Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier: rnsceU6JzD0QkRMtboLc375rYiiVFqE7dpRDG4eUfq4=
Subject key identifier: EB:FB:05:25:F7:B2:23:0C:05:C2:8C:FD:41:F3:B2:AD:7C:F1:A1:21
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 0198D54DFA1F171ED5FB414F17BE34F4008E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:01:53 +0000
Manifest this update: Sat 23 Aug 2025 05:01:53 +0000
Manifest next update: Sun 24 Aug 2025 05:01:53 +0000
Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: iTb76VdyW2DU5E9e+hHfTljU2O3ZNNpANwfpb3dQ/i4=)
2: UJadThgIY9kRl3yuOM0mvOp3eiw.roa (hash: NYhzFFlpnpad/HHC5kD2Bp7E8XgYHWJLlBn3GfXQ/6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:fa:1f:17:1e:d5:fb:41:4f:17:be:34:f4:00:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Aug 23 05:01:53 2025 GMT
Not After : Aug 24 05:01:53 2025 GMT
Subject: CN=ebfb0525f7b2230c05c28cfd41f3b2ad7cf1a121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:54:0d:91:32:8b:08:64:e2:fd:30:5f:a0:
f5:c0:f4:fb:7e:f1:6b:f1:3b:db:7f:d6:33:94:a4:
30:2f:24:6d:68:63:54:c8:de:65:96:8d:52:00:19:
dc:15:6a:fe:1e:05:e1:24:70:6d:f7:0a:e1:a0:a2:
63:57:16:ba:00:42:2c:78:a0:30:69:9f:18:cc:4a:
f6:fa:b3:7b:43:4a:03:07:78:3e:ec:0c:42:3b:0e:
25:75:56:61:3a:73:c1:5d:bc:42:45:ed:5d:f5:d6:
80:c7:ef:8b:4b:9f:6c:bf:bf:5a:2f:a6:ee:27:b9:
fd:c3:26:41:32:43:ac:58:a1:ad:10:a5:7b:68:c3:
43:ba:a4:b1:72:54:b5:9c:85:4a:e9:3f:c7:0e:90:
16:09:d8:52:fe:e6:ef:fb:8c:1e:06:e0:19:81:1b:
f9:de:b1:59:5b:3c:84:1e:8c:08:fd:1c:4c:b4:35:
4e:fa:26:e7:4a:29:45:07:43:65:1b:11:f4:a5:27:
03:ee:2b:d4:64:f0:e2:73:55:f6:90:08:44:b1:12:
cc:78:b7:64:23:92:df:c2:58:a2:55:8b:51:9e:17:
71:bd:3a:e3:e7:39:ff:82:ee:0f:96:bc:4b:5a:97:
bc:dc:10:6d:35:83:93:5a:30:4c:11:cc:93:ec:35:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FB:05:25:F7:B2:23:0C:05:C2:8C:FD:41:F3:B2:AD:7C:F1:A1:21
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:53:ac:14:e3:49:a2:47:91:a7:6f:ea:27:6e:b9:df:dd:a0:
7a:3e:18:66:af:46:8a:91:83:02:d7:49:90:0b:ee:01:09:d8:
c1:91:d9:51:72:55:8e:ae:4e:f2:6d:25:5f:82:28:32:7d:d1:
75:cf:4c:ad:06:00:cb:21:f6:e8:18:7e:45:06:6b:c5:d2:b2:
b9:e6:27:dc:55:d1:91:14:05:c4:8c:ff:da:d6:31:34:11:13:
63:cd:8e:e5:09:8f:38:b1:b0:c1:02:de:a7:5a:17:53:e4:0f:
b6:0c:d4:79:73:93:ad:ee:fa:e7:5f:b3:17:c3:28:e3:fa:54:
53:34:ca:13:e2:06:e1:59:18:92:69:f8:26:40:ee:48:76:eb:
d9:86:3a:0c:96:8e:e4:98:ab:93:24:8d:00:36:2d:d8:70:29:
d3:16:93:09:99:a1:00:37:e3:6d:ee:89:bc:c3:de:c1:44:01:
5d:48:be:7a:80:e8:cf:59:33:e0:f6:ff:82:b1:f4:be:2f:e4:
b3:4f:64:33:b9:bd:ce:6b:08:5a:60:50:2d:37:c2:53:bd:64:
9a:81:2a:56:21:6d:33:47:3d:50:83:8a:72:0c:cc:7f:2e:54:
00:cc:5e:fd:ff:ab:cf:3d:a2:7b:dc:3e:ca:77:6f:b3:9b:63:
09:8a:2f:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTfofFx7V+0FPF7409ACOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YWNmMDdmMTM1MjIyMjY1OGI3ODllNGZlNDBlYTM4YThh
YTcxZGYwHhcNMjUwODIzMDUwMTUzWhcNMjUwODI0MDUwMTUzWjAzMTEwLwYDVQQD
EyhlYmZiMDUyNWY3YjIyMzBjMDVjMjhjZmQ0MWYzYjJhZDdjZjFhMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP1UDZEyiwhk4v0wX6D1wPT7fvFr
8Tvbf9YzlKQwLyRtaGNUyN5llo1SABncFWr+HgXhJHBt9wrhoKJjVxa6AEIseKAw
aZ8YzEr2+rN7Q0oDB3g+7AxCOw4ldVZhOnPBXbxCRe1d9daAx++LS59sv79aL6bu
J7n9wyZBMkOsWKGtEKV7aMNDuqSxclS1nIVK6T/HDpAWCdhS/ubv+4weBuAZgRv5
3rFZWzyEHowI/RxMtDVO+ibnSilFB0NlGxH0pScD7ivUZPDic1X2kAhEsRLMeLdk
I5LfwliiVYtRnhdxvTrj5zn/gu4PlrxLWpe83BBtNYOTWjBMEcyT7DXSaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOv7BSX3siMMBcKM/UHzsq188aEhMB8GA1UdIwQY
MBaAFBms8H8TUiImWLeJ5P5A6jioqnHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMt
NzE2YzAzNDdhYTc2LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMtNzE2YzAzNDdhYTc2
LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVOsFONJ
okeRp2/qJ265392gej4YZq9GipGDAtdJkAvuAQnYwZHZUXJVjq5O8m0lX4IoMn3R
dc9MrQYAyyH26Bh+RQZrxdKyueYn3FXRkRQFxIz/2tYxNBETY82O5QmPOLGwwQLe
p1oXU+QPtgzUeXOTre7651+zF8Mo4/pUUzTKE+IG4VkYkmn4JkDuSHbr2YY6DJaO
5JirkySNADYt2HAp0xaTCZmhADfjbe6JvMPewUQBXUi+eoDoz1kz4Pb/grH0vi/k
s09kM7m9zmsIWmBQLTfCU71kmoEqViFtM0c9UIOKcgzMfy5UAMxe/f+rzz2ie9w+
yndvs5tjCYovJw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:56 2025 by rpki-client