Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: qOTMlvYpghTcd7VM4UFwZ/nXsAzPoaCBiG4zI/LWk6Q=
Subject key identifier: F5:6A:74:9C:EE:36:59:B6:62:E9:2D:E7:B4:97:68:94:EB:1E:7A:49
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 0198D5BC67D4D36E3F58349EB2871B9534D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 1379
Signing time: Sat 23 Aug 2025 07:02:31 +0000
Manifest this update: Sat 23 Aug 2025 07:02:31 +0000
Manifest next update: Sun 24 Aug 2025 07:02:31 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: b8hD+wYQSfOQO7e7sL/aWdGGn2dn40fo8YmdV/0JQo4=)
2: bC6pTGDsZ4iOHNe53IXcZCBmlIw.roa (hash: Nu4vCdQXopNGTYxKSdmiEuUUjtIYYlh9hvqm6GEgfmc=)
3: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (hash: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:67:d4:d3:6e:3f:58:34:9e:b2:87:1b:95:34:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Aug 23 07:02:31 2025 GMT
Not After : Aug 24 07:02:31 2025 GMT
Subject: CN=f56a749cee3659b662e92de7b4976894eb1e7a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:af:36:27:57:5d:8d:32:29:2b:e0:be:96:
fd:c7:67:ef:0f:50:a2:98:25:c3:41:a2:c6:db:50:
4c:96:0c:78:ad:ab:43:e9:b0:3b:fd:4d:2a:23:ec:
5b:d7:33:5a:46:ba:12:95:5e:e7:61:5c:66:c7:96:
79:5b:28:bb:2b:ad:0f:b2:f9:de:9f:ab:5b:97:2d:
aa:96:3f:52:c3:eb:01:d9:a9:f1:f0:51:9c:91:60:
ea:98:ba:83:ba:eb:fc:25:87:06:49:3f:fd:f1:f8:
18:a1:99:fb:4b:9f:9f:f2:ed:dd:38:40:1b:dc:bc:
14:39:af:6e:be:2d:e7:4e:57:85:28:89:0e:c3:d0:
81:e2:5c:f9:5a:b8:73:9c:1a:61:65:77:95:f0:dd:
35:c5:63:9d:ee:3a:7e:42:47:0d:0e:a7:0b:de:f2:
f4:1a:77:ce:dc:51:18:13:d7:6b:b0:79:87:b2:7a:
61:f6:45:8f:4e:77:c5:af:6f:d1:ce:99:4f:bf:98:
e0:50:da:b6:df:ae:bb:73:e9:35:86:92:a6:72:b1:
cb:9c:6b:0c:8b:9b:c3:b7:8b:64:fe:6a:59:8f:b0:
ee:ac:62:ae:31:2b:dd:b6:5e:e7:5c:35:e8:e1:34:
46:4c:86:a8:88:6c:6d:c2:bc:2f:96:99:a6:0e:86:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6A:74:9C:EE:36:59:B6:62:E9:2D:E7:B4:97:68:94:EB:1E:7A:49
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6d:6f:19:69:2c:05:17:26:57:d5:14:6a:56:0d:64:c7:0d:
23:7f:55:b0:62:78:0a:d6:ee:5a:83:44:2e:5d:25:a1:31:f3:
e0:bc:74:fc:0d:c2:85:1f:56:2c:93:4d:28:2f:ab:5a:73:bf:
a9:8c:15:63:88:1e:5b:eb:ae:14:eb:20:dc:c8:95:54:2f:b1:
8c:2b:0a:1b:b4:2a:9a:70:5b:e8:11:4a:d9:cb:c4:42:ac:05:
0d:42:38:d1:90:08:7e:3e:34:c6:5e:37:25:80:c7:83:22:ca:
7e:3e:01:e1:74:7c:3f:78:39:11:3e:9d:b0:45:1f:69:d6:77:
53:9e:37:1c:94:60:e4:42:44:a2:31:95:16:b5:1c:64:83:cb:
b9:d2:35:b6:67:32:3f:c4:7c:8c:70:c6:72:2f:47:51:4c:36:
a0:5c:21:54:fc:1a:71:32:bf:f5:4c:68:d4:46:e4:d3:dc:da:
93:98:3c:4a:d2:62:6f:2e:73:f6:2b:43:58:c7:e0:2c:57:17:
06:af:94:fa:37:cb:4c:bb:f7:de:23:b7:dd:02:90:06:b5:76:
b0:a3:1d:08:27:b7:50:bc:75:34:95:58:0f:16:48:73:60:65:
a4:8a:cc:78:a5:00:ea:10:37:64:41:a3:f9:ce:55:a9:32:78:
a7:cb:25:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvGfU024/WDSesocblTTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MWE5NmEyOGM2NWQ1ODRjOGRkMjM0ZDNkYjQ0NGNmNGIz
MzdiYTIwHhcNMjUwODIzMDcwMjMxWhcNMjUwODI0MDcwMjMxWjAzMTEwLwYDVQQD
EyhmNTZhNzQ5Y2VlMzY1OWI2NjJlOTJkZTdiNDk3Njg5NGViMWU3YTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstWvNidXXY0yKSvgvpb9x2fvD1Ci
mCXDQaLG21BMlgx4ratD6bA7/U0qI+xb1zNaRroSlV7nYVxmx5Z5Wyi7K60Psvne
n6tbly2qlj9Sw+sB2anx8FGckWDqmLqDuuv8JYcGST/98fgYoZn7S5+f8u3dOEAb
3LwUOa9uvi3nTleFKIkOw9CB4lz5WrhznBphZXeV8N01xWOd7jp+QkcNDqcL3vL0
GnfO3FEYE9drsHmHsnph9kWPTnfFr2/RzplPv5jgUNq23667c+k1hpKmcrHLnGsM
i5vDt4tk/mpZj7DurGKuMSvdtl7nXDXo4TRGTIaoiGxtwrwvlpmmDoYXVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVqdJzuNlm2Yukt57SXaJTrHnpJMB8GA1UdIwQY
MBaAFBkalqKMZdWEyN0jTT20RM9LM3uiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYt
OTE4NTE5OWExOGMwLzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYtOTE4NTE5OWExOGMw
LzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc21vGWks
BRcmV9UUalYNZMcNI39VsGJ4CtbuWoNELl0loTHz4Lx0/A3ChR9WLJNNKC+rWnO/
qYwVY4geW+uuFOsg3MiVVC+xjCsKG7QqmnBb6BFK2cvEQqwFDUI40ZAIfj40xl43
JYDHgyLKfj4B4XR8P3g5ET6dsEUfadZ3U543HJRg5EJEojGVFrUcZIPLudI1tmcy
P8R8jHDGci9HUUw2oFwhVPwacTK/9Uxo1Ebk09zak5g8StJiby5z9itDWMfgLFcX
Bq+U+jfLTLv33iO33QKQBrV2sKMdCCe3ULx1NJVYDxZIc2BlpIrMeKUA6hA3ZEGj
+c5VqTJ4p8slKw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:35:43 2025 by rpki-client