Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
File: GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json)
Hash identifier: jaIMf3LlgCXba1R4mv+nXlootDzxVRDxd5yFQ4VkV1c=
Subject key identifier: BE:01:9C:D7:FD:6F:3E:83:13:C4:81:D6:09:C4:4B:78:A2:76:EB:75
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial: 0198D4E054B0FA6813F9E057E2228429199E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
Manifest number: 12CA
Signing time: Sat 23 Aug 2025 03:02:08 +0000
Manifest this update: Sat 23 Aug 2025 03:02:08 +0000
Manifest next update: Sun 24 Aug 2025 03:02:08 +0000
Files and hashes: 1: 1TdnBIQpLOCBWH2mt28aivouF4I.roa (hash: OXerkvpTMgtDn41YlP30T5MtsanNBIBwFIzBvbUKvGE=)
2: 4wV3tNw8L-G2g-REyKg7rTv19xc.roa (hash: mlDNB6DLTguCsOh+3JJiKoaNz1XvyyZU+vhtwaeg1hU=)
3: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: yC078zGYygpcNFAAXX+WnUV2pTLORE6rJYRxcPFp4QA=)
4: K4x7WnCPM92IfHKWVCrULIlUaVA.roa (hash: KVnqPoeOrxHfk6WulHu6MwITd97JNsKLMzaXFdfZRTU=)
5: L0erWF8zE1RnGBSaNfbAKYl2kd8.roa (hash: /zy+SS2a9gbTjEnXkpsItTqQEn8dlA3GKuajYSpZLoU=)
6: bGl-O1VWsJiqIgDexKk7dKheHQQ.roa (hash: 6KFHpVYSoKMAphsv2/6O6zAXDRyPyfaziYVLYjZHZ0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:54:b0:fa:68:13:f9:e0:57:e2:22:84:29:19:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193743467b4da41c6295e9351153309586ba2399
Validity
Not Before: Aug 23 03:02:08 2025 GMT
Not After : Aug 24 03:02:08 2025 GMT
Subject: CN=be019cd7fd6f3e8313c481d609c44b78a276eb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:9b:de:c1:eb:27:9b:e3:6d:1e:68:2e:0c:
b9:2b:99:f5:d3:74:1b:d9:fc:f5:61:93:a9:8b:55:
a0:e1:15:90:38:87:39:0b:92:11:87:6b:8b:b4:6c:
fb:df:6a:57:1b:bb:54:7b:6a:9c:1e:90:fd:80:37:
74:de:0a:1b:6c:26:8e:74:00:ea:23:34:6e:1a:aa:
e2:19:fc:5f:2d:e9:ca:0e:2b:ad:34:75:9c:ff:20:
e1:af:02:05:8b:00:a0:d6:f3:45:61:07:93:8a:9e:
5b:1b:95:f0:e9:21:22:5d:8e:69:d9:1c:de:d4:1d:
b9:40:f9:74:cc:72:aa:cc:c1:73:c1:da:b1:af:6b:
32:6e:18:de:5a:f6:86:83:ea:23:7c:c5:ba:d7:15:
d5:2b:bb:ba:f1:02:37:cf:09:77:40:cc:dc:63:93:
cf:6f:89:07:86:44:31:32:cb:2c:b7:72:ff:b6:59:
21:56:0f:d6:c3:46:f0:32:09:31:22:30:7b:74:46:
74:86:7c:55:72:51:5f:11:f0:f1:75:e7:03:74:fd:
7e:b9:ce:93:5a:6a:88:0d:0a:34:e3:e6:06:7a:e6:
46:2e:d0:da:70:be:10:01:34:17:b6:87:34:2b:48:
e1:34:44:24:05:32:51:a5:0a:52:f7:ad:fc:96:ce:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:9C:D7:FD:6F:3E:83:13:C4:81:D6:09:C4:4B:78:A2:76:EB:75
