Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json)
Hash identifier: OSGKUNNdlJJMd1xHFFzMqakjIWBJV02JdlBg6YfSiqE=
Subject key identifier: 60:C2:DF:89:A9:85:22:22:47:BD:EA:82:24:3A:C7:8E:F5:61:BB:E4
Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
Certificate issuer: /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Certificate serial: 0198D6CD93BFE0C51436E9D42F54760F4C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
Manifest number: 0602
Signing time: Sat 23 Aug 2025 12:00:53 +0000
Manifest this update: Sat 23 Aug 2025 12:00:53 +0000
Manifest next update: Sun 24 Aug 2025 12:00:53 +0000
Files and hashes: 1: FS82XW-k77zMqGngn5r7_Yo2ofY.roa (hash: HKhziiZ0vfYbPizRPboCVEcmyagdxZmch8FNJ52Iiys=)
2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: MLNNYbuQbLWg783LclZ6+udOYS7r5nhNGgM5M32lW9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:93:bf:e0:c5:14:36:e9:d4:2f:54:76:0f:4c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Validity
Not Before: Aug 23 12:00:53 2025 GMT
Not After : Aug 24 12:00:53 2025 GMT
Subject: CN=60c2df89a985222247bdea82243ac78ef561bbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:ca:4d:c0:2d:7d:78:07:a3:c2:00:ed:55:
a9:e8:ab:52:22:ff:5b:f0:78:46:f1:01:8f:0d:4a:
42:16:65:34:6d:2b:0e:88:8a:a5:f9:c2:3d:df:96:
73:0f:b5:89:1c:d0:8c:63:3c:2c:73:a4:e0:1a:57:
76:92:ed:a5:02:b7:21:e0:3f:dc:df:90:bd:b5:46:
da:0a:a1:05:a2:08:dd:87:40:47:af:db:50:c0:7b:
dc:b9:2a:7a:fa:2a:6f:2d:43:2f:b6:a2:29:5c:45:
8a:ab:4f:ff:42:f8:78:15:84:d7:04:95:5c:c8:80:
16:b3:e1:6b:20:36:92:bb:f2:c1:66:77:c0:2a:18:
5a:ec:e6:e4:d5:fd:2e:d8:ba:88:22:45:ac:4d:c8:
dc:b2:88:2e:00:59:c9:b8:d2:4e:37:fd:d4:4e:7d:
64:1a:dc:e2:38:03:f2:95:1c:61:64:40:a0:a7:b7:
60:ff:34:8b:be:a4:b9:59:d9:5c:1b:8e:80:c7:da:
5a:d2:6a:01:ba:34:f3:75:1c:09:c2:c3:92:40:95:
56:2c:c9:0d:7a:be:f3:ab:50:fa:75:f7:6d:fa:fe:
83:9c:70:be:e7:eb:f9:ed:60:b8:15:03:a9:bd:2b:
ca:5e:6e:f7:ba:ad:bb:a2:1c:1b:9c:88:c1:ea:aa:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C2:DF:89:A9:85:22:22:47:BD:EA:82:24:3A:C7:8E:F5:61:BB:E4
X509v3 Authority Key Identifier:
keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:9a:4b:22:43:e3:1b:d5:79:24:23:ce:13:ee:ef:df:14:c6:
52:5e:6f:40:b7:45:3b:71:60:e1:52:15:f7:d0:20:8d:d7:34:
86:fe:42:ab:6f:ef:bd:e2:d9:c5:f7:93:6f:1c:a9:e1:e8:ce:
a7:ab:14:9d:90:e9:c6:13:66:a9:82:c9:ea:f7:ed:01:5b:e7:
91:d9:46:71:c1:41:a8:6f:2f:19:41:65:8c:0a:f6:a5:ce:8f:
ed:d2:36:1e:2b:8f:a8:aa:10:5b:d4:d4:93:87:43:b4:d5:35:
38:6f:cf:df:dc:fd:1d:26:50:dd:06:42:94:6f:66:b3:2e:4f:
6c:38:57:0b:f6:29:a0:bd:96:17:03:51:f3:96:6a:d6:6f:26:
1a:95:6b:7c:40:ba:79:1c:94:e8:37:6f:fb:03:4c:d7:47:a7:
17:0d:31:da:62:4b:6f:a5:c1:89:d5:5a:dd:06:78:f4:9e:e6:
63:ed:ae:80:45:c9:23:6b:7c:9d:bc:ee:86:af:5f:48:e6:a3:
60:d6:e4:13:1a:e6:42:0d:ad:67:62:bb:75:2b:31:11:21:c7:
63:18:ad:bc:16:9f:a6:9c:1c:ee:59:55:8d:6d:1c:8f:02:8c:
3d:1d:4d:b2:d1:b4:fa:6d:ed:3f:bf:c3:9c:2a:00:31:08:e6:
db:d4:42:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzZO/4MUUNunUL1R2D0xDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDdkYzAzNmQ5ZDZjMjhmMWQ4N2FiNjRlNzhlZTQ4NWE5
NmZkODEwHhcNMjUwODIzMTIwMDUzWhcNMjUwODI0MTIwMDUzWjAzMTEwLwYDVQQD
Eyg2MGMyZGY4OWE5ODUyMjIyNDdiZGVhODIyNDNhYzc4ZWY1NjFiYmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bHKTcAtfXgHo8IA7VWp6KtSIv9b
8HhG8QGPDUpCFmU0bSsOiIql+cI935ZzD7WJHNCMYzwsc6TgGld2ku2lArch4D/c
35C9tUbaCqEFogjdh0BHr9tQwHvcuSp6+ipvLUMvtqIpXEWKq0//Qvh4FYTXBJVc
yIAWs+FrIDaSu/LBZnfAKhha7Obk1f0u2LqIIkWsTcjcsoguAFnJuNJON/3UTn1k
GtziOAPylRxhZECgp7dg/zSLvqS5WdlcG46Ax9pa0moBujTzdRwJwsOSQJVWLMkN
er7zq1D6dfdt+v6DnHC+5+v57WC4FQOpvSvKXm73uq27ohwbnIjB6qpxGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDC34mphSIiR73qgiQ6x471YbvkMB8GA1UdIwQY
MBaAFIEH3ANtnWwo8dh6tk547khalv2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xNTk4NjAtZjgzMi00MzhhLTllNmYt
NzZhMTQxY2RkNDFmLzEvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xNTk4NjAtZjgzMi00MzhhLTllNmYtNzZhMTQxY2RkNDFm
LzEvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw5pLIkPj
G9V5JCPOE+7v3xTGUl5vQLdFO3Fg4VIV99Agjdc0hv5Cq2/vveLZxfeTbxyp4ejO
p6sUnZDpxhNmqYLJ6vftAVvnkdlGccFBqG8vGUFljAr2pc6P7dI2HiuPqKoQW9TU
k4dDtNU1OG/P39z9HSZQ3QZClG9msy5PbDhXC/YpoL2WFwNR85Zq1m8mGpVrfEC6
eRyU6Ddv+wNM10enFw0x2mJLb6XBidVa3QZ49J7mY+2ugEXJI2t8nbzuhq9fSOaj
YNbkExrmQg2tZ2K7dSsxESHHYxitvBafppwc7llVjW0cjwKMPR1NstG0+m3tP7/D
nCoAMQjm29RC0Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:02 2025 by rpki-client