Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier: FLFHzkSxpx448Q84aGSPpLyuyZ6pzBPY0OzT5gaUuvU=
Subject key identifier: F7:24:19:1D:C2:21:00:55:3D:7A:14:9B:24:02:98:1F:80:1A:A8:45
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 0198D5BC215877E17A87424330AB52C122DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number: 1374
Signing time: Sat 23 Aug 2025 07:02:12 +0000
Manifest this update: Sat 23 Aug 2025 07:02:12 +0000
Manifest next update: Sun 24 Aug 2025 07:02:12 +0000
Files and hashes: 1: 52xHcZKMiLkJfC48D6ah-VZ8yTA.roa (hash: jrz3bp7KHkqbn8SdD2JCqFdwlcK3RRhyL/xchThJ/cc=)
2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: EUvcLm1U9nkv2+ZBfgHcDo3ZaGciFnef8YpBw2psTL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:21:58:77:e1:7a:87:42:43:30:ab:52:c1:22:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: Aug 23 07:02:12 2025 GMT
Not After : Aug 24 07:02:12 2025 GMT
Subject: CN=f724191dc22100553d7a149b2402981f801aa845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:9b:2a:07:81:d6:51:f3:72:de:d7:99:00:
27:dd:4c:8e:49:93:96:eb:4d:e0:77:c0:d3:a4:c3:
cc:7f:fb:d0:28:44:9c:5b:99:aa:34:70:45:d7:7a:
bc:39:86:f4:cb:70:e5:95:4d:aa:1b:95:cb:b1:5e:
6e:5a:4a:0a:0f:14:a7:ef:52:e4:3b:01:0b:ee:e5:
2d:02:78:ee:57:c2:21:93:38:e4:11:6b:40:60:06:
f4:88:14:1f:8d:96:65:05:30:d4:49:aa:15:10:6f:
3f:12:99:05:2f:d0:a9:41:bd:90:5c:df:2a:c6:d6:
fb:3f:53:22:a7:d9:10:0f:b0:8b:6c:36:e6:a9:82:
a1:13:6f:04:0b:91:c6:3f:66:c7:54:1f:2f:8e:e4:
85:49:f4:70:8a:ee:55:b4:5e:83:dc:ea:54:76:62:
e1:9d:20:56:2d:45:ed:4d:97:d1:fb:42:ff:d4:f7:
13:6c:5b:45:49:a7:a9:67:6c:cd:0b:bb:4a:db:93:
62:e2:56:89:a5:cc:39:7b:e9:17:9c:46:e2:bd:58:
3b:70:9e:6c:1c:50:47:44:13:e7:44:d0:b3:36:b8:
ba:99:05:62:6f:9c:32:cc:7e:e5:20:48:a2:0d:ee:
73:8e:88:83:27:8e:61:86:cf:2f:16:60:9d:b9:b2:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:24:19:1D:C2:21:00:55:3D:7A:14:9B:24:02:98:1F:80:1A:A8:45
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e5:c4:bc:23:20:a5:b1:2b:ef:9c:ff:d0:5b:97:29:bf:65:
68:55:89:a1:62:1d:10:1d:2e:3f:0b:97:a3:cd:99:d4:77:6c:
80:26:8d:4b:ba:bb:da:c8:63:93:57:ce:d0:7b:b3:4d:17:d9:
da:49:f7:52:6e:73:dc:92:9f:a4:e3:2f:23:5e:83:f3:61:32:
f9:d1:39:36:fe:fb:c6:34:8e:48:50:61:48:b0:e2:05:2f:46:
a0:c8:91:4c:96:ce:fe:ba:88:60:99:98:09:54:74:2d:e3:cb:
1a:8c:3a:82:e1:92:6c:b8:03:ec:de:62:9f:de:b5:a0:eb:d0:
67:38:20:13:b7:06:35:b1:20:98:70:77:52:32:03:b7:38:ee:
ac:9e:37:5e:c4:4f:ce:99:79:31:a7:d9:d8:f1:82:f3:3c:60:
93:d7:f9:05:54:a3:f7:21:b0:ca:91:32:5e:b3:69:df:f2:93:
9a:fb:6c:fd:e7:db:5b:be:2f:ad:85:d1:df:da:cd:c6:92:59:
33:1a:9a:93:ee:4d:86:0d:ef:b2:9f:0e:4a:37:0c:9a:70:b2:
18:92:16:26:c7:1c:18:7f:3e:c5:db:61:ec:7f:79:aa:9e:e4:
3f:fa:bc:93:f8:4b:be:b2:83:0a:41:c0:98:80:89:f7:4d:32:
e3:db:a5:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvCFYd+F6h0JDMKtSwSLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzU0NDRjNTgxMTYxYzU4OGFlODRiZTAxOTY1YmM4ZTgz
NzgwYjgwHhcNMjUwODIzMDcwMjEyWhcNMjUwODI0MDcwMjEyWjAzMTEwLwYDVQQD
EyhmNzI0MTkxZGMyMjEwMDU1M2Q3YTE0OWIyNDAyOTgxZjgwMWFhODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJabKgeB1lHzct7XmQAn3UyOSZOW
603gd8DTpMPMf/vQKEScW5mqNHBF13q8OYb0y3DllU2qG5XLsV5uWkoKDxSn71Lk
OwEL7uUtAnjuV8IhkzjkEWtAYAb0iBQfjZZlBTDUSaoVEG8/EpkFL9CpQb2QXN8q
xtb7P1Mip9kQD7CLbDbmqYKhE28EC5HGP2bHVB8vjuSFSfRwiu5VtF6D3OpUdmLh
nSBWLUXtTZfR+0L/1PcTbFtFSaepZ2zNC7tK25Ni4laJpcw5e+kXnEbivVg7cJ5s
HFBHRBPnRNCzNri6mQVib5wyzH7lIEiiDe5zjoiDJ45hhs8vFmCdubK6dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPckGR3CIQBVPXoUmyQCmB+AGqhFMB8GA1UdIwQY
MBaAFIM1RExYEWHFiK6EvgGWW8joN4C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEt
MWYxM2Y1NWQwMDU5LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEtMWYxM2Y1NWQwMDU5
LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOXEvCMg
pbEr75z/0FuXKb9laFWJoWIdEB0uPwuXo82Z1HdsgCaNS7q72shjk1fO0HuzTRfZ
2kn3Um5z3JKfpOMvI16D82Ey+dE5Nv77xjSOSFBhSLDiBS9GoMiRTJbO/rqIYJmY
CVR0LePLGow6guGSbLgD7N5in961oOvQZzggE7cGNbEgmHB3UjIDtzjurJ43XsRP
zpl5MafZ2PGC8zxgk9f5BVSj9yGwypEyXrNp3/KTmvts/efbW74vrYXR39rNxpJZ
Mxqak+5Nhg3vsp8OSjcMmnCyGJIWJsccGH8+xdth7H95qp7kP/q8k/hLvrKDCkHA
mICJ900y49uliw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:29 2025 by rpki-client