Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: 893xQ0cSkJ12UyQ6z7Pe5lwoah4o4mhxP1g7XEL7D7g=
Subject key identifier: 26:CD:39:3E:73:EA:BA:CA:A3:33:89:33:29:85:0F:22:6C:85:58:6A
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 0197C04825B083D34FC50FC2A5ABA1A0F268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 164C
Signing time: Mon 30 Jun 2025 10:00:42 +0000
Manifest this update: Mon 30 Jun 2025 10:00:42 +0000
Manifest next update: Tue 01 Jul 2025 10:00:42 +0000
Files and hashes: 1: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: QfhTLLiRX5psWdzgqm7LV9vfRLRvTKtt7FS5FBkcG2k=)
3: znbCSfa62MjugadmDs4WgFylkOE.roa (hash: BgJAdJjqsI+/hgUR8pI1g1wNl4LGRoW3tmialyMKGr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:25:b0:83:d3:4f:c5:0f:c2:a5:ab:a1:a0:f2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jun 30 10:00:42 2025 GMT
Not After : Jul 1 10:00:42 2025 GMT
Subject: CN=26cd393e73eabacaa333893329850f226c85586a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:b7:a9:90:63:20:b2:a6:18:2c:59:42:22:
60:d4:28:d3:b3:a8:11:92:04:f3:5f:fa:82:54:ea:
71:86:29:21:79:98:df:36:fd:24:9d:54:f9:ad:d1:
88:70:03:86:a8:f8:18:84:ea:89:1e:b6:89:9e:ef:
b0:9a:79:f7:57:81:3d:d5:52:c6:92:0b:6b:cb:51:
78:8d:9c:31:6f:0a:3c:ad:db:a8:11:5a:05:58:45:
e4:86:23:2d:4f:ee:61:39:fa:b1:e0:fb:09:b7:47:
fa:e4:2b:7c:20:07:13:4a:2c:7d:cd:40:1f:68:c7:
28:06:9d:06:d8:26:ed:53:de:2f:89:1e:65:a8:b1:
45:db:2d:76:c4:f8:58:60:8c:ea:74:d3:38:76:5d:
bd:21:79:9e:a0:06:11:81:a9:d8:d0:0f:ed:1f:7a:
46:77:3e:b2:63:ef:83:11:eb:73:cb:1f:5e:69:f3:
d4:ef:9f:33:e0:52:3a:97:28:10:bb:46:67:68:99:
cd:13:76:e3:39:ac:dd:25:aa:01:97:28:2d:22:40:
2b:a6:d5:00:87:49:26:f3:3a:cf:d5:ce:c1:4f:df:
45:1d:a1:58:5e:21:19:fb:77:00:cb:1c:e2:2e:30:
b2:ac:9e:63:c5:62:7f:2d:95:70:06:e2:bb:35:e6:
15:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CD:39:3E:73:EA:BA:CA:A3:33:89:33:29:85:0F:22:6C:85:58:6A
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c3:eb:98:4d:60:70:b1:df:8d:d6:42:13:87:cc:0f:42:f9:
f3:27:77:c3:69:e1:d5:c4:fa:3c:2e:44:de:22:40:ca:03:6f:
1a:e8:ff:86:0e:bb:eb:d1:1b:38:f1:46:ad:e3:4e:1c:76:f8:
ad:ef:b2:6c:6a:9a:59:bb:2d:cf:e5:be:d5:fb:41:25:c9:ab:
1f:df:cf:57:97:ef:06:09:a0:f0:a4:01:13:fc:ea:92:d5:f4:
91:60:77:7d:39:73:a9:dd:82:74:5e:26:c4:f7:c8:47:bb:4a:
1c:fb:4c:21:69:3b:e6:39:d4:f8:2a:05:6a:24:25:97:f7:70:
c4:95:c2:ca:38:84:fb:2c:79:67:f2:2b:96:da:e8:46:c0:34:
1f:2a:35:44:2b:b4:d6:5b:c2:f3:cf:c8:4b:55:c1:06:21:d8:
1b:be:64:d5:ec:4d:a2:47:9d:75:89:bb:0c:ad:30:11:1a:d4:
ec:f3:53:c1:5c:64:5c:64:45:70:43:77:02:78:4a:e7:6d:14:
d4:53:5b:33:4f:a1:ee:f3:e2:e6:02:d7:26:d5:ad:70:d7:fe:
a5:74:ef:7e:56:57:be:e8:0c:54:d9:70:c9:c0:13:67:ab:74:
71:0d:13:d6:5e:21:10:40:55:13:2d:ed:b5:fa:30:59:7f:51:
35:ca:d8:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfASCWwg9NPxQ/CpauhoPJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjUwNjMwMTAwMDQyWhcNMjUwNzAxMTAwMDQyWjAzMTEwLwYDVQQD
EygyNmNkMzkzZTczZWFiYWNhYTMzMzg5MzMyOTg1MGYyMjZjODU1ODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxK3qZBjILKmGCxZQiJg1CjTs6gR
kgTzX/qCVOpxhikheZjfNv0knVT5rdGIcAOGqPgYhOqJHraJnu+wmnn3V4E91VLG
kgtry1F4jZwxbwo8rduoEVoFWEXkhiMtT+5hOfqx4PsJt0f65Ct8IAcTSix9zUAf
aMcoBp0G2CbtU94viR5lqLFF2y12xPhYYIzqdNM4dl29IXmeoAYRganY0A/tH3pG
dz6yY++DEetzyx9eafPU758z4FI6lygQu0ZnaJnNE3bjOazdJaoBlygtIkArptUA
h0km8zrP1c7BT99FHaFYXiEZ+3cAyxziLjCyrJ5jxWJ/LZVwBuK7NeYVPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbNOT5z6rrKozOJMymFDyJshVhqMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMPrmE1g
cLHfjdZCE4fMD0L58yd3w2nh1cT6PC5E3iJAygNvGuj/hg6769EbOPFGreNOHHb4
re+ybGqaWbstz+W+1ftBJcmrH9/PV5fvBgmg8KQBE/zqktX0kWB3fTlzqd2CdF4m
xPfIR7tKHPtMIWk75jnU+CoFaiQll/dwxJXCyjiE+yx5Z/IrltroRsA0Hyo1RCu0
1lvC88/IS1XBBiHYG75k1exNokeddYm7DK0wERrU7PNTwVxkXGRFcEN3AnhK520U
1FNbM0+h7vPi5gLXJtWtcNf+pXTvflZXvugMVNlwycATZ6t0cQ0T1l4hEEBVEy3t
tfowWX9RNcrYcA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:11:42 2025 by rpki-client