Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
File: gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft (raw, json)
Hash identifier: 8VOWwNI+zqsezK0eW5M8u9qQs6H6hDddNoseRYT0C7Q=
Subject key identifier: B8:E9:82:9D:89:75:37:3F:06:2B:EB:7F:CD:74:67:C1:9C:E0:0A:5C
Authority key identifier: 81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
Certificate issuer: /CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Certificate serial: 0198D65F05DC5E54951DF34E59B644800768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
Manifest number: 0FB8
Signing time: Sat 23 Aug 2025 10:00:08 +0000
Manifest this update: Sat 23 Aug 2025 10:00:08 +0000
Manifest next update: Sun 24 Aug 2025 10:00:08 +0000
Files and hashes: 1: gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl (hash: 1GglOS04dOveYdMPPLIo7cpaXGFFOaPBCEwWUT9XjAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:05:dc:5e:54:95:1d:f3:4e:59:b6:44:80:07:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Validity
Not Before: Aug 23 10:00:08 2025 GMT
Not After : Aug 24 10:00:08 2025 GMT
Subject: CN=b8e9829d8975373f062beb7fcd7467c19ce00a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:fa:79:e6:2b:ab:a8:e5:8b:a3:c6:73:0e:
3c:2a:de:e8:f5:7d:99:32:d1:91:fe:1c:a5:a0:d2:
61:fe:5f:c9:07:bb:0b:58:7e:f5:5b:eb:ae:71:a5:
3f:de:de:ad:8e:7a:f6:a0:a0:98:cc:65:49:71:9a:
1a:58:54:bf:4f:af:c2:a8:ea:aa:83:40:e6:1b:a3:
46:e1:15:6e:bf:16:4e:33:be:1f:ed:ef:b7:77:98:
9c:25:b2:2b:b3:06:fa:c9:ab:21:81:87:a4:dd:80:
0f:32:e9:dc:06:c8:43:e8:90:e0:b6:60:05:45:e7:
f3:0c:10:fb:6f:2e:25:00:63:e7:17:b9:8d:33:1c:
12:8c:91:f9:2b:2f:b1:c8:d6:81:fe:3b:58:5e:30:
c3:13:c8:7f:13:e4:c6:91:ed:be:e0:a3:26:7e:33:
99:bf:e2:e2:ea:0f:8f:f7:3f:87:91:87:6e:f6:19:
0f:d5:64:4e:de:0c:83:1d:6a:0f:24:f0:c1:59:5c:
78:e8:b6:a3:9c:74:89:78:67:62:9e:21:d4:72:0f:
c2:e5:b0:b8:e1:93:b0:4e:6b:1f:63:07:9a:91:88:
8d:7d:bb:da:77:16:7e:a5:79:50:1f:c6:ae:d2:dc:
3e:00:6d:a6:8f:c4:35:f3:51:e1:13:7a:12:8c:16:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E9:82:9D:89:75:37:3F:06:2B:EB:7F:CD:74:67:C1:9C:E0:0A:5C
X509v3 Authority Key Identifier:
keyid:81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1e:2c:18:39:52:4b:cc:77:eb:39:d0:bb:20:a2:be:ce:7a:
75:7b:14:8f:d8:01:03:bd:cb:75:8b:ca:c4:fd:9c:22:a6:a1:
07:bc:08:11:27:4c:5c:b1:8a:56:7a:57:ab:32:8e:9e:11:70:
84:1a:31:93:95:38:e2:4a:7c:19:aa:2f:52:ce:4f:ec:09:cb:
a3:d2:2a:61:39:35:28:81:e4:16:3c:81:b0:1c:f6:31:f7:cc:
4d:7a:e0:e3:24:56:7d:5b:71:13:bc:8e:4c:98:92:29:43:d5:
b2:f4:ed:63:d8:df:ad:22:ee:af:63:1c:8c:03:c4:b0:36:e3:
20:fd:d1:61:0c:54:8d:50:e2:e6:51:28:47:f4:11:d1:1c:2f:
e6:a9:c7:be:c7:d1:a4:e3:84:53:fc:f5:af:72:0c:b8:c4:50:
a8:5c:01:9c:d0:a6:e1:71:e4:09:4d:89:cd:80:b8:f4:5c:b5:
b1:02:ac:dd:73:1e:58:76:ec:0f:c1:bb:d2:c9:15:63:09:eb:
ea:53:d7:69:46:ca:51:6a:6b:5e:16:4c:d9:16:c7:5b:e2:f8:
26:e4:ec:48:c9:17:1e:3b:bd:a4:8f:58:25:ca:0b:65:72:99:
9a:81:89:60:80:bf:ac:db:e5:fe:9d:ba:41:37:12:57:b4:bd:
61:06:a9:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXwXcXlSVHfNOWbZEgAdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2QwMjYyYTIyMWMzNWE2N2NmMTczYTYwZDFlY2Q5YWZh
YmRkYjUwHhcNMjUwODIzMTAwMDA4WhcNMjUwODI0MTAwMDA4WjAzMTEwLwYDVQQD
EyhiOGU5ODI5ZDg5NzUzNzNmMDYyYmViN2ZjZDc0NjdjMTljZTAwYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuor6eeYrq6jli6PGcw48Kt7o9X2Z
MtGR/hyloNJh/l/JB7sLWH71W+uucaU/3t6tjnr2oKCYzGVJcZoaWFS/T6/CqOqq
g0DmG6NG4RVuvxZOM74f7e+3d5icJbIrswb6yashgYek3YAPMuncBshD6JDgtmAF
RefzDBD7by4lAGPnF7mNMxwSjJH5Ky+xyNaB/jtYXjDDE8h/E+TGke2+4KMmfjOZ
v+Li6g+P9z+HkYdu9hkP1WRO3gyDHWoPJPDBWVx46LajnHSJeGdiniHUcg/C5bC4
4ZOwTmsfYweakYiNfbvadxZ+pXlQH8au0tw+AG2mj8Q181HhE3oSjBZHdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjpgp2JdTc/Bivrf810Z8Gc4ApcMB8GA1UdIwQY
MBaAFIHNAmKiIcNaZ88XOmDR7Nmvq921MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2MwQ1lxSWh3MXBuenhjNllOSHMyYS1yM2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NDA4MTMtOTE4MC00MDZmLWFmNmEt
ZmRkMDk2MmNlYWFiLzEvZ2MwQ1lxSWh3MXBuenhjNllOSHMyYS1yM2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NDA4MTMtOTE4MC00MDZmLWFmNmEtZmRkMDk2MmNlYWFi
LzEvZ2MwQ1lxSWh3MXBuenhjNllOSHMyYS1yM2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPh4sGDlS
S8x36znQuyCivs56dXsUj9gBA73LdYvKxP2cIqahB7wIESdMXLGKVnpXqzKOnhFw
hBoxk5U44kp8GaovUs5P7AnLo9IqYTk1KIHkFjyBsBz2MffMTXrg4yRWfVtxE7yO
TJiSKUPVsvTtY9jfrSLur2McjAPEsDbjIP3RYQxUjVDi5lEoR/QR0Rwv5qnHvsfR
pOOEU/z1r3IMuMRQqFwBnNCm4XHkCU2JzYC49Fy1sQKs3XMeWHbsD8G70skVYwnr
6lPXaUbKUWprXhZM2RbHW+L4JuTsSMkXHju9pI9YJcoLZXKZmoGJYIC/rNvl/p26
QTcSV7S9YQapYQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:12:46 2025 by rpki-client