Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
File: gvjR2XuYaTmDMZTuI04MTZW1KJM.mft (raw, json)
Hash identifier: qGk4mz0f5yp3K52T5dM3UiPsH6MgO51wm0eGz0P9tgE=
Subject key identifier: 42:87:A6:A4:A1:04:27:97:25:B0:B6:1E:01:C5:2C:78:9E:EE:84:1D
Authority key identifier: 82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
Certificate issuer: /CN=82f8d1d97b986939833194ee234e0c4d95b52893
Certificate serial: 0197B7EAA27DDF284F440642DE1604E44F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
Manifest number: 0239
Signing time: Sat 28 Jun 2025 19:01:36 +0000
Manifest this update: Sat 28 Jun 2025 19:01:36 +0000
Manifest next update: Sun 29 Jun 2025 19:01:36 +0000
Files and hashes: 1: MxQNfpi-fhkY4RJBYH0rmNMo89A.roa (hash: LDqZG0CpfjjbhzqTlBUwL76WIHLWIHUvF2f/c9xQewQ=)
2: gvjR2XuYaTmDMZTuI04MTZW1KJM.crl (hash: 9T5AIHYC0VYci4Le2PN7yp5PQmZkMaPJKiJMVKntKeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a2:7d:df:28:4f:44:06:42:de:16:04:e4:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f8d1d97b986939833194ee234e0c4d95b52893
Validity
Not Before: Jun 28 19:01:36 2025 GMT
Not After : Jun 29 19:01:36 2025 GMT
Subject: CN=4287a6a4a104279725b0b61e01c52c789eee841d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:a3:56:73:13:b4:63:41:b3:ee:30:ae:5d:
55:55:39:1d:28:91:e9:48:09:a0:e5:d8:3b:96:e8:
ab:90:a1:3d:a6:c9:19:29:fd:a6:1e:ee:e5:ca:60:
be:86:58:3b:14:c4:ff:d9:11:42:d4:6b:75:62:03:
d8:1d:c2:04:31:da:04:a9:93:3d:f2:1f:5c:a4:4e:
db:80:19:a9:99:d6:b1:cd:3f:af:4b:52:0f:dc:b4:
d2:49:69:ab:49:57:7d:0d:49:28:fb:79:83:3c:2d:
59:7c:6c:b0:ad:48:13:19:66:da:04:fa:2e:47:a9:
ea:67:cc:af:3c:7f:69:55:b7:93:6d:85:b3:fb:89:
22:a8:35:8d:2e:b0:16:da:a5:82:29:35:0b:17:f0:
38:4d:49:02:b0:75:dc:27:56:9e:83:3e:65:e6:dc:
78:f3:9a:cc:2a:67:68:a7:04:e0:fb:8a:56:3b:09:
4b:57:9b:17:54:cd:16:12:b4:6e:8e:b4:39:4f:df:
b3:c3:d6:71:c9:de:e5:28:e9:1a:8b:e9:16:68:64:
b9:46:fe:4f:ff:e7:42:68:b1:d2:62:8f:69:b5:29:
17:5b:58:f1:09:ae:b5:3a:46:23:f5:5d:cb:f0:cd:
2d:8b:37:bc:c9:1d:fb:43:dc:ab:4d:e2:b7:d7:9c:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:87:A6:A4:A1:04:27:97:25:B0:B6:1E:01:C5:2C:78:9E:EE:84:1D
X509v3 Authority Key Identifier:
keyid:82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:0c:26:8f:4e:8a:03:f8:12:34:be:8d:26:7b:5d:c5:e8:04:
b1:85:50:57:f2:c8:47:bd:5a:03:8c:43:aa:25:ba:d5:90:77:
