Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
File: GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json)
Hash identifier: SLvVJsUTZRr47Zk41Uec1eMhxS0W++ENJX4zUZtWcwM=
Subject key identifier: 92:11:A5:DD:B4:69:BB:1A:65:01:3F:FC:64:3A:71:31:05:DD:C9:3A
Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
Certificate issuer: /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Certificate serial: 0198D515F612B2EE4E7A2520157AAA9F2C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
Manifest number: 14E9
Signing time: Sat 23 Aug 2025 04:00:42 +0000
Manifest this update: Sat 23 Aug 2025 04:00:42 +0000
Manifest next update: Sun 24 Aug 2025 04:00:42 +0000
Files and hashes: 1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: /yp/6gHF32WLS0siA+LLaKcS1K8C/hFQgmvvDP2eS+o=)
2: T6BmY5F3A76c40Avg5lTJbK0mkw.roa (hash: v+5wW5iBlMaLk7U/wCyygoAJ3jQnHxe9Wti6cfnchrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f6:12:b2:ee:4e:7a:25:20:15:7a:aa:9f:2c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Validity
Not Before: Aug 23 04:00:42 2025 GMT
Not After : Aug 24 04:00:42 2025 GMT
Subject: CN=9211a5ddb469bb1a65013ffc643a713105ddc93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:89:cf:46:4e:13:79:0d:65:a9:20:16:c6:
8e:84:f8:fa:63:ad:d4:79:c7:28:c0:58:9f:bf:b5:
b5:4d:31:1f:b5:16:66:e7:ef:c4:b9:f1:c6:15:1d:
4d:89:94:c4:2c:a7:d4:ab:c3:93:6f:6e:62:6c:01:
8a:e8:af:07:aa:5f:50:39:7c:64:94:b3:02:18:34:
93:03:d3:9f:5a:67:8d:35:07:e7:4b:6e:a8:db:66:
2d:12:e8:e6:5f:ce:bf:5a:f5:38:44:24:59:d3:e2:
69:c4:4a:02:98:4e:39:3a:de:23:cf:85:70:8d:37:
f4:f3:40:39:76:ae:98:48:0a:f2:e9:f5:8b:f5:25:
0c:ac:36:71:5c:17:c2:2e:60:ef:8a:73:7d:e5:c9:
9c:29:f9:97:9e:fb:ad:7e:89:3b:e4:b2:78:47:16:
19:90:fe:bf:18:0e:80:60:c1:5e:3e:4d:f9:68:1e:
52:ae:e8:bd:7b:4f:c3:ac:e4:cc:0c:04:3b:2c:d3:
ca:fd:17:b0:b5:52:ba:7b:f7:54:87:e6:f2:88:9a:
13:e5:fc:97:bd:86:25:ec:63:eb:f5:83:7a:29:28:
48:4e:a2:4f:02:d5:8b:c9:57:9a:f2:3c:87:7a:58:
57:c7:ac:67:c8:48:f4:10:32:d2:74:7f:19:89:b6:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:11:A5:DD:B4:69:BB:1A:65:01:3F:FC:64:3A:71:31:05:DD:C9:3A
X509v3 Authority Key Identifier:
keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:47:20:77:f3:9e:ab:6b:28:92:a8:d3:5d:00:80:fa:b1:2d:
ce:a5:32:29:1e:f4:3d:78:7b:4d:03:7e:17:25:ef:29:23:7c:
25:55:45:15:c5:4a:2b:26:5a:7f:22:fc:17:ef:b8:44:e9:e8:
02:d7:26:13:d7:80:a6:0b:04:db:15:5e:e6:43:fd:2e:d7:5f:
18:13:69:58:3d:e6:7d:e5:7b:2c:98:35:4e:a1:af:0c:47:0b:
fc:a6:09:2c:30:ae:3a:df:bb:56:f3:cf:e8:a7:2c:ea:c6:51:
64:3f:a6:1c:30:2e:27:df:90:15:bd:25:fb:14:3a:dc:81:87:
59:a4:0a:eb:b2:4d:1f:6e:bf:99:f7:69:b2:b4:f1:2a:bb:30:
24:02:fb:35:42:e1:d9:73:29:36:7d:b6:00:6c:13:5a:87:6a:
e0:0b:74:46:e9:be:ed:8d:49:9e:16:34:53:61:01:10:a0:b7:
0b:08:8a:75:4e:fe:a8:1a:6b:29:a3:4e:a2:ec:a2:84:8d:bf:
00:b1:00:42:8e:40:91:63:82:71:15:df:89:8b:df:fc:c7:a2:
74:a8:17:6a:65:38:30:9b:42:26:62:ec:d2:36:79:39:58:9f:
f3:c2:87:68:a5:7a:d8:99:e9:fd:f1:39:02:8f:b1:7d:ae:a4:
b4:dc:d9:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFfYSsu5OeiUgFXqqnyxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjVlMDRiNjU1NWYxZTJjOTJkN2E0MWFjMTA2YTc1ZGVh
OTI4YTIwHhcNMjUwODIzMDQwMDQyWhcNMjUwODI0MDQwMDQyWjAzMTEwLwYDVQQD
Eyg5MjExYTVkZGI0NjliYjFhNjUwMTNmZmM2NDNhNzEzMTA1ZGRjOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszyJz0ZOE3kNZakgFsaOhPj6Y63U
eccowFifv7W1TTEftRZm5+/EufHGFR1NiZTELKfUq8OTb25ibAGK6K8Hql9QOXxk
lLMCGDSTA9OfWmeNNQfnS26o22YtEujmX86/WvU4RCRZ0+JpxEoCmE45Ot4jz4Vw
jTf080A5dq6YSAry6fWL9SUMrDZxXBfCLmDvinN95cmcKfmXnvutfok75LJ4RxYZ
kP6/GA6AYMFePk35aB5Srui9e0/DrOTMDAQ7LNPK/RewtVK6e/dUh+byiJoT5fyX
vYYl7GPr9YN6KShITqJPAtWLyVea8jyHelhXx6xnyEj0EDLSdH8ZibYfmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIRpd20absaZQE//GQ6cTEF3ck6MB8GA1UdIwQY
MBaAFBn14EtlVfHiyS16QawQanXeqSiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMmU5MjUtNmZlNi00YjI2LWE0OTgt
NzUzMDRmOWY1YzI0LzEvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMmU5MjUtNmZlNi00YjI2LWE0OTgtNzUzMDRmOWY1YzI0
LzEvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUcgd/Oe
q2sokqjTXQCA+rEtzqUyKR70PXh7TQN+FyXvKSN8JVVFFcVKKyZafyL8F++4ROno
AtcmE9eApgsE2xVe5kP9LtdfGBNpWD3mfeV7LJg1TqGvDEcL/KYJLDCuOt+7VvPP
6Kcs6sZRZD+mHDAuJ9+QFb0l+xQ63IGHWaQK67JNH26/mfdpsrTxKrswJAL7NULh
2XMpNn22AGwTWodq4At0Rum+7Y1JnhY0U2EBEKC3CwiKdU7+qBprKaNOouyihI2/
ALEAQo5AkWOCcRXfiYvf/MeidKgXamU4MJtCJmLs0jZ5OVif88KHaKV62Jnp/fE5
Ao+xfa6ktNzZUg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:44 2025 by rpki-client