Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json)
Hash identifier: +3FVyEgx9NN6lacVqpEEs7xgfF+YkfZLiax5+vWli5E=
Subject key identifier: 60:0B:38:2E:DD:22:17:29:A7:F1:F6:57:A1:9A:60:40:DF:C1:AE:8E
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial: 0198D4E07CAE20CF4C3FDBAA8E7E1CE2F747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
Manifest number: 161E
Signing time: Sat 23 Aug 2025 03:02:18 +0000
Manifest this update: Sat 23 Aug 2025 03:02:18 +0000
Manifest next update: Sun 24 Aug 2025 03:02:18 +0000
Files and hashes: 1: Dj-Uv0t3dvfxWtykcGKcEfSOyys.roa (hash: Cq81bMV4HRofyA9CM4mQwXF2q1ipT3j7p1KwK0T9L7g=)
2: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: HSHmqYkkBrs12f2DOQbeNIwSDIWxwNTcFMBeEVKgMEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7c:ae:20:cf:4c:3f:db:aa:8e:7e:1c:e2:f7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Validity
Not Before: Aug 23 03:02:18 2025 GMT
Not After : Aug 24 03:02:18 2025 GMT
Subject: CN=600b382edd221729a7f1f657a19a6040dfc1ae8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:9d:c9:81:20:3c:b0:57:95:b5:49:1b:d2:
64:64:6b:82:13:eb:75:70:bd:75:be:17:d5:f0:a9:
83:1c:3e:a3:33:a3:1c:2c:5b:f8:74:b6:d6:a6:c3:
7c:7e:9e:ed:2a:72:5d:94:9d:35:71:a6:cf:18:80:
f6:49:07:87:bc:f6:5b:b7:8e:c8:42:0d:15:36:06:
23:e2:48:e7:6b:87:61:f6:01:26:a6:ba:44:ad:fd:
3a:4e:56:a0:94:61:a5:b0:e0:79:3d:9d:ce:6c:60:
26:d6:23:18:0f:54:c6:ff:a2:be:8f:87:1f:f6:72:
44:09:40:2f:25:0f:87:56:e2:63:11:7b:a2:75:ee:
71:f0:57:f5:b2:75:7a:00:75:60:ac:3e:68:ef:c1:
2f:c8:6f:86:59:ef:42:f1:ec:21:11:d0:8f:c8:ec:
3e:6f:14:2c:fe:e6:a6:4b:e4:27:fd:04:cf:5b:78:
dc:d6:b6:21:51:ca:42:20:4c:6e:3c:86:54:d7:79:
02:2a:11:d6:65:d8:05:e2:f6:61:83:9a:98:3c:d0:
bf:8d:0d:ea:16:e9:51:8c:8f:56:4b:15:8f:78:e0:
0e:f3:9c:85:7e:a5:52:e9:bf:ef:c6:9f:5f:d8:ce:
d3:23:f5:1a:86:4f:9a:8e:ce:17:19:d1:25:eb:15:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0B:38:2E:DD:22:17:29:A7:F1:F6:57:A1:9A:60:40:DF:C1:AE:8E
X509v3 Authority Key Identifier:
keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f6:b3:6e:5d:51:6d:f0:7d:d4:94:13:cb:3d:f6:24:f1:3f:
35:1f:2d:9a:7a:91:9b:14:98:2f:1c:08:d5:5a:92:dc:5b:2e:
14:fd:87:db:16:cf:80:4a:3b:cb:84:af:89:8f:dd:98:4c:a2:
e0:1c:ba:7d:06:1c:43:7a:3a:21:0b:7c:b4:b3:22:52:35:09:
96:c0:4c:52:fb:05:79:9e:5f:53:f4:18:22:47:76:0e:a9:a8:
22:85:3c:3b:9b:b4:f9:a0:2a:3b:2d:e6:58:18:99:6d:13:f3:
e4:c7:88:b4:fc:70:c2:34:4f:6c:7c:83:1c:ac:ad:cd:6f:15:
57:a8:2b:5d:8b:69:be:06:2a:9f:aa:db:98:a1:91:a1:0d:47:
02:df:6f:44:82:9a:88:c5:37:1d:fd:08:6b:74:de:96:f8:37:
6e:3b:7f:15:f8:3d:41:71:9c:23:fe:dc:7d:d0:94:9e:92:c0:
7c:0b:26:d3:c7:56:24:9b:8e:c6:77:b5:70:fb:0b:7d:04:23:
27:f0:6a:6e:52:c4:62:2d:60:39:36:a3:c2:26:47:87:c1:a6:
db:72:ee:90:47:73:b1:2b:68:fe:63:ec:b5:5f:4e:0a:f0:50:
71:55:ba:96:06:50:a6:c4:44:fb:c7:7f:67:c9:84:ee:48:a7:
58:88:f6:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4HyuIM9MP9uqjn4c4vdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NWYzYzMzZmIwMTEzYjQ1ZDQ1OTI5YTRjMDZmMjhjNzE0
ZGNhNGIwHhcNMjUwODIzMDMwMjE4WhcNMjUwODI0MDMwMjE4WjAzMTEwLwYDVQQD
Eyg2MDBiMzgyZWRkMjIxNzI5YTdmMWY2NTdhMTlhNjA0MGRmYzFhZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJudyYEgPLBXlbVJG9JkZGuCE+t1
cL11vhfV8KmDHD6jM6McLFv4dLbWpsN8fp7tKnJdlJ01cabPGID2SQeHvPZbt47I
Qg0VNgYj4kjna4dh9gEmprpErf06TlaglGGlsOB5PZ3ObGAm1iMYD1TG/6K+j4cf
9nJECUAvJQ+HVuJjEXuide5x8Ff1snV6AHVgrD5o78EvyG+GWe9C8ewhEdCPyOw+
bxQs/uamS+Qn/QTPW3jc1rYhUcpCIExuPIZU13kCKhHWZdgF4vZhg5qYPNC/jQ3q
FulRjI9WSxWPeOAO85yFfqVS6b/vxp9f2M7TI/Uahk+ajs4XGdEl6xWIewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGALOC7dIhcpp/H2V6GaYEDfwa6OMB8GA1UdIwQY
MBaAFBhfPDP7ARO0XUWSmkwG8oxxTcpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xY2ZlYjctZDBhYS00YzFkLWJiOWIt
NzYzYWJhYjk3MTAxLzEvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xY2ZlYjctZDBhYS00YzFkLWJiOWItNzYzYWJhYjk3MTAx
LzEvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwfazbl1R
bfB91JQTyz32JPE/NR8tmnqRmxSYLxwI1VqS3FsuFP2H2xbPgEo7y4SviY/dmEyi
4By6fQYcQ3o6IQt8tLMiUjUJlsBMUvsFeZ5fU/QYIkd2DqmoIoU8O5u0+aAqOy3m
WBiZbRPz5MeItPxwwjRPbHyDHKytzW8VV6grXYtpvgYqn6rbmKGRoQ1HAt9vRIKa
iMU3Hf0Ia3Telvg3bjt/Ffg9QXGcI/7cfdCUnpLAfAsm08dWJJuOxne1cPsLfQQj
J/BqblLEYi1gOTajwiZHh8Gm23LukEdzsSto/mPstV9OCvBQcVW6lgZQpsRE+8d/
Z8mE7kinWIj2Kw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:27 2025 by rpki-client