6d:31:a4:1f:17:37:d1:90:f2:83:a6:9d:15:43:73:2e:df:8e:
14:b9:8a:5d:df:80:c4:41:43:7b:b5:13:ad:05:27:1a:09:f7:
39:b4:30:f9:d0:12:b5:37:7a:4f:e0:d7:94:c4:f8:b4:52:c6:
9d:08:48:51:dc:db:4c:16:d9:e4:13:e8:63:d4:6e:19:55:80:
8e:3c:d2:e0:4b:5b:d8:b9:db:53:33:5b:32:99:f5:ad:21:bf:
44:cf:46:29:b6:42:05:24:77:64:e3:03:22:e2:65:f4:2a:1a:
0e:dd:8e:d7:0b:2d:b5:e5:28:1c:97:d0:99:71:fb:5a:39:b8:
5d:b8:81:e6:3c:cb:17:1d:62:11:76:1e:62:e5:8e:1d:92:a7:
dd:1d:b1:06:dd:1d:67:37:e8:4b:0c:43:e8:48:0b:78:3f:34:
58:b4:53:a4:2f:42:d7:03:72:e1:17:f8:01:be:79:df:52:d0:
1b:7c:3c:69:a0:75:6c:d6:d7:5f:ff:c6:5d:38:ec:11:8d:22:
84:1b:88:66:46:f6:6f:c8:38:3c:a3:15:cb:df:53:e8:32:6b:
6c:f8:c0:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36qJ93yhPRAZC3hYE5E8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZjhkMWQ5N2I5ODY5Mzk4MzMxOTRlZTIzNGUwYzRkOTVi
NTI4OTMwHhcNMjUwNjI4MTkwMTM2WhcNMjUwNjI5MTkwMTM2WjAzMTEwLwYDVQQD
Eyg0Mjg3YTZhNGExMDQyNzk3MjViMGI2MWUwMWM1MmM3ODllZWU4NDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHyjVnMTtGNBs+4wrl1VVTkdKJHp
SAmg5dg7luirkKE9pskZKf2mHu7lymC+hlg7FMT/2RFC1Gt1YgPYHcIEMdoEqZM9
8h9cpE7bgBmpmdaxzT+vS1IP3LTSSWmrSVd9DUko+3mDPC1ZfGywrUgTGWbaBPou
R6nqZ8yvPH9pVbeTbYWz+4kiqDWNLrAW2qWCKTULF/A4TUkCsHXcJ1aegz5l5tx4
85rMKmdopwTg+4pWOwlLV5sXVM0WErRujrQ5T9+zw9Zxyd7lKOkai+kWaGS5Rv5P
/+dCaLHSYo9ptSkXW1jxCa61OkYj9V3L8M0tize8yR37Q9yrTeK315wdgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKHpqShBCeXJbC2HgHFLHie7oQdMB8GA1UdIwQY
MBaAFIL40dl7mGk5gzGU7iNODE2VtSiTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZqUjJYdVlhVG1ETVpUdUkwNE1UWlcxS0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kZjA3MmMtMWNhZi00ZjhhLWE0OTQt
N2UzNDM5YWY0ODZmLzEvZ3ZqUjJYdVlhVG1ETVpUdUkwNE1UWlcxS0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kZjA3MmMtMWNhZi00ZjhhLWE0OTQtN2UzNDM5YWY0ODZm
LzEvZ3ZqUjJYdVlhVG1ETVpUdUkwNE1UWlcxS0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3gwmj06K
A/gSNL6NJntdxegEsYVQV/LIR71aA4xDqiW61ZB3bTGkHxc30ZDyg6adFUNzLt+O
FLmKXd+AxEFDe7UTrQUnGgn3ObQw+dAStTd6T+DXlMT4tFLGnQhIUdzbTBbZ5BPo
Y9RuGVWAjjzS4Etb2LnbUzNbMpn1rSG/RM9GKbZCBSR3ZOMDIuJl9CoaDt2O1wst
teUoHJfQmXH7Wjm4XbiB5jzLFx1iEXYeYuWOHZKn3R2xBt0dZzfoSwxD6EgLeD80
WLRTpC9C1wNy4Rf4Ab5531LQG3w8aaB1bNbXX//GXTjsEY0ihBuIZkb2b8g4PKMV
y99T6DJrbPjAgw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:32:48 2025 by rpki-client