Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier: lKU3Qfs7YwXLV+vPmiWitOgB7CNoO8vUrXGW15Ftcns=
Subject key identifier: F4:B6:62:82:13:C7:DE:37:69:E9:62:82:80:C2:FB:0A:E7:95:6F:E5
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 01987C40C8775FD4BBEA15FCB05440013381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number: 1622
Signing time: Tue 05 Aug 2025 22:01:16 +0000
Manifest this update: Tue 05 Aug 2025 22:01:16 +0000
Manifest next update: Wed 06 Aug 2025 22:01:16 +0000
Files and hashes: 1: dUjydhDtv2Ysc8dEDoiT2yx34lg.roa (hash: ebc83oZNm2ylmobsykoAv58WP6zLL9GO+02NODZysqQ=)
2: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: uPuNp/TXRuW2J+RCf+E/dqOmFmnLOyLnXCYGQ1NP3zw=)
3: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:c8:77:5f:d4:bb:ea:15:fc:b0:54:40:01:33:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Aug 5 22:01:16 2025 GMT
Not After : Aug 6 22:01:16 2025 GMT
Subject: CN=f4b6628213c7de3769e9628280c2fb0ae7956fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:c5:74:1e:ce:4e:2b:b4:cc:a6:09:a7:bb:
1c:e2:e5:e4:d0:1d:c0:a4:3a:17:61:e8:6f:b6:66:
e2:c3:71:83:ed:99:b7:e6:97:3f:25:2c:d0:29:b2:
c6:05:39:53:87:a8:02:1c:0f:fb:77:cc:87:9e:8f:
b6:96:aa:c3:94:df:25:a3:cd:aa:6c:3b:b4:80:de:
b9:f3:71:e5:51:74:33:33:10:ed:42:d9:a6:7a:92:
2e:3e:85:05:66:0e:c0:7e:23:56:5a:88:78:90:4d:
85:43:fd:ba:ea:49:e2:bc:43:b2:e5:ba:7b:68:23:
3c:4d:f6:1d:26:ba:4a:f1:39:66:bd:96:d6:d0:81:
f5:f5:fe:4e:d6:4d:9b:4a:c9:f0:e5:cc:ac:60:ef:
b5:fa:5b:f0:f1:61:f3:af:4b:d0:83:5d:60:71:c7:
e4:29:f0:5d:87:92:dd:1d:3b:35:dd:e1:45:a8:ad:
00:f4:a7:0a:c3:0e:b8:79:55:aa:32:f5:e3:e5:ca:
32:d5:ce:25:76:83:89:5d:44:40:4a:92:d0:69:10:
63:66:fc:4a:00:db:12:4a:50:d0:70:aa:3e:27:59:
97:e8:7c:47:7d:55:e2:7f:1a:e8:fb:a9:be:ca:bf:
43:18:b1:16:a8:98:f2:03:d6:8d:d4:9b:95:69:f9:
35:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B6:62:82:13:C7:DE:37:69:E9:62:82:80:C2:FB:0A:E7:95:6F:E5
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:52:7d:9f:2e:0e:22:c4:9a:6f:cb:c7:f3:c5:4f:60:76:dd:
b4:71:6f:1e:be:2c:69:4b:6f:18:ff:17:4d:26:08:96:55:ae:
ed:4e:d6:bd:7f:e6:f9:9e:f0:dd:bf:c8:b4:90:af:80:ec:92:
5b:83:a7:be:08:98:ab:6e:ca:be:5b:26:c5:1b:7c:09:0b:92:
3d:d9:fa:6a:d6:2d:c7:ad:f5:9a:c6:1d:45:c9:1d:67:66:a6:
e4:0a:90:9c:de:d9:3e:a4:4b:a2:10:3d:c7:7b:76:6a:12:9a:
ec:4c:df:2b:0f:3b:22:a1:17:c2:4a:e7:55:8a:2f:82:b5:1a:
85:fc:fd:df:bc:0e:35:ae:71:9c:d4:a6:dd:ef:c8:d8:68:bf:
de:c8:1d:3a:39:e7:b8:a6:18:26:fa:c1:c5:0b:00:02:90:8b:
ed:a3:52:33:98:1d:87:76:1d:8b:51:de:ea:e7:cd:2c:42:29:
12:fb:e7:ba:2f:29:c0:78:fe:2c:56:24:fc:3d:2e:d7:a7:19:
2e:ba:f1:49:8b:7e:d1:c3:25:7a:e5:9d:fa:bb:88:70:82:24:
49:36:7a:80:6e:e4:b3:38:37:16:57:c2:62:28:87:b3:39:dc:
ff:44:19:87:83:2f:35:54:6b:2b:84:49:1d:7d:79:58:d2:8e:
cd:4f:51:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QMh3X9S76hX8sFRAATOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjE1MzE1ZGM3NTBjMDNlNjBmYzM2YTc1MGM1ZTNmZjY2
ZWFjOTQwHhcNMjUwODA1MjIwMTE2WhcNMjUwODA2MjIwMTE2WjAzMTEwLwYDVQQD
EyhmNGI2NjI4MjEzYzdkZTM3NjllOTYyODI4MGMyZmIwYWU3OTU2ZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1HFdB7OTiu0zKYJp7sc4uXk0B3A
pDoXYehvtmbiw3GD7Zm35pc/JSzQKbLGBTlTh6gCHA/7d8yHno+2lqrDlN8lo82q
bDu0gN6583HlUXQzMxDtQtmmepIuPoUFZg7AfiNWWoh4kE2FQ/266knivEOy5bp7
aCM8TfYdJrpK8TlmvZbW0IH19f5O1k2bSsnw5cysYO+1+lvw8WHzr0vQg11gccfk
KfBdh5LdHTs13eFFqK0A9KcKww64eVWqMvXj5coy1c4ldoOJXURASpLQaRBjZvxK
ANsSSlDQcKo+J1mX6HxHfVXifxro+6m+yr9DGLEWqJjyA9aN1JuVafk16wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPS2YoITx943aeligoDC+wrnlW/lMB8GA1UdIwQY
MBaAFIBhUxXcdQwD5g/DanUMXj/2bqyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgt
ZjhlNWIyZDg2ODBjLzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgtZjhlNWIyZDg2ODBj
LzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlJ9ny4O
IsSab8vH88VPYHbdtHFvHr4saUtvGP8XTSYIllWu7U7WvX/m+Z7w3b/ItJCvgOyS
W4OnvgiYq27KvlsmxRt8CQuSPdn6atYtx631msYdRckdZ2am5AqQnN7ZPqRLohA9
x3t2ahKa7EzfKw87IqEXwkrnVYovgrUahfz937wONa5xnNSm3e/I2Gi/3sgdOjnn
uKYYJvrBxQsAApCL7aNSM5gdh3Ydi1He6ufNLEIpEvvnui8pwHj+LFYk/D0u16cZ
LrrxSYt+0cMleuWd+ruIcIIkSTZ6gG7kszg3FlfCYiiHsznc/0QZh4MvNVRrK4RJ
HX15WNKOzU9Rrw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:52:15 2025 by rpki-client