Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: JT9XaTNH9EYQSQysBZPbEyJvH97i7i5AZL3CmUqJxV0=
Subject key identifier: 3A:FC:D0:93:77:C5:26:86:84:2C:BC:15:7F:0A:4E:55:6D:88:D4:0A
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 0198D5BBED0E5B28F4C3A99B0EA66C99CF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 0D7A
Signing time: Sat 23 Aug 2025 07:01:59 +0000
Manifest this update: Sat 23 Aug 2025 07:01:59 +0000
Manifest next update: Sun 24 Aug 2025 07:01:59 +0000
Files and hashes: 1: JQj924cUZ739dTo2CAmTW-Nn1zw.roa (hash: wLvSRyuv0hEPp/uJ8ZfBwX5TJv2CK5mAgRM5bxes1Tg=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: +XoT4n3wdUoCxUwy12Z+xhS9Abm6XOszP2yYt8PloWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ed:0e:5b:28:f4:c3:a9:9b:0e:a6:6c:99:cf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Aug 23 07:01:59 2025 GMT
Not After : Aug 24 07:01:59 2025 GMT
Subject: CN=3afcd09377c52686842cbc157f0a4e556d88d40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:7b:ce:0f:d8:7b:e0:30:ba:31:1c:a7:52:
e3:eb:0d:cc:d1:15:a9:ef:a4:7f:70:6f:29:39:65:
a8:b8:85:8a:86:5d:6f:20:f8:82:58:8d:13:db:d2:
1a:3a:7b:71:f6:4c:12:89:b1:17:0c:0b:f4:07:cb:
a5:92:44:02:03:4b:ec:08:1c:6d:9d:4a:f3:a1:ff:
39:29:b0:7f:01:79:71:7c:1e:8e:4e:e7:82:b7:55:
c7:7f:18:79:f2:c1:0b:d3:a4:67:03:44:ed:de:e3:
ec:22:3a:7d:d5:35:ba:40:9c:17:ce:c8:05:3e:00:
79:56:a7:1e:b9:02:ad:da:f5:01:3b:bd:6b:2f:7c:
0b:89:dc:f6:54:fc:1a:c3:01:df:b3:4f:1e:25:a0:
e9:54:de:db:f0:f9:a6:11:92:07:72:56:c4:04:32:
ea:9c:56:78:c4:5b:54:1f:9b:e1:e3:1d:e5:db:1e:
da:a3:86:a0:51:7b:da:43:d7:26:ae:c6:c1:2d:d3:
48:e4:b8:5d:0f:ac:7f:ca:f1:dc:7a:8c:0b:22:8f:
01:e7:a5:5c:99:d1:76:14:cb:57:d4:f9:d8:3e:8e:
48:a1:87:ae:2a:8e:d8:ff:8e:ea:66:40:b9:73:6c:
fd:54:d3:fa:03:39:35:0b:14:4c:d6:d7:c6:f9:d8:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FC:D0:93:77:C5:26:86:84:2C:BC:15:7F:0A:4E:55:6D:88:D4:0A
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9b:0c:e9:a1:5a:24:5a:88:6a:de:84:de:f1:3e:1f:f8:a9:
ef:3d:ac:f9:cc:67:50:83:07:49:6b:1c:7c:83:4b:b6:71:81:
f5:8b:71:79:cd:0b:f1:03:1f:59:52:1d:77:54:08:a8:22:71:
64:1d:b2:0e:48:87:9a:fd:1f:e8:7a:7d:95:3f:ab:d6:d2:cc:
85:26:8c:e4:7b:59:66:54:6f:5e:3d:1d:a5:db:d9:09:81:db:
62:4f:7d:1f:0e:1d:a8:42:dc:7c:5c:49:47:4f:e8:95:14:d2:
16:8d:a3:60:5a:db:e0:f7:39:5d:33:6f:80:02:c4:26:ef:46:
7f:4c:a7:3b:5e:78:5f:7b:69:81:d7:fd:a8:cd:d9:ae:83:2c:
20:5c:b5:42:91:7b:99:6e:ca:be:a9:86:6d:38:b8:91:0d:9c:
0a:e2:90:62:13:76:1d:61:75:6d:5e:e3:bb:15:4c:db:62:ad:
a3:ef:65:e6:89:74:1f:5e:53:73:f7:f0:b0:f7:7b:2f:ee:8b:
0f:0e:f1:af:bd:d6:ea:19:65:77:e1:7a:13:ac:ae:99:32:a9:
7a:9f:c9:82:c2:b6:42:7e:85:e6:78:30:9f:57:85:a1:52:17:
29:2b:20:ef:7c:2b:cb:ea:89:39:f6:56:e1:12:4c:20:60:32:
db:1f:6b:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu+0OWyj0w6mbDqZsmc+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2
YmFlNGMwHhcNMjUwODIzMDcwMTU5WhcNMjUwODI0MDcwMTU5WjAzMTEwLwYDVQQD
EygzYWZjZDA5Mzc3YzUyNjg2ODQyY2JjMTU3ZjBhNGU1NTZkODhkNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOJ7zg/Ye+AwujEcp1Lj6w3M0RWp
76R/cG8pOWWouIWKhl1vIPiCWI0T29IaOntx9kwSibEXDAv0B8ulkkQCA0vsCBxt
nUrzof85KbB/AXlxfB6OTueCt1XHfxh58sEL06RnA0Tt3uPsIjp91TW6QJwXzsgF
PgB5VqceuQKt2vUBO71rL3wLidz2VPwawwHfs08eJaDpVN7b8PmmEZIHclbEBDLq
nFZ4xFtUH5vh4x3l2x7ao4agUXvaQ9cmrsbBLdNI5LhdD6x/yvHceowLIo8B56Vc
mdF2FMtX1PnYPo5IoYeuKo7Y/47qZkC5c2z9VNP6Azk1CxRM1tfG+dg9hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr80JN3xSaGhCy8FX8KTlVtiNQKMB8GA1UdIwQY
MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt
YTE1YWY1ZThmMTNjLzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj
LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJsM6aFa
JFqIat6E3vE+H/ip7z2s+cxnUIMHSWscfINLtnGB9Ytxec0L8QMfWVIdd1QIqCJx
ZB2yDkiHmv0f6Hp9lT+r1tLMhSaM5HtZZlRvXj0dpdvZCYHbYk99Hw4dqELcfFxJ
R0/olRTSFo2jYFrb4Pc5XTNvgALEJu9Gf0ynO154X3tpgdf9qM3ZroMsIFy1QpF7
mW7KvqmGbTi4kQ2cCuKQYhN2HWF1bV7juxVM22Kto+9l5ol0H15Tc/fwsPd7L+6L
Dw7xr73W6hlld+F6E6yumTKpep/JgsK2Qn6F5ngwn1eFoVIXKSsg73wry+qJOfZW
4RJMIGAy2x9rmw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:26:50 2025 by rpki-client