
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
File: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json)
Hash identifier: wVSmNE8nws3ATdKY9oaNp+HArfTfWlClsuaH1902n7M=
Subject key identifier: BF:35:62:A4:30:76:44:AA:F6:3D:26:D4:16:53:23:68:90:1B:A7:12
Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
Certificate issuer: /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Certificate serial: 01987486FBAA1E73302353ACE0574220D375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
Manifest number: 0ED4
Signing time: Mon 04 Aug 2025 10:00:59 +0000
Manifest this update: Mon 04 Aug 2025 10:00:59 +0000
Manifest next update: Tue 05 Aug 2025 10:00:59 +0000
Files and hashes: 1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: VBZ67TJr3x4EiUQKSGHVKPJzQKPHTdhImc3EsVkdlv8=)
2: dhbqsDMCYbdJQ5KWes-T7R0t68c.roa (hash: A26S4K/y1MLobATqv2Mkxdn527XJqQ0E6NlZCnsWU/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:fb:aa:1e:73:30:23:53:ac:e0:57:42:20:d3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Validity
Not Before: Aug 4 10:00:59 2025 GMT
Not After : Aug 5 10:00:59 2025 GMT
Subject: CN=bf3562a4307644aaf63d26d416532368901ba712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:33:b2:7f:83:96:c1:a8:1c:9d:57:d9:02:
e5:a0:fd:f9:92:90:70:b2:22:01:5a:4d:38:af:86:
9e:35:9c:b8:c8:bb:a3:5d:06:54:7c:c1:f6:0f:12:
f1:7c:4c:dd:d0:17:2e:95:bd:e9:ab:fc:b9:54:f5:
a0:b9:c4:76:c8:0a:8e:64:a6:8d:6a:01:1c:2d:55:
00:56:dd:7b:73:59:92:b5:d1:34:5c:32:2b:6d:be:
03:30:b0:13:90:11:0c:09:6a:28:ac:03:e7:58:59:
fe:48:f6:d3:99:10:80:5d:09:75:03:1a:3d:31:6c:
f9:4d:ff:ed:77:e0:a3:15:be:ca:53:34:62:24:c6:
ef:11:1d:c7:fe:35:c9:fd:b3:7d:d6:c0:a6:d3:b7:
17:7c:dc:ee:1a:62:ac:d7:33:38:2b:85:85:a7:a1:
25:c4:c3:87:0f:86:f2:58:64:8c:ab:d1:b8:8d:24:
f1:f2:b3:4b:ce:94:67:d0:c8:ad:b0:25:2b:a0:bf:
0a:15:c6:f6:e5:e5:45:2d:ba:98:ca:08:b4:1b:76:
0a:80:b1:ca:10:d6:74:fc:e0:4e:ff:7d:18:e4:41:
17:81:68:c4:cb:cb:b0:ca:41:16:48:36:86:e1:ad:
66:12:85:76:15:8d:ef:48:ee:3a:0e:9b:1d:8d:ab:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:35:62:A4:30:76:44:AA:F6:3D:26:D4:16:53:23:68:90:1B:A7:12
X509v3 Authority Key Identifier:
keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a5:2b:64:3f:6d:c8:ba:dd:85:5d:af:3b:7b:02:27:a8:d4:
d4:36:05:1f:38:9a:7e:91:b6:ef:7e:d5:d5:50:31:6a:2f:9a:
b1:05:54:3c:da:07:ea:cf:be:5b:e9:d6:c8:94:ac:d7:6b:fe:
87:f5:c7:7e:3a:4f:b9:7c:9a:08:41:de:87:af:de:34:5e:64:
10:be:3d:95:3c:5b:d0:e4:5c:b3:34:23:4c:55:d6:59:6f:29:
02:72:63:21:73:9e:d7:68:3b:df:05:87:63:0e:b5:e4:e8:c5:
9b:8b:f9:04:f9:c2:9e:68:16:18:70:da:c2:82:2c:3d:c0:a7:
87:5d:44:c1:ff:e7:0b:78:08:ec:a8:cb:25:0a:fa:0d:52:21:
0d:3c:85:11:b8:a0:32:3d:e3:71:c0:63:04:68:24:a5:64:dc:
45:d7:7f:10:d3:05:99:66:a4:da:06:40:70:66:43:a8:1d:3a:
6b:3e:a6:11:32:1f:83:3d:60:e3:9d:fc:28:5a:d2:0c:dc:76:
df:1f:e6:62:b7:05:27:61:8a:84:9b:06:d6:a4:a8:71:0c:32:
27:b8:21:e8:5a:85:c0:08:ba:b9:b1:73:98:30:e0:17:26:b7:
eb:c1:69:13:13:7d:45:0f:e6:19:4b:e1:79:c8:92:b6:57:8a:
8c:31:71:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hvuqHnMwI1Os4FdCINN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMWI0YjVjMmRhYWE2ZmMzNTA3MWY0MzhmOTY4YWY2ZmY2
Y2E0ZGEwHhcNMjUwODA0MTAwMDU5WhcNMjUwODA1MTAwMDU5WjAzMTEwLwYDVQQD
EyhiZjM1NjJhNDMwNzY0NGFhZjYzZDI2ZDQxNjUzMjM2ODkwMWJhNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM4zsn+DlsGoHJ1X2QLloP35kpBw
siIBWk04r4aeNZy4yLujXQZUfMH2DxLxfEzd0Bculb3pq/y5VPWgucR2yAqOZKaN
agEcLVUAVt17c1mStdE0XDIrbb4DMLATkBEMCWoorAPnWFn+SPbTmRCAXQl1Axo9
MWz5Tf/td+CjFb7KUzRiJMbvER3H/jXJ/bN91sCm07cXfNzuGmKs1zM4K4WFp6El
xMOHD4byWGSMq9G4jSTx8rNLzpRn0MitsCUroL8KFcb25eVFLbqYygi0G3YKgLHK
ENZ0/OBO/30Y5EEXgWjEy8uwykEWSDaG4a1mEoV2FY3vSO46DpsdjatjEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL81YqQwdkSq9j0m1BZTI2iQG6cSMB8GA1UdIwQY
MBaAFBsbS1wtqqb8NQcfQ4+Wivb/bKTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMt
YTEyNDZjNjdkOWRlLzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMtYTEyNDZjNjdkOWRl
LzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6UrZD9t
yLrdhV2vO3sCJ6jU1DYFHziafpG2737V1VAxai+asQVUPNoH6s++W+nWyJSs12v+
h/XHfjpPuXyaCEHeh6/eNF5kEL49lTxb0ORcszQjTFXWWW8pAnJjIXOe12g73wWH
Yw615OjFm4v5BPnCnmgWGHDawoIsPcCnh11Ewf/nC3gI7KjLJQr6DVIhDTyFEbig
Mj3jccBjBGgkpWTcRdd/ENMFmWak2gZAcGZDqB06az6mETIfgz1g4538KFrSDNx2
3x/mYrcFJ2GKhJsG1qSocQwyJ7gh6FqFwAi6ubFzmDDgFya368FpExN9RQ/mGUvh
eciStleKjDFxyg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:13 2025 by rpki-client