQu
w0hWyUbHNLkkTstgKDrgEuXZt4fyicUUR3yJv021U/Qz0herszeM9sfmppvaZS0g
CwhZlpsT9fdTz2Jj1coewDy+x2gWKxuZHosOKdhaOdiXpkqho9u1VZS3EkGXhbl+
FCFv2m3ObwXZ63pg3aorjjbGCHM2I/RfB9uIRmJQ/8+uAhW7LzeI3vfJL9iccGE6
HirJo/tRlYzyKY1dcccFFVv3475k5/SA+FqzW62cjOWV9au2VfkQsswNuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkZR/kSKeeui/SU5G/tZAkL910rMB8GA1UdIwQY
MBaAFIBhUxXcdQwD5g/DanUMXj/2bqyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgt
ZjhlNWIyZDg2ODBjLzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgtZjhlNWIyZDg2ODBj
LzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVO3SFhrh
3MfgTmvz7lp3H99EZG+jyQ+Yfd8LrSJL1GKkGnfnfVTOmtpS/CN2x8FApEOjqv0p
vC4h4KcCUejXa5yWLVX1vnk70my9OAl09RDvpgjfgDDkD34o+NgxsO/+JpCnciVT
1l8Ffk3Z1CqKISD+3JxeBTDlWe6C/tjdfAlYVfzqaW91kPOWektw+VHrLagZ8kWJ
QKcQQWyEnga87nX5y0/Wd/eQt+EmWVy53rPHXx+hapdwRYWqW845vW3WdaBaAFiD
I/Y8cxEish/w11FnKvKDsC0PjvEy9veNc2kAw7CXC/ZGixuQ+lxWASUUXLoVmhLO
ZpdOM3YQBcciIQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:05 2025 by rpki-client