Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: mYJaVcz2A6T2w1MFzFIcBDXiTULSS0Yjgf9TCOsf8Q4=
Subject key identifier: 10:21:98:1F:58:B4:0E:F0:88:C1:B9:77:E7:99:43:8F:79:02:66:8C
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 0198D698374841770BE93189C6C58024EACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 16DD
Signing time: Sat 23 Aug 2025 11:02:36 +0000
Manifest this update: Sat 23 Aug 2025 11:02:36 +0000
Manifest next update: Sun 24 Aug 2025 11:02:36 +0000
Files and hashes: 1: PKnw-L5JAMuLVLW_rPUfl50hgHY.roa (hash: Byni1NysoU1wt70wQe2A3ExqD7CHoo8EoSDduRrEOLI=)
2: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
3: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: M6vtZViwK/4PIjhiSDXA0+ekHeay52HOk1lnVKgghk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:37:48:41:77:0b:e9:31:89:c6:c5:80:24:ea:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Aug 23 11:02:36 2025 GMT
Not After : Aug 24 11:02:36 2025 GMT
Subject: CN=1021981f58b40ef088c1b977e799438f7902668c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:8c:21:17:92:0e:d7:98:ff:75:49:88:db:
49:31:b1:c0:6a:32:e0:8f:6a:d5:7d:16:dd:0e:d1:
ed:92:77:b1:99:be:6b:12:60:74:90:6f:68:af:67:
97:c3:c5:ef:d0:fb:0c:41:db:ee:45:f1:f0:ab:83:
80:9a:d4:43:6a:80:b1:78:26:37:ce:cf:e9:25:8d:
4c:fc:1b:c5:ab:a2:ee:86:98:ba:35:6a:8a:54:b4:
54:fd:3e:8c:5a:29:99:7e:61:f9:fa:d7:a6:68:36:
da:7c:cc:82:c7:56:6c:85:81:05:af:02:e7:5a:f2:
23:5f:ed:b7:59:9b:cb:a8:e2:c7:11:1a:de:dd:34:
a3:0f:a6:a2:09:8e:5e:bf:61:91:1a:f1:10:69:82:
ab:12:c4:85:f9:b1:13:ae:9d:05:43:53:5c:74:4e:
72:d3:d3:7c:8a:17:a1:44:dc:67:39:20:72:bd:a7:
1e:ab:3f:0a:90:17:92:53:20:9a:62:a3:30:a0:7b:
23:0e:a9:91:a3:14:eb:3f:f8:7a:c8:52:fd:05:9c:
c4:1d:30:30:3c:48:ea:b8:79:f2:a1:7e:29:a6:c1:
57:f3:23:33:f7:ba:94:55:2f:96:67:0a:eb:75:e8:
ef:60:cd:45:01:1a:02:7f:07:c6:bf:a4:0a:28:6c:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:21:98:1F:58:B4:0E:F0:88:C1:B9:77:E7:99:43:8F:79:02:66:8C
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6d:8e:a2:9d:1b:17:fc:a9:2f:ad:7a:bf:e8:0d:34:6d:7c:
25:da:72:d5:cf:73:55:94:4d:dd:51:ed:39:35:d1:39:99:79:
a8:ec:7e:c3:88:87:40:c9:11:89:f8:68:21:2d:63:c4:8c:16:
5a:39:d4:c7:3d:b0:42:b3:f9:fa:9a:46:74:57:55:d9:c3:a0:
03:71:ed:f6:68:97:e4:c9:d4:d7:ed:62:5b:ff:99:29:73:ba:
3f:c8:75:dc:a2:e5:50:14:1b:79:2a:4b:3f:74:e9:b0:30:13:
a8:d2:ba:8e:d5:27:5a:92:eb:c7:41:ff:74:27:5c:8e:1b:60:
2d:c8:7d:cd:0c:7f:fd:4a:76:da:0f:2a:74:57:a1:68:96:6b:
fc:76:c6:b0:1c:ea:e1:64:fc:d7:9c:12:34:bc:29:9b:20:ef:
c8:61:3d:6e:0c:8c:7b:a9:32:b5:1e:9c:5b:a0:8d:39:05:2a:
5a:66:83:fd:07:91:b5:21:38:5e:cb:ea:c0:4b:5a:ed:f3:f5:
05:b6:70:45:06:c5:99:bd:59:fc:bb:66:2c:4f:6b:47:c8:fb:
7c:ce:d1:95:60:95:e3:a5:d1:97:d4:47:19:e9:69:2e:ee:6e:
f6:d8:e5:95:22:f1:35:c2:09:37:c9:73:bf:58:20:1a:0d:e8:
33:48:7e:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmDdIQXcL6TGJxsWAJOrNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjUwODIzMTEwMjM2WhcNMjUwODI0MTEwMjM2WjAzMTEwLwYDVQQD
EygxMDIxOTgxZjU4YjQwZWYwODhjMWI5NzdlNzk5NDM4Zjc5MDI2NjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5GMIReSDteY/3VJiNtJMbHAajLg
j2rVfRbdDtHtknexmb5rEmB0kG9or2eXw8Xv0PsMQdvuRfHwq4OAmtRDaoCxeCY3
zs/pJY1M/BvFq6Luhpi6NWqKVLRU/T6MWimZfmH5+temaDbafMyCx1ZshYEFrwLn
WvIjX+23WZvLqOLHERre3TSjD6aiCY5ev2GRGvEQaYKrEsSF+bETrp0FQ1NcdE5y
09N8ihehRNxnOSByvaceqz8KkBeSUyCaYqMwoHsjDqmRoxTrP/h6yFL9BZzEHTAw
PEjquHnyoX4ppsFX8yMz97qUVS+WZwrrdejvYM1FARoCfwfGv6QKKGyL2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAhmB9YtA7wiMG5d+eZQ495AmaMMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp22Oop0b
F/ypL616v+gNNG18Jdpy1c9zVZRN3VHtOTXROZl5qOx+w4iHQMkRifhoIS1jxIwW
WjnUxz2wQrP5+ppGdFdV2cOgA3Ht9miX5MnU1+1iW/+ZKXO6P8h13KLlUBQbeSpL
P3TpsDATqNK6jtUnWpLrx0H/dCdcjhtgLch9zQx//Up22g8qdFehaJZr/HbGsBzq
4WT815wSNLwpmyDvyGE9bgyMe6kytR6cW6CNOQUqWmaD/QeRtSE4XsvqwEta7fP1
BbZwRQbFmb1Z/LtmLE9rR8j7fM7RlWCV46XRl9RHGelpLu5u9tjllSLxNcIJN8lz
v1ggGg3oM0h+qg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:47:13 2025 by rpki-client