Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
File: gC-luYQiYYMgG3AVlrA2iifKkZY.mft (raw, json)
Hash identifier: 8B5LevQOchqG00Cwp6WO35WvMGMDoyd1M+Lv0wrK4lI=
Subject key identifier: F3:1E:69:E7:97:E0:88:0D:18:08:0D:DC:0E:78:B2:05:CD:2F:0D:52
Authority key identifier: 80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96
Certificate issuer: /CN=802fa5b984226183201b701596b0368a27ca9196
Certificate serial: 0198D5BBE9C75C42EE475F1E821B20C7BA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
Manifest number: 07E6
Signing time: Sat 23 Aug 2025 07:01:58 +0000
Manifest this update: Sat 23 Aug 2025 07:01:58 +0000
Manifest next update: Sun 24 Aug 2025 07:01:58 +0000
Files and hashes: 1: gC-luYQiYYMgG3AVlrA2iifKkZY.crl (hash: f50eLTWwXxewWZ6gxxsIyiD7a5OnRdCakaMq98z0/8c=)
2: iOg6nBqVzcdi2Akc2tXxbjOUGMU.roa (hash: 7kGU2Yz8c6ke6znrEKsk6Gl+moXJfyEygACJlbdXCNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e9:c7:5c:42:ee:47:5f:1e:82:1b:20:c7:ba:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802fa5b984226183201b701596b0368a27ca9196
Validity
Not Before: Aug 23 07:01:58 2025 GMT
Not After : Aug 24 07:01:58 2025 GMT
Subject: CN=f31e69e797e0880d18080ddc0e78b205cd2f0d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:16:3c:35:02:26:aa:6c:3a:78:67:58:82:
f0:3c:1c:f0:2f:6b:5d:2f:0b:99:8f:94:25:f5:48:
96:38:5c:1d:6c:d2:0c:b9:42:a0:52:20:c4:e1:4b:
5d:95:36:4f:a3:c5:8c:76:cb:ac:5b:ce:a0:06:f0:
c2:cf:f6:e5:9c:d5:9e:cb:e3:88:a3:33:42:e3:aa:
38:cb:13:c7:66:bb:f6:39:7e:b3:5d:1a:d4:db:4d:
61:63:d4:9a:38:ba:ec:57:0e:61:40:d0:4f:34:5f:
7d:6a:f0:18:1b:6f:28:11:69:f8:c3:91:66:f2:b6:
8a:e0:e2:06:78:a3:b4:53:2e:03:fd:69:f1:04:1d:
7e:47:2f:4a:8e:0b:2d:12:6d:20:98:ba:95:99:41:
48:19:74:1d:5d:a6:55:81:84:80:ce:51:8e:50:b8:
50:74:32:8f:d4:e1:96:aa:5e:76:51:fc:2c:ae:20:
56:dd:6a:d9:93:c7:f1:af:bb:23:b8:95:89:42:33:
4d:37:b9:29:4a:fd:e3:c7:50:14:c8:42:cc:d2:c8:
5a:d1:9f:d0:f4:f8:3b:71:df:6b:b1:ea:42:73:1f:
14:02:b6:cf:8a:06:45:a0:bf:6a:07:6a:1f:80:a8:
5a:e6:07:2f:1f:fe:8c:f4:67:26:03:43:0b:46:5c:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1E:69:E7:97:E0:88:0D:18:08:0D:DC:0E:78:B2:05:CD:2F:0D:52
X509v3 Authority Key Identifier:
keyid:80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7e:2d:2c:6d:ae:cb:a3:5f:f5:f8:10:75:dd:ac:01:78:85:
0b:10:1f:ae:2f:b1:95:17:3b:29:f1:65:a3:6e:b7:6b:19:e8:
