Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: CqzYPH/Q6zIlVeAN4hlvtAR4inz0zARgLqKZZbRrlLI=
Subject key identifier: E4:40:1A:B8:D8:71:EF:B4:8A:92:B3:E7:16:A7:33:22:E8:DF:AA:CF
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 0198D5837B1671B590415C13BE5ABC23A9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:20 +0000
Manifest this update: Sat 23 Aug 2025 06:00:20 +0000
Manifest next update: Sun 24 Aug 2025 06:00:20 +0000
Files and hashes: 1: DEbqDj-D0KhPe_ozDfopNhqgvZc.roa (hash: 6XoIqk1u5dfBbYPK0R4bSxJz+kGjtKoT47/COVdRMu0=)
2: FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa (hash: Vq9OXxCy4cXw387lqVrsEZN9rZ1lStx9VD3OgQ3YBXs=)
3: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: keFFX72MGZbhi3GDlpCWLkkKNxiD446a3xNtxybzWP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7b:16:71:b5:90:41:5c:13:be:5a:bc:23:a9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Aug 23 06:00:20 2025 GMT
Not After : Aug 24 06:00:20 2025 GMT
Subject: CN=e4401ab8d871efb48a92b3e716a73322e8dfaacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:f2:38:81:2e:5c:66:14:eb:4e:95:dd:e9:
41:4a:b6:a6:29:5d:d9:e6:ff:c8:5e:ae:cf:bf:e0:
76:0e:ac:a0:57:20:08:26:fd:40:aa:48:fb:de:18:
cf:0b:57:f9:c4:b5:f5:ed:6d:90:59:07:2e:57:d8:
ab:12:12:34:31:db:a6:51:71:46:03:eb:0a:e8:4b:
a9:5e:0b:54:b3:2c:88:68:d5:7e:15:8e:88:67:3a:
92:43:79:9b:56:38:84:fa:c3:24:5f:d7:2f:d7:ce:
44:b6:ff:d4:5d:7b:e5:11:cc:36:27:ed:86:2f:68:
10:2c:b3:a0:aa:76:4f:5c:5f:61:ee:51:73:34:34:
0e:59:38:f2:f0:77:cd:35:68:1d:ff:d4:f5:78:e4:
3b:6d:06:92:e8:41:5d:2e:ed:8b:d2:cb:90:27:23:
32:71:5a:61:47:ad:4f:9a:f8:2d:22:02:ec:5f:e5:
c6:38:2b:21:fd:3f:10:41:7e:2e:14:9b:3d:23:39:
c1:35:da:f2:2b:4f:0f:b6:02:e6:60:ee:9a:e8:3e:
5c:22:80:37:a0:bd:89:85:3e:ef:34:70:a0:2a:92:
d9:6e:e5:52:5e:1e:aa:6f:d9:e7:a1:90:07:ac:f6:
4b:73:d1:6e:14:89:8b:45:69:e5:7b:f7:a7:c9:cd:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:40:1A:B8:D8:71:EF:B4:8A:92:B3:E7:16:A7:33:22:E8:DF:AA:CF
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:dc:32:f8:af:3a:15:7e:2a:44:fa:30:e1:9d:d9:a4:30:93:
a1:b0:1d:18:b9:03:f1:f2:57:4e:e8:85:72:68:6c:6e:62:c8:
41:ae:2b:88:cc:80:68:ba:f1:01:0f:98:c4:8b:d6:c9:9f:56:
a5:c3:17:5a:f4:77:d8:9e:9e:87:11:84:ee:6f:cf:60:64:79:
0b:8a:e2:b3:9d:aa:39:50:85:32:bc:ad:a8:d5:85:af:0a:48:
6f:a2:8f:49:8e:bd:f9:a5:d9:67:95:4b:af:57:b6:03:31:c1:
9f:f9:9f:c7:64:95:e0:c1:de:36:ee:f4:ef:23:63:6d:f9:f5:
37:7b:7f:cd:74:e0:d3:2d:e4:17:bd:a5:97:14:44:77:de:94:
74:70:a7:92:6b:aa:8f:02:73:10:72:29:db:2d:83:43:87:1a:
79:fe:30:fe:db:b8:16:96:72:28:d9:6f:c0:ad:ee:47:0c:29:
9e:60:09:c9:cc:cb:50:08:d1:dc:f8:6b:e7:08:72:71:6d:2a:
4c:19:12:be:48:e1:eb:a2:55:7a:c2:80:3e:80:7a:76:80:3c:
be:58:cc:11:54:86:da:de:f0:49:a4:7a:ad:8c:e6:2d:93:7c:
d0:a1:15:89:75:28:95:7e:ff:6e:0f:b6:e4:47:49:b8:2d:e6:
2e:1a:b0:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg3sWcbWQQVwTvlq8I6m4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZWJhZjJjYmE4MzU5NDM4ZTQzNDEyM2RkYTdhNWEzOTZm
NWY1MTkwHhcNMjUwODIzMDYwMDIwWhcNMjUwODI0MDYwMDIwWjAzMTEwLwYDVQQD
EyhlNDQwMWFiOGQ4NzFlZmI0OGE5MmIzZTcxNmE3MzMyMmU4ZGZhYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudDyOIEuXGYU606V3elBSramKV3Z
5v/IXq7Pv+B2DqygVyAIJv1Aqkj73hjPC1f5xLX17W2QWQcuV9irEhI0MdumUXFG
A+sK6EupXgtUsyyIaNV+FY6IZzqSQ3mbVjiE+sMkX9cv185Etv/UXXvlEcw2J+2G
L2gQLLOgqnZPXF9h7lFzNDQOWTjy8HfNNWgd/9T1eOQ7bQaS6EFdLu2L0suQJyMy
cVphR61PmvgtIgLsX+XGOCsh/T8QQX4uFJs9IznBNdryK08PtgLmYO6a6D5cIoA3
oL2JhT7vNHCgKpLZbuVSXh6qb9nnoZAHrPZLc9FuFImLRWnle/enyc00/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORAGrjYce+0ipKz5xanMyLo36rPMB8GA1UdIwQY
MBaAFIDrryy6g1lDjkNBI92npaOW9fUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDkt
Zjc4YmRiNmY2MGMyLzEvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDktZjc4YmRiNmY2MGMy
LzEvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtwy+K86
FX4qRPow4Z3ZpDCTobAdGLkD8fJXTuiFcmhsbmLIQa4riMyAaLrxAQ+YxIvWyZ9W
pcMXWvR32J6ehxGE7m/PYGR5C4ris52qOVCFMrytqNWFrwpIb6KPSY69+aXZZ5VL
r1e2AzHBn/mfx2SV4MHeNu707yNjbfn1N3t/zXTg0y3kF72llxREd96UdHCnkmuq
jwJzEHIp2y2DQ4caef4w/tu4FpZyKNlvwK3uRwwpnmAJyczLUAjR3Phr5whycW0q
TBkSvkjh66JVesKAPoB6doA8vljMEVSG2t7wSaR6rYzmLZN80KEViXUolX7/bg+2
5EdJuC3mLhqwGg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:08 2025 by rpki-client