Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: Jlh8evLpp7GQBavdlGu+VsIfDWQ6ZpuyPPByjmQuAJU=
Subject key identifier: C8:3D:17:26:15:52:9F:87:66:E4:3D:C3:F6:3D:FA:46:5B:FA:45:AE
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 0198D705CC1B2A4E4F7FFFE5878517F1397F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0A61
Signing time: Sat 23 Aug 2025 13:02:17 +0000
Manifest this update: Sat 23 Aug 2025 13:02:17 +0000
Manifest next update: Sun 24 Aug 2025 13:02:17 +0000
Files and hashes: 1: 5QlNV7-3Q34zZfQ5XbNLc8wKA40.roa (hash: T1GmpANOUDoxZLUDnHoNMN2ENMK9C/xESzMwTNL0s2Y=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: RGowol/BGwKScZtrUNXlQdLMjPzFsfMD8/zI66aKLsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:cc:1b:2a:4e:4f:7f:ff:e5:87:85:17:f1:39:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Aug 23 13:02:17 2025 GMT
Not After : Aug 24 13:02:17 2025 GMT
Subject: CN=c83d172615529f8766e43dc3f63dfa465bfa45ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:3e:61:02:07:81:a0:2b:14:29:23:3c:72:
e4:6a:e3:9b:19:b3:36:f9:aa:2f:32:39:41:e8:38:
2b:f7:ba:ef:9e:04:c2:9f:8a:cc:04:86:8c:13:9d:
4f:ad:51:2c:92:2b:12:e9:54:39:6c:87:b2:61:a7:
de:c5:c2:0d:45:d8:f3:5f:ba:5a:d5:83:b2:02:9b:
43:0f:ae:a7:fa:99:5a:8a:a5:99:1f:7e:2a:30:52:
e3:33:d4:88:cd:c0:0d:2f:b4:5a:54:73:4c:2c:bf:
91:45:4d:23:03:a0:7b:ea:05:f1:13:5d:ca:0b:1a:
1a:0e:b5:aa:e1:40:40:54:f2:1c:94:60:8e:65:71:
be:12:49:84:b9:97:61:8c:c4:08:3b:30:08:6d:5d:
df:ce:1f:2d:86:51:df:ee:73:d6:71:cf:24:5c:a1:
ca:c0:74:b5:58:d5:a3:a0:c9:37:cf:24:d5:e5:0f:
da:c2:dc:f5:c1:a1:1e:63:14:82:08:c4:48:46:68:
67:a5:2a:31:b4:28:8b:21:84:ba:e1:e7:7a:67:72:
7e:40:44:6d:08:94:84:e7:56:23:0a:6b:ed:f3:04:
4f:0b:8c:6a:16:1c:3f:04:86:65:da:f3:1f:ec:90:
8c:b3:17:bc:b6:65:a2:87:35:08:a7:0e:bd:11:10:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3D:17:26:15:52:9F:87:66:E4:3D:C3:F6:3D:FA:46:5B:FA:45:AE
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d4:9e:cc:8a:ab:da:9c:1f:75:55:19:57:b4:e3:1d:4c:b1:
6f:e7:89:db:c6:a9:cf:2e:95:67:d1:c3:8b:7c:e4:03:ed:09:
d1:55:f1:2e:59:3c:0f:d0:7f:7c:81:4a:3d:a2:8b:fb:8c:08:
f6:7a:55:5a:ea:8b:bb:32:9e:5e:75:4a:b2:37:0d:c6:c1:d5:
fd:a4:04:87:9b:ae:f2:db:a5:5b:56:fe:57:d9:b8:9c:cf:8c:
dc:c0:ca:fa:2f:7c:7f:5b:a7:1d:3a:8d:e7:26:d6:f2:20:60:
e1:59:c5:89:7c:3c:ff:1f:9b:ce:5a:5b:82:4b:07:95:26:c3:
92:8b:b8:89:c8:9e:48:14:8f:3b:5f:1d:9a:3d:3b:ce:4f:88:
cc:31:84:29:43:71:ff:43:0f:ed:66:a8:fe:64:a9:7a:3c:24:
7c:ba:63:8e:36:14:63:5a:a9:75:6a:cb:f5:3f:b7:26:ae:8f:
0f:34:c7:bc:66:55:44:ce:1a:30:11:16:ae:5e:18:11:f1:27:
88:65:3e:f3:0e:f3:12:01:0f:82:ff:8e:ea:bc:eb:a7:d2:36:
a4:23:9d:59:f9:ef:36:40:10:07:3f:6a:cd:19:c9:de:40:a6:
9a:70:cc:4a:8d:95:09:8e:34:68:1a:94:d1:6a:ff:4c:9a:31:
19:8d:c0:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBcwbKk5Pf//lh4UX8Tl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNDFmZWVhMTIzZmNiMDdlODcyYThjYjRiZGQ5YWI3Yjhk
YTJmY2YwHhcNMjUwODIzMTMwMjE3WhcNMjUwODI0MTMwMjE3WjAzMTEwLwYDVQQD
EyhjODNkMTcyNjE1NTI5Zjg3NjZlNDNkYzNmNjNkZmE0NjViZmE0NWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6E+YQIHgaArFCkjPHLkauObGbM2
+aovMjlB6Dgr97rvngTCn4rMBIaME51PrVEskisS6VQ5bIeyYafexcINRdjzX7pa
1YOyAptDD66n+plaiqWZH34qMFLjM9SIzcANL7RaVHNMLL+RRU0jA6B76gXxE13K
CxoaDrWq4UBAVPIclGCOZXG+EkmEuZdhjMQIOzAIbV3fzh8thlHf7nPWcc8kXKHK
wHS1WNWjoMk3zyTV5Q/awtz1waEeYxSCCMRIRmhnpSoxtCiLIYS64ed6Z3J+QERt
CJSE51YjCmvt8wRPC4xqFhw/BIZl2vMf7JCMsxe8tmWihzUIpw69ERApSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMg9FyYVUp+HZuQ9w/Y9+kZb+kWuMB8GA1UdIwQY
MBaAFIBB/uoSP8sH6HKoy0vdmre42i/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0VILTZoSV95d2ZvY3FqTFM5MmF0N2phTDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kMzE3Y2EtMzk2MS00ZmUwLWJkZTgt
ZjdjNTAxNDE4ZTU2LzEvZ0VILTZoSV95d2ZvY3FqTFM5MmF0N2phTDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9kMzE3Y2EtMzk2MS00ZmUwLWJkZTgtZjdjNTAxNDE4ZTU2
LzEvZ0VILTZoSV95d2ZvY3FqTFM5MmF0N2phTDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotSezIqr
2pwfdVUZV7TjHUyxb+eJ28apzy6VZ9HDi3zkA+0J0VXxLlk8D9B/fIFKPaKL+4wI
9npVWuqLuzKeXnVKsjcNxsHV/aQEh5uu8tulW1b+V9m4nM+M3MDK+i98f1unHTqN
5ybW8iBg4VnFiXw8/x+bzlpbgksHlSbDkou4icieSBSPO18dmj07zk+IzDGEKUNx
/0MP7Wao/mSpejwkfLpjjjYUY1qpdWrL9T+3Jq6PDzTHvGZVRM4aMBEWrl4YEfEn
iGU+8w7zEgEPgv+O6rzrp9I2pCOdWfnvNkAQBz9qzRnJ3kCmmnDMSo2VCY40aBqU
0Wr/TJoxGY3A8g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:31 2025 by rpki-client