Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
File: gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft (raw, json)
Hash identifier: FgYTPYrgWFcLQ7ECzqEl4b4EjP89Aabb2D8WYWfjZhM=
Subject key identifier: 93:47:B0:B7:98:4F:AC:C6:2B:85:FB:8A:84:A3:7B:2B:E9:2F:2F:8C
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Certificate issuer: /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial: 0197CCF180EC5DFB11D2B0B503A33E396BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
Manifest number: 15C5
Signing time: Wed 02 Jul 2025 21:01:08 +0000
Manifest this update: Wed 02 Jul 2025 21:01:08 +0000
Manifest next update: Thu 03 Jul 2025 21:01:08 +0000
Files and hashes: 1: FG-bEioa4civ6jvoSnaUtHZPEQE.roa (hash: w4e7tpxeaBQHMoRYqhi0o1qJLopKx8fwD7s6iGDvqgY=)
2: aGlvUdVJOWbqaat4vglrkQH1tNo.roa (hash: svvIGknsbQhU6YBIsZkBO7bjTdjQ0GNK1yuIVKiea6E=)
3: eZ8arxnGDWk7xkVHJ1bRXWZ355M.roa (hash: AeIoI4f85DUeWbFvZ4SxFOX1IxHcOJjIFceKESNKiJo=)
4: gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl (hash: fgo9bRqHD5vG7rLyNrZ3gsgZXkaN/kPR77R7vVT7Un8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:f1:80:ec:5d:fb:11:d2:b0:b5:03:a3:3e:39:6b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Validity
Not Before: Jul 2 21:01:08 2025 GMT
Not After : Jul 3 21:01:08 2025 GMT
Subject: CN=9347b0b7984facc62b85fb8a84a37b2be92f2f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:03:d3:cb:e6:23:3a:9a:90:d9:6a:87:a4:
c2:09:ba:9d:b4:a0:b6:2d:50:a0:fd:6c:e3:41:62:
05:95:76:31:ee:ac:b9:3e:f7:d1:4a:19:ef:8b:5f:
43:e5:62:81:fa:fe:af:a5:a5:47:16:98:6a:74:fa:
20:42:81:6c:aa:53:06:ff:28:3d:5a:47:db:7d:45:
3e:69:ff:23:e4:d2:80:f7:c2:15:df:46:e0:52:21:
96:55:aa:08:3e:a3:c7:21:b8:2e:ba:94:40:16:fa:
5b:e0:1e:ba:01:e4:c5:bb:10:1f:63:e4:f4:12:ba:
d2:bc:4d:6d:25:d4:54:a2:16:98:96:db:98:1a:52:
59:1c:74:c3:5f:2b:f3:cf:24:aa:bf:de:69:d0:49:
cf:8b:05:77:66:3b:02:b7:6a:de:af:c1:dc:25:12:
22:8e:e2:d7:f8:76:a6:fc:08:db:b1:10:8a:aa:30:
be:a6:a8:25:7c:7e:0e:6e:a4:81:13:a7:d6:6e:7f:
e2:d2:03:97:f2:1e:26:b0:b6:64:93:8d:3a:46:e7:
ea:1b:9a:24:22:66:07:9c:76:59:b3:17:43:d6:94:
64:8c:d2:47:9e:12:f3:14:5f:ae:35:d7:23:7c:b8:
25:51:fc:38:18:35:87:00:2b:93:ca:22:08:7b:0e:
6c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:47:B0:B7:98:4F:AC:C6:2B:85:FB:8A:84:A3:7B:2B:E9:2F:2F:8C