X509v3 Authority Key Identifier:
keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:34:71:2b:26:95:17:9c:96:21:1f:8b:fd:ee:43:c2:39:74:
5e:c5:e7:dd:77:a1:81:bd:90:33:8a:f7:75:cb:80:49:ce:b7:
da:85:bf:ef:b7:ed:86:3d:7d:e6:cb:f9:a7:cf:47:8d:10:b5:
49:b9:87:9a:bd:9f:f6:3f:f6:d5:3c:3f:dc:8c:81:cf:e3:45:
7e:69:b7:7a:b4:a5:43:43:b3:c5:a6:85:1c:db:9b:c6:98:17:
d2:70:9c:72:d3:cd:a4:eb:eb:6c:5e:74:53:0f:06:63:f5:98:
27:21:da:b1:4d:fa:40:3a:6f:30:a6:61:88:f6:bd:9f:dc:ea:
f5:25:d7:1b:dc:b7:c6:d9:02:b6:74:74:e0:c9:03:9b:58:85:
af:f0:93:68:60:bb:58:42:2b:93:f6:c5:cc:29:42:8b:4d:2c:
74:9e:17:ac:78:f2:b8:fe:31:ed:80:5b:7b:99:45:c0:3e:9b:
fc:83:68:f8:8d:6f:35:1d:7b:aa:cb:b4:ba:e9:e7:52:c0:2d:
c5:29:ab:44:66:b1:2d:db:c6:20:bc:fb:4b:8a:46:d8:42:95:
08:2d:84:20:e4:5f:d0:a9:7a:c6:80:bd:96:e4:6b:dc:6b:75:
57:f3:f3:e8:02:49:6d:b0:0a:2d:3b:b4:78:eb:32:b5:9a:3e:
07:04:7a:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4FSw+mgT+eBX4iKEKRmeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Mzc0MzQ2N2I0ZGE0MWM2Mjk1ZTkzNTExNTMzMDk1ODZi
YTIzOTkwHhcNMjUwODIzMDMwMjA4WhcNMjUwODI0MDMwMjA4WjAzMTEwLwYDVQQD
EyhiZTAxOWNkN2ZkNmYzZTgzMTNjNDgxZDYwOWM0NGI3OGEyNzZlYjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKeb3sHrJ5vjbR5oLgy5K5n103Qb
2fz1YZOpi1Wg4RWQOIc5C5IRh2uLtGz732pXG7tUe2qcHpD9gDd03gobbCaOdADq
IzRuGqriGfxfLenKDiutNHWc/yDhrwIFiwCg1vNFYQeTip5bG5Xw6SEiXY5p2Rze
1B25QPl0zHKqzMFzwdqxr2sybhjeWvaGg+ojfMW61xXVK7u68QI3zwl3QMzcY5PP
b4kHhkQxMssst3L/tlkhVg/Ww0bwMgkxIjB7dEZ0hnxVclFfEfDxdecDdP1+uc6T
WmqIDQo04+YGeuZGLtDacL4QATQXtoc0K0jhNEQkBTJRpQpS9638ls4ewwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4BnNf9bz6DE8SB1gnES3iidut1MB8GA1UdIwQY
MBaAFBk3Q0Z7TaQcYpXpNRFTMJWGuiOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTct
Y2E1ZmNjYmY3YThjLzEvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTctY2E1ZmNjYmY3YThj
LzEvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzTRxKyaV
F5yWIR+L/e5Dwjl0XsXn3Xehgb2QM4r3dcuASc632oW/77fthj195sv5p89HjRC1
SbmHmr2f9j/21Tw/3IyBz+NFfmm3erSlQ0OzxaaFHNubxpgX0nCcctPNpOvrbF50
Uw8GY/WYJyHasU36QDpvMKZhiPa9n9zq9SXXG9y3xtkCtnR04MkDm1iFr/CTaGC7
WEIrk/bFzClCi00sdJ4XrHjyuP4x7YBbe5lFwD6b/INo+I1vNR17qsu0uunnUsAt
xSmrRGaxLdvGILz7S4pG2EKVCC2EIORf0Kl6xoC9luRr3Gt1V/Pz6AJJbbAKLTu0
eOsytZo+BwR6kA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:40 2025 by rpki-client