Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
File: gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json)
Hash identifier: y2ILmIzKXJ3jrtMjvha/J2gwG3/VK5RNwnhwhCKirVY=
Subject key identifier: A9:61:82:F2:2B:37:3F:5F:7C:CB:6C:DC:A9:ED:03:AD:97:84:26:F8
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Certificate issuer: /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial: 01989637092ACEFFD6213C31E5A342AFD0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
Manifest number: 0E6B
Signing time: Sun 10 Aug 2025 23:00:45 +0000
Manifest this update: Sun 10 Aug 2025 23:00:45 +0000
Manifest next update: Mon 11 Aug 2025 23:00:45 +0000
Files and hashes: 1: LGI_BMqz48rF1CAQFBrnzf381U0.roa (hash: eJvU6iSIuiB2ZVQ2ar/OXbcHw5p8L+QuWzmrOM6M7qg=)
2: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: ydsIXfnSYyh+FjJ9irwvNRLfUDe8nQaoyQroeAomWPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:09:2a:ce:ff:d6:21:3c:31:e5:a3:42:af:d0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Validity
Not Before: Aug 10 23:00:45 2025 GMT
Not After : Aug 11 23:00:45 2025 GMT
Subject: CN=a96182f22b373f5f7ccb6cdca9ed03ad978426f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:18:df:11:29:ea:07:80:90:47:d9:fe:87:
38:15:3c:4c:9e:9f:fa:ba:32:0d:49:4a:bf:57:af:
1e:b9:d4:e2:f9:00:2b:ad:23:16:ba:9c:6d:ca:a3:
af:3e:a8:f5:10:45:a1:97:5a:85:24:30:01:fc:b6:
ae:c6:8b:9d:6e:e8:35:ab:60:de:2b:5c:20:bc:b7:
6a:42:20:32:9e:23:6e:8b:8b:70:6b:23:3c:f6:69:
8e:f9:c8:6b:80:2d:9a:fe:c7:b6:25:9b:5d:a7:e9:
13:fb:48:20:8b:65:ca:52:79:1b:5c:b1:65:5d:bc:
e3:47:32:92:1a:82:de:f1:e7:40:37:60:c6:42:f4:
3f:e1:b5:dd:14:cc:7a:46:19:f0:71:6b:c7:08:58:
46:8a:56:59:fb:96:bd:7e:3a:ae:93:e2:d1:1b:74:
44:ae:ad:29:46:1c:51:42:f2:44:7c:10:4e:42:e3:
3a:fa:3b:f8:32:c1:66:fc:1d:62:51:40:e2:8e:b7:
18:ee:3f:bf:17:51:b2:a1:b2:61:0a:77:72:75:c5:
dd:10:13:a4:0f:d8:0e:0c:1d:dc:84:08:c6:fa:d8:
b9:e8:20:2a:36:51:30:59:87:df:67:86:24:b6:73:
b4:8c:67:ee:da:ab:bd:91:d8:cc:cd:f4:18:7b:6f:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:61:82:F2:2B:37:3F:5F:7C:CB:6C:DC:A9:ED:03:AD:97:84:26:F8
X509v3 Authority Key Identifier:
keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c5:de:fc:8f:b4:3f:27:83:d7:fd:91:da:2f:18:e6:54:dc:
19:4d:fe:49:10:02:d9:b4:c2:04:2c:46:6d:8d:83:0c:bf:0b:
bc:f8:e8:07:20:1b:1d:08:b6:a4:d3:43:e7:ac:04:2e:41:e4:
dc:0f:40:0f:81:b3:84:73:bc:66:17:65:9e:2c:2c:d2:88:fd:
9f:a9:7b:d6:7a:14:85:bc:13:f7:ec:69:28:c6:46:0d:27:ac:
43:e9:ef:08:8f:34:79:bd:d5:76:ae:17:29:b0:68:cc:40:82:
3a:56:b8:80:72:84:54:9b:b0:1c:6f:12:60:fa:41:56:e4:1b:
8e:f2:ee:6e:07:59:48:c4:0f:c4:60:c7:ec:82:9b:00:cd:92:
da:e3:29:11:53:95:85:64:4f:5a:36:51:3a:7c:d2:46:95:2e:
53:bf:ed:85:46:d6:2d:21:5a:1e:20:43:94:af:7c:11:66:91:
e0:b2:c8:e3:51:1c:ee:03:a4:67:e6:a7:9f:77:8d:30:82:30:
1c:7d:07:ce:89:c2:37:7d:53:a6:a4:55:4d:c4:4c:38:bc:88:
a6:b5:a6:b0:c4:eb:06:74:34:a3:2d:0a:55:a3:95:30:79:a8:
11:9b:fa:a6:dd:01:76:6d:c2:75:94:8f:78:28:7a:ac:bc:ac:
cb:63:73:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWNwkqzv/WITwx5aNCr9DdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWY2ZTlmZjFmYmJmMjFmNjQxM2ExMzdlNzM2N2RkOGE4
YzAzNWMwHhcNMjUwODEwMjMwMDQ1WhcNMjUwODExMjMwMDQ1WjAzMTEwLwYDVQQD
EyhhOTYxODJmMjJiMzczZjVmN2NjYjZjZGNhOWVkMDNhZDk3ODQyNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHQY3xEp6geAkEfZ/oc4FTxMnp/6
ujINSUq/V68eudTi+QArrSMWupxtyqOvPqj1EEWhl1qFJDAB/Lauxoudbug1q2De
K1wgvLdqQiAyniNui4twayM89mmO+chrgC2a/se2JZtdp+kT+0ggi2XKUnkbXLFl
XbzjRzKSGoLe8edAN2DGQvQ/4bXdFMx6RhnwcWvHCFhGilZZ+5a9fjquk+LRG3RE
rq0pRhxRQvJEfBBOQuM6+jv4MsFm/B1iUUDijrcY7j+/F1GyobJhCndydcXdEBOk
D9gODB3chAjG+ti56CAqNlEwWYffZ4YktnO0jGfu2qu9kdjMzfQYe29lcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlhgvIrNz9ffMts3KntA62XhCb4MB8GA1UdIwQY
MBaAFIIfbp/x+78h9kE6E35zZ92KjANcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMDc2ZGMtMTBkOC00NGNjLThhYTUt
NWE5NGFkMTMzMTE4LzEvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lMDc2ZGMtMTBkOC00NGNjLThhYTUtNWE5NGFkMTMzMTE4
LzEvZ2g5dW5fSDd2eUgyUVRvVGZuTm4zWXFNQTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcXe/I+0
PyeD1/2R2i8Y5lTcGU3+SRAC2bTCBCxGbY2DDL8LvPjoByAbHQi2pNND56wELkHk
3A9AD4GzhHO8Zhdlniws0oj9n6l71noUhbwT9+xpKMZGDSesQ+nvCI80eb3Vdq4X
KbBozECCOla4gHKEVJuwHG8SYPpBVuQbjvLubgdZSMQPxGDH7IKbAM2S2uMpEVOV
hWRPWjZROnzSRpUuU7/thUbWLSFaHiBDlK98EWaR4LLI41Ec7gOkZ+ann3eNMIIw
HH0HzonCN31TpqRVTcRMOLyIprWmsMTrBnQ0oy0KVaOVMHmoEZv6pt0Bdm3CdZSP
eCh6rLysy2NzVA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:06:12 2025 by rpki-client