X509v3 Authority Key Identifier:
keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d2:05:3a:59:0b:c0:8c:96:4f:8b:8a:a4:b7:a6:4a:77:7b:
d4:9e:e5:5c:ca:26:69:5a:68:9c:15:4e:b0:33:f8:ef:f5:d0:
7a:0d:7b:97:53:e0:05:9a:96:a7:66:1c:79:f0:49:ff:7c:98:
0c:a5:ca:8f:23:6c:90:c6:1e:7f:ec:30:64:16:2b:1b:27:6d:
a4:f6:b0:09:0e:72:f4:8a:4a:b6:b2:8d:21:9b:e3:71:66:83:
30:f6:d3:fe:a8:ad:d3:88:69:4f:c0:9e:b3:9d:7a:2f:4e:46:
2b:80:57:fc:55:78:5a:39:28:ed:f6:85:bf:8f:de:7c:97:56:
3e:1d:48:8f:71:e1:d2:43:5e:16:36:e5:44:4c:fa:8c:7a:ed:
50:37:b6:8b:b8:6b:0d:c6:cf:93:d6:62:85:1e:23:67:18:77:
8c:43:8c:c9:28:04:e3:49:40:84:17:0b:d9:6e:4e:0b:fd:b1:
76:0e:0a:30:d5:d7:ec:9a:25:67:9a:a9:5b:0a:67:37:56:d2:
0b:b2:60:87:93:40:76:4a:be:f5:2f:15:9c:09:eb:8d:17:ef:
e2:b8:ef:d7:ff:4c:77:41:25:20:f6:31:5d:34:96:66:99:25:
5a:1a:c4:c6:cf:63:d1:e0:d4:dc:ae:7f:bb:c5:6c:12:df:71:
a3:13:91:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfM8YDsXfsR0rC1A6M+OWuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYmI3OGJlNDFlNDgzMzc5OTdjOGZlOTFkOGUyZjI0Zjdi
NDllYWYwHhcNMjUwNzAyMjEwMTA4WhcNMjUwNzAzMjEwMTA4WjAzMTEwLwYDVQQD
Eyg5MzQ3YjBiNzk4NGZhY2M2MmI4NWZiOGE4NGEzN2IyYmU5MmYyZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXgD08vmIzqakNlqh6TCCbqdtKC2
LVCg/WzjQWIFlXYx7qy5PvfRShnvi19D5WKB+v6vpaVHFphqdPogQoFsqlMG/yg9
WkfbfUU+af8j5NKA98IV30bgUiGWVaoIPqPHIbguupRAFvpb4B66AeTFuxAfY+T0
ErrSvE1tJdRUohaYltuYGlJZHHTDXyvzzySqv95p0EnPiwV3ZjsCt2rer8HcJRIi
juLX+Ham/AjbsRCKqjC+pqglfH4ObqSBE6fWbn/i0gOX8h4msLZkk406RufqG5ok
ImYHnHZZsxdD1pRkjNJHnhLzFF+uNdcjfLglUfw4GDWHACuTyiIIew5soQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNHsLeYT6zGK4X7ioSjeyvpLy+MMB8GA1UdIwQY
MBaAFIG7eL5B5IM3mXyP6R2OLyT3tJ6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAt
NmNiZDU4MWQzMTdjLzEvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAtNmNiZDU4MWQzMTdj
LzEvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdIFOlkL
wIyWT4uKpLemSnd71J7lXMomaVponBVOsDP47/XQeg17l1PgBZqWp2YcefBJ/3yY
DKXKjyNskMYef+wwZBYrGydtpPawCQ5y9IpKtrKNIZvjcWaDMPbT/qit04hpT8Ce
s516L05GK4BX/FV4Wjko7faFv4/efJdWPh1Ij3Hh0kNeFjblREz6jHrtUDe2i7hr
DcbPk9ZihR4jZxh3jEOMySgE40lAhBcL2W5OC/2xdg4KMNXX7JolZ5qpWwpnN1bS
C7Jgh5NAdkq+9S8VnAnrjRfv4rjv1/9Md0ElIPYxXTSWZpklWhrExs9j0eDU3K5/
u8VsEt9xoxOR6Q==
-----END CERTIFICATE-----
Generated at Wed Jul 2 22:34:30 2025 by rpki-client