Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: 5xqUmWfDhs7c7TWToMuFS4gpOY+mnh9HRe6DtLpeTLc=
Subject key identifier: 09:DB:4C:30:A2:08:CC:8E:61:63:F3:CC:23:77:F3:3F:3F:C7:49:4F
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 0198D7062DAFB6A4D1ECB55E0EF93DE9A640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 059B
Signing time: Sat 23 Aug 2025 13:02:43 +0000
Manifest this update: Sat 23 Aug 2025 13:02:43 +0000
Manifest next update: Sun 24 Aug 2025 13:02:43 +0000
Files and hashes: 1: 49O5pgx96ZytOrM35WIfPYDCGFk.roa (hash: tpMUocM9+z+XdoxQXtS3c6GKQdwXFsRGvoi0LW0ME3I=)
2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: RzZthq8tLYVepfyX/FB396ayGk7aL2QBvw99i0GDoXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:2d:af:b6:a4:d1:ec:b5:5e:0e:f9:3d:e9:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Aug 23 13:02:43 2025 GMT
Not After : Aug 24 13:02:43 2025 GMT
Subject: CN=09db4c30a208cc8e6163f3cc2377f33f3fc7494f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:03:13:57:9b:f3:5e:ae:53:f3:b7:a6:67:
cf:db:eb:e9:11:e1:6b:da:aa:4d:7e:e8:e2:da:45:
cb:38:03:78:fc:19:96:23:43:56:78:cf:90:52:c3:
6e:96:76:74:53:87:7f:53:48:2f:f2:c4:1b:00:70:
73:cf:6a:e6:b0:26:2a:94:22:ec:19:b7:77:55:36:
b0:96:c4:2a:a1:75:e7:b5:59:15:d2:24:3d:1c:b3:
88:a5:ff:92:82:ca:dd:f4:c7:89:72:29:4f:7e:c2:
9d:34:5f:3e:b6:86:71:00:99:46:5f:ad:06:fe:2b:
50:af:e6:50:91:b1:a8:74:d8:a5:c4:d9:25:89:cb:
6c:f5:cb:b6:52:05:f1:d3:f9:c7:a8:d9:66:ff:de:
e7:9d:7c:d3:a4:b6:35:5e:4d:89:4e:22:f2:ee:02:
bb:a2:3f:0d:9b:76:94:cc:8f:8e:8c:c9:61:83:97:
e9:d2:18:5d:e2:24:4e:38:3c:cc:d2:18:ba:c6:e5:
12:73:54:03:db:5f:a3:27:ce:d9:ca:e1:c1:08:5e:
ee:45:33:81:6b:4f:dd:27:57:5a:df:6f:6c:ce:4c:
3d:7d:c6:64:d4:5e:79:b3:a6:e2:dc:a8:eb:b9:a3:
3e:5d:0d:62:3d:b6:c2:84:9f:d2:c5:7b:5f:d5:c6:
d2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DB:4C:30:A2:08:CC:8E:61:63:F3:CC:23:77:F3:3F:3F:C7:49:4F
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a0:76:d5:26:14:a7:46:0d:ff:57:14:bd:9f:ed:58:64:2a:
03:e5:68:34:87:dd:68:d6:f8:05:79:05:4d:71:b0:ea:96:1b:
a8:30:98:1a:49:7d:3d:fb:ba:b9:d8:3f:04:98:76:29:eb:be:
b8:58:30:3c:13:c8:f3:67:62:c9:e5:0b:ee:29:38:f4:a4:63:
7d:fd:5e:51:01:27:37:c7:5e:e7:13:41:a0:0a:7f:4c:e2:46:
26:36:86:8d:5e:ce:ac:4e:d9:05:8f:ef:e2:61:09:c4:de:2b:
a1:94:44:9b:36:b5:b2:27:f6:b4:c4:27:43:61:68:8a:2f:3a:
7d:51:bb:56:af:ad:44:7f:f5:d5:c2:3e:17:a9:b7:34:e9:23:
29:71:cb:75:70:88:32:0e:d9:1d:42:90:71:8b:41:b0:5d:26:
07:36:9b:b1:10:5f:f3:51:79:35:84:00:6b:84:4f:91:b1:e9:
fd:c5:b4:92:25:b9:02:b1:17:82:2f:1f:f8:43:80:72:d6:67:
40:e8:57:a5:0e:5f:13:9d:90:fd:8c:24:cb:f6:7b:87:bf:a6:
78:94:41:50:d7:cc:66:40:ba:7b:f0:6a:b3:26:1d:fb:e8:ef:
b8:5b:f2:ec:79:3b:ed:a9:49:27:8c:05:91:46:1f:76:61:23:
e5:ab:60:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBi2vtqTR7LVeDvk96aZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDcyNTM3Y2M1NGFjMTBiNGFiZmFjYzcyYzFiNzU0YzE3
MWFmOGYwHhcNMjUwODIzMTMwMjQzWhcNMjUwODI0MTMwMjQzWjAzMTEwLwYDVQQD
EygwOWRiNGMzMGEyMDhjYzhlNjE2M2YzY2MyMzc3ZjMzZjNmYzc0OTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPUDE1eb816uU/O3pmfP2+vpEeFr
2qpNfuji2kXLOAN4/BmWI0NWeM+QUsNulnZ0U4d/U0gv8sQbAHBzz2rmsCYqlCLs
Gbd3VTawlsQqoXXntVkV0iQ9HLOIpf+Sgsrd9MeJcilPfsKdNF8+toZxAJlGX60G
/itQr+ZQkbGodNilxNklicts9cu2UgXx0/nHqNlm/97nnXzTpLY1Xk2JTiLy7gK7
oj8Nm3aUzI+OjMlhg5fp0hhd4iROODzM0hi6xuUSc1QD21+jJ87ZyuHBCF7uRTOB
a0/dJ1da329szkw9fcZk1F55s6bi3KjruaM+XQ1iPbbChJ/SxXtf1cbSqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnbTDCiCMyOYWPzzCN38z8/x0lPMB8GA1UdIwQY
MBaAFIDXJTfMVKwQtKv6zHLBt1TBca+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMDBmYTQtNDU3OC00YWU4LTlmZmIt
MmVkMjY5Mzg0YTc0LzEvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yMDBmYTQtNDU3OC00YWU4LTlmZmItMmVkMjY5Mzg0YTc0
LzEvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqB21SYU
p0YN/1cUvZ/tWGQqA+VoNIfdaNb4BXkFTXGw6pYbqDCYGkl9Pfu6udg/BJh2Keu+
uFgwPBPI82diyeUL7ik49KRjff1eUQEnN8de5xNBoAp/TOJGJjaGjV7OrE7ZBY/v
4mEJxN4roZREmza1sif2tMQnQ2Foii86fVG7Vq+tRH/11cI+F6m3NOkjKXHLdXCI
Mg7ZHUKQcYtBsF0mBzabsRBf81F5NYQAa4RPkbHp/cW0kiW5ArEXgi8f+EOActZn
QOhXpQ5fE52Q/Ywky/Z7h7+meJRBUNfMZkC6e/BqsyYd++jvuFvy7Hk77alJJ4wF
kUYfdmEj5atg4w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:15 2025 by rpki-client