Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: GgHHynDZFFf6kZ+L9MeW2c5HAcmzJSms4NwYeBCd7So=
Subject key identifier: 90:C0:FD:B9:50:B0:14:5F:51:1C:DF:F0:AD:E4:21:6C:04:3E:EA:54
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 0198D5F1A8631766506E92111322EDBD99F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 0221
Signing time: Sat 23 Aug 2025 08:00:40 +0000
Manifest this update: Sat 23 Aug 2025 08:00:40 +0000
Manifest next update: Sun 24 Aug 2025 08:00:40 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: wSqXW+5jRyg4hRkHI6OZ7MpL8Ip/yXAwmyKadICjflw=)
2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a8:63:17:66:50:6e:92:11:13:22:ed:bd:99:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Aug 23 08:00:40 2025 GMT
Not After : Aug 24 08:00:40 2025 GMT
Subject: CN=90c0fdb950b0145f511cdff0ade4216c043eea54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:d3:ba:6f:e7:c1:c6:af:03:5f:ab:49:dd:
19:c5:d9:50:46:84:49:3a:be:be:7c:d6:70:ca:22:
05:96:56:d7:72:78:32:6b:b2:cf:79:de:d4:b2:7b:
10:7d:37:ce:7e:93:86:7b:cc:8b:d2:16:3a:02:dc:
f1:2b:18:53:0f:9b:a0:9f:97:d5:8c:9c:53:2a:18:
45:d3:ba:3b:2c:57:97:34:3c:49:1b:ba:09:cd:39:
07:b5:de:b9:7e:04:c1:5e:22:5b:cd:c2:cf:6b:4f:
68:53:bb:04:a8:06:da:5d:ee:d8:34:02:f6:51:30:
94:14:46:21:ac:5b:f7:e7:86:f8:6b:be:02:13:c3:
b2:bd:2b:a7:03:b2:52:cd:b9:65:da:60:26:9a:3c:
20:d1:d9:38:ac:9c:0a:be:c7:6a:be:b5:25:3e:1e:
cc:05:13:51:1d:c2:ce:d0:ad:dd:ee:3c:05:f8:f1:
b0:0d:a6:41:69:02:d8:3c:a0:e1:69:a9:f8:90:f2:
08:98:49:33:7e:47:42:c3:8a:fa:af:16:cf:32:82:
e6:7a:9f:a1:7c:67:7a:05:0c:2f:b5:18:cb:76:ff:
0d:b4:94:65:56:64:13:aa:a2:42:10:6e:05:3c:75:
e1:0d:de:c3:67:fe:11:ff:b1:04:e6:86:d2:6d:7a:
e4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C0:FD:B9:50:B0:14:5F:51:1C:DF:F0:AD:E4:21:6C:04:3E:EA:54
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3b:dc:fa:02:21:b7:29:de:c4:3d:6e:68:8a:e2:80:b7:44:
ba:65:fc:2c:62:8e:b9:38:d1:16:da:0e:44:44:46:a2:02:19:
a7:37:2d:63:4a:5f:53:00:bc:88:ef:b3:df:fb:9c:32:dc:e4:
23:82:1f:fc:f1:60:02:3d:a7:b4:eb:2d:25:4f:21:15:91:4b:
70:d9:3d:83:84:77:9b:de:00:e0:a7:38:88:3c:af:f1:7d:2c:
92:cf:ee:7a:7c:91:30:94:37:11:f8:c3:e2:fa:d1:72:f4:34:
33:c3:f8:ed:d5:e1:85:9b:2d:db:c9:1c:96:8a:67:b8:db:04:
24:bd:01:8f:1f:fd:fe:f2:e6:85:9e:6e:9b:06:ec:b5:ec:64:
bb:c6:2a:89:3f:b3:85:f9:ce:ed:d2:25:2f:b9:31:3b:cf:c9:
11:eb:7a:47:e3:92:42:39:ff:78:8a:05:0c:d8:92:5b:30:02:
bc:94:a4:92:02:39:0e:f0:54:90:24:8d:0c:a9:82:bf:44:6c:
33:36:24:ff:6b:eb:d7:71:64:bc:2d:b2:24:5b:1c:5d:f1:68:
01:8b:2a:f4:6e:ba:38:60:3d:07:60:ae:bc:bf:59:66:bf:42:
d6:4c:6e:f5:6f:e1:d6:02:8d:d6:d3:b4:8f:b1:05:34:37:4a:
ef:c9:40:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8ahjF2ZQbpIREyLtvZn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzRmMjc3MDJhNjJjNmI2MjdjNWVhNzBiOTZmZDI5ODIz
NjQ1MjIwHhcNMjUwODIzMDgwMDQwWhcNMjUwODI0MDgwMDQwWjAzMTEwLwYDVQQD
Eyg5MGMwZmRiOTUwYjAxNDVmNTExY2RmZjBhZGU0MjE2YzA0M2VlYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK3Tum/nwcavA1+rSd0ZxdlQRoRJ
Or6+fNZwyiIFllbXcngya7LPed7UsnsQfTfOfpOGe8yL0hY6AtzxKxhTD5ugn5fV
jJxTKhhF07o7LFeXNDxJG7oJzTkHtd65fgTBXiJbzcLPa09oU7sEqAbaXe7YNAL2
UTCUFEYhrFv354b4a74CE8OyvSunA7JSzbll2mAmmjwg0dk4rJwKvsdqvrUlPh7M
BRNRHcLO0K3d7jwF+PGwDaZBaQLYPKDhaan4kPIImEkzfkdCw4r6rxbPMoLmep+h
fGd6BQwvtRjLdv8NtJRlVmQTqqJCEG4FPHXhDd7DZ/4R/7EE5obSbXrkCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDA/blQsBRfURzf8K3kIWwEPupUMB8GA1UdIwQY
MBaAFBp08ncCpixrYnxepwuW/SmCNkUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUt
MTQ1MGVmYmQ5ZTM1LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUtMTQ1MGVmYmQ5ZTM1
LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjvc+gIh
tynexD1uaIrigLdEumX8LGKOuTjRFtoORERGogIZpzctY0pfUwC8iO+z3/ucMtzk
I4If/PFgAj2ntOstJU8hFZFLcNk9g4R3m94A4Kc4iDyv8X0sks/uenyRMJQ3EfjD
4vrRcvQ0M8P47dXhhZst28kclopnuNsEJL0Bjx/9/vLmhZ5umwbstexku8YqiT+z
hfnO7dIlL7kxO8/JEet6R+OSQjn/eIoFDNiSWzACvJSkkgI5DvBUkCSNDKmCv0Rs
MzYk/2vr13FkvC2yJFscXfFoAYsq9G66OGA9B2CuvL9ZZr9C1kxu9W/h1gKN1tO0
j7EFNDdK78lA8w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:10 2025 by rpki-client