Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
File: GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json)
Hash identifier: HG5iZeWU1n49X2rYdzp4TxXoJioa0VSz/edURafJW7A=
Subject key identifier: 9C:DD:3E:8B:EC:AA:97:F7:B4:6F:8D:F1:60:7F:49:9E:23:14:14:64
Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
Certificate issuer: /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Certificate serial: 0198D65FC5CB5561022E65DAC6F7F422711E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
Manifest number: 0C77
Signing time: Sat 23 Aug 2025 10:00:57 +0000
Manifest this update: Sat 23 Aug 2025 10:00:57 +0000
Manifest next update: Sun 24 Aug 2025 10:00:57 +0000
Files and hashes: 1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: wSkc0iK44jnq6qV0w1l2jkgHN5MzhiWzHxVlGLfcKTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c5:cb:55:61:02:2e:65:da:c6:f7:f4:22:71:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Validity
Not Before: Aug 23 10:00:57 2025 GMT
Not After : Aug 24 10:00:57 2025 GMT
Subject: CN=9cdd3e8becaa97f7b46f8df1607f499e23141464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:f3:60:02:1c:57:55:0f:93:bd:44:3b:0b:
7c:3f:ca:f7:e6:85:a4:17:3e:81:56:d4:0e:0d:34:
84:85:7c:35:36:6e:5f:1f:f8:65:15:4a:75:5d:2a:
c5:df:e7:a0:05:09:34:61:a5:d1:b2:e8:81:1d:41:
a9:ab:f9:b2:34:0f:4a:7f:67:0e:f0:9d:0c:21:7d:
97:9c:56:da:38:15:43:bc:15:f9:79:7c:9f:92:87:
b3:db:c7:56:51:2e:b1:28:0d:56:67:51:2f:a5:ef:
53:4b:69:f0:0d:f9:a4:3a:65:ea:ee:b8:e2:7d:eb:
dd:ff:47:dd:e1:26:5d:38:a9:8d:d0:2f:58:5f:0b:
6b:8d:b4:e0:e5:46:35:2f:65:cf:8f:90:1f:bb:83:
f2:f9:fa:bc:3d:73:bb:17:49:3f:76:13:22:0c:e5:
68:c1:96:9f:02:87:54:19:31:89:ae:05:52:b4:44:
39:37:35:9d:2d:7d:93:1b:9e:74:18:bf:9a:d6:1c:
84:03:e4:5f:a8:a0:dd:90:db:16:7c:03:bd:df:62:
99:59:47:ff:af:dd:8f:ad:8c:c5:dd:74:ff:5f:2d:
68:63:8f:11:7b:0c:12:62:40:62:74:6c:57:40:4f:
34:c5:8c:27:78:8e:12:d9:8c:e5:b5:34:5b:de:24:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DD:3E:8B:EC:AA:97:F7:B4:6F:8D:F1:60:7F:49:9E:23:14:14:64
X509v3 Authority Key Identifier:
keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f7:2b:a0:75:0b:13:db:94:e4:52:e0:20:90:67:c9:a6:6d:
ed:30:8a:01:b1:25:01:14:9f:c8:01:85:86:b6:7a:0d:ab:e4:
60:60:bf:e1:75:09:89:26:e9:4a:90:b9:a1:fc:8c:86:a8:4d:
25:73:62:76:19:0a:33:aa:f4:79:48:69:8d:ba:6b:2b:70:ec:
ec:47:ff:31:da:17:e2:30:97:e1:8a:ad:90:5a:32:d5:b8:12:
99:40:3f:f6:ba:f5:2d:e3:f3:ed:67:3a:0e:b1:49:8e:f9:7f:
32:41:ba:d1:f7:db:db:70:c2:12:87:44:41:69:ea:1f:56:13:
44:6b:9e:61:f2:42:22:aa:dc:55:23:c0:5f:42:e8:69:0c:6e:
66:c8:52:be:63:ba:30:52:56:07:2d:75:3e:91:1d:f8:b8:e5:
20:8d:d4:97:51:d2:8f:f8:d8:b5:be:58:17:8d:47:e5:9b:5d:
d7:31:68:77:0c:1b:cc:94:88:ad:1e:70:db:e5:45:52:ec:06:
d1:3a:2e:58:3a:f5:bc:b4:52:8b:37:55:45:d7:9c:64:84:f8:
fa:21:a1:9b:7f:1c:b1:eb:a6:3b:99:11:92:27:ae:6a:fb:79:
47:85:eb:12:ec:b7:b3:ea:d6:ab:1d:28:e4:91:fe:a1:4d:a3:
81:07:15:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX8XLVWECLmXaxvf0InEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NGQxZjQwODMzODNmNTY4OTVkNmUzZTczYThhMDc3YWRl
YjUwY2IwHhcNMjUwODIzMTAwMDU3WhcNMjUwODI0MTAwMDU3WjAzMTEwLwYDVQQD
Eyg5Y2RkM2U4YmVjYWE5N2Y3YjQ2ZjhkZjE2MDdmNDk5ZTIzMTQxNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPfzYAIcV1UPk71EOwt8P8r35oWk
Fz6BVtQODTSEhXw1Nm5fH/hlFUp1XSrF3+egBQk0YaXRsuiBHUGpq/myNA9Kf2cO
8J0MIX2XnFbaOBVDvBX5eXyfkoez28dWUS6xKA1WZ1Evpe9TS2nwDfmkOmXq7rji
fevd/0fd4SZdOKmN0C9YXwtrjbTg5UY1L2XPj5Afu4Py+fq8PXO7F0k/dhMiDOVo
wZafAodUGTGJrgVStEQ5NzWdLX2TG550GL+a1hyEA+RfqKDdkNsWfAO932KZWUf/
r92PrYzF3XT/Xy1oY48RewwSYkBidGxXQE80xYwneI4S2YzltTRb3iSMuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzdPovsqpf3tG+N8WB/SZ4jFBRkMB8GA1UdIwQY
MBaAFBhNH0CDOD9WiV1uPnOooHet61DLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEt
NjZjYzA4M2I1NjY5LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEtNjZjYzA4M2I1NjY5
LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPcroHUL
E9uU5FLgIJBnyaZt7TCKAbElARSfyAGFhrZ6DavkYGC/4XUJiSbpSpC5ofyMhqhN
JXNidhkKM6r0eUhpjbprK3Ds7Ef/MdoX4jCX4YqtkFoy1bgSmUA/9rr1LePz7Wc6
DrFJjvl/MkG60ffb23DCEodEQWnqH1YTRGueYfJCIqrcVSPAX0LoaQxuZshSvmO6
MFJWBy11PpEd+LjlII3Ul1HSj/jYtb5YF41H5Ztd1zFodwwbzJSIrR5w2+VFUuwG
0TouWDr1vLRSizdVRdecZIT4+iGhm38cseumO5kRkieuavt5R4XrEuy3s+rWqx0o
5JH+oU2jgQcVPg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:16:59 2025 by rpki-client