68:f1:e3:2a:4a:d4:b9:75:75:43:97:6d:e9:0f:33:d2:f7:48:
6d:b6:0d:b4:ad:3c:6d:af:81:a2:b3:08:b5:8c:8b:eb:b1:7a:
3d:20:17:93:79:e1:ed:9d:72:42:32:1f:53:04:47:78:09:28:
57:ae:c1:8c:42:3c:88:63:4e:ba:25:2f:c8:1b:48:55:40:4b:
b4:6a:c3:21:78:46:2a:90:a6:f1:f1:90:54:c5:b6:b5:8a:25:
e5:92:7d:d9:a8:73:0e:9d:fb:11:f5:27:fc:78:3a:27:e8:6c:
41:e4:f4:d4:9d:9e:1d:d4:bd:44:f1:f0:4f:46:d3:39:df:8a:
7e:a5:46:df:90:c5:d4:bf:70:7b:ce:5a:56:0b:93:4c:48:05:
bf:fb:7c:e4:d4:a7:4e:2d:2f:e3:e6:66:29:28:05:ab:e5:2e:
b3:03:4b:c8:ef:ea:79:4d:20:54:c5:39:24:89:27:76:23:57:
15:cb:f8:62:d3:3e:e4:7d:1d:8c:31:dc:1a:a8:1c:56:4d:34:
39:a2:01:a6:79:ad:4f:b0:ec:aa:1a:13:b3:84:57:a4:27:b8:
f4:94:03:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu+nHXELuR18eghsgx7pJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMmZhNWI5ODQyMjYxODMyMDFiNzAxNTk2YjAzNjhhMjdj
YTkxOTYwHhcNMjUwODIzMDcwMTU4WhcNMjUwODI0MDcwMTU4WjAzMTEwLwYDVQQD
EyhmMzFlNjllNzk3ZTA4ODBkMTgwODBkZGMwZTc4YjIwNWNkMmYwZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQcWPDUCJqpsOnhnWILwPBzwL2td
LwuZj5Ql9UiWOFwdbNIMuUKgUiDE4UtdlTZPo8WMdsusW86gBvDCz/blnNWey+OI
ozNC46o4yxPHZrv2OX6zXRrU201hY9SaOLrsVw5hQNBPNF99avAYG28oEWn4w5Fm
8raK4OIGeKO0Uy4D/WnxBB1+Ry9KjgstEm0gmLqVmUFIGXQdXaZVgYSAzlGOULhQ
dDKP1OGWql52UfwsriBW3WrZk8fxr7sjuJWJQjNNN7kpSv3jx1AUyELM0sha0Z/Q
9Pg7cd9rsepCcx8UArbPigZFoL9qB2ofgKha5gcvH/6M9GcmA0MLRly2gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMeaeeX4IgNGAgN3A54sgXNLw1SMB8GA1UdIwQY
MBaAFIAvpbmEImGDIBtwFZawNoonypGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0MtbHVZUWlZWU1nRzNBVmxyQTJpaWZLa1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yYzNhMzAtNTQ5OC00NDdkLThkMzkt
MjViNmJkMmUxZTQzLzEvZ0MtbHVZUWlZWU1nRzNBVmxyQTJpaWZLa1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yYzNhMzAtNTQ5OC00NDdkLThkMzktMjViNmJkMmUxZTQz
LzEvZ0MtbHVZUWlZWU1nRzNBVmxyQTJpaWZLa1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe34tLG2u
y6Nf9fgQdd2sAXiFCxAfri+xlRc7KfFlo263axnoaPHjKkrUuXV1Q5dt6Q8z0vdI
bbYNtK08ba+BorMItYyL67F6PSAXk3nh7Z1yQjIfUwRHeAkoV67BjEI8iGNOuiUv
yBtIVUBLtGrDIXhGKpCm8fGQVMW2tYol5ZJ92ahzDp37EfUn/Hg6J+hsQeT01J2e
HdS9RPHwT0bTOd+KfqVG35DF1L9we85aVguTTEgFv/t85NSnTi0v4+ZmKSgFq+Uu
swNLyO/qeU0gVMU5JIkndiNXFcv4YtM+5H0djDHcGqgcVk00OaIBpnmtT7DsqhoT
s4RXpCe49JQDyw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:13 2025 by rpki-client