Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: /GkPf9EkFI4dtkVshCNvS642FN6rmjr+8tjoTXuw228=
Subject key identifier: 2D:15:AE:C8:9A:97:96:80:81:08:06:85:0C:33:90:0E:70:64:3D:D0
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 0198D404C266948296F99E45F320C7F20A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: EF
Signing time: Fri 22 Aug 2025 23:02:18 +0000
Manifest this update: Fri 22 Aug 2025 23:02:18 +0000
Manifest next update: Sat 23 Aug 2025 23:02:18 +0000
Files and hashes: 1: 9PkegdPcOVaHYch8whuUGhkGOzc.roa (hash: nTpt8kDLjSLrMGR0C/m0j9Ftj77WGzhvL7KxFH3u7Z8=)
2: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: B3ETjcMgNfjwArcv2QBeYwPzlZtKZ41bfNm4e29mWw8=)
3: mo525hECNfAEonllRKyyBVCuVuY.roa (hash: a5b0LUZ9waSvhihXnwQQ6mCuKjGwIDzPkvhonuJ3oDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:c2:66:94:82:96:f9:9e:45:f3:20:c7:f2:0a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Aug 22 23:02:18 2025 GMT
Not After : Aug 23 23:02:18 2025 GMT
Subject: CN=2d15aec89a979680810806850c33900e70643dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:09:4c:1d:a6:e0:58:14:00:f1:1a:f1:51:
be:b0:4e:78:6d:de:76:47:7f:48:09:d6:89:46:de:
f9:49:6a:50:36:5b:5a:51:b1:d9:ed:71:5b:6e:ba:
96:d6:6c:fa:23:0a:38:3f:a8:19:cc:d7:f6:a8:aa:
13:7f:53:1c:eb:be:5c:4e:88:e5:a9:bd:a5:05:fd:
5f:99:30:55:af:36:e9:65:65:02:bf:a3:95:4c:b9:
ee:9e:b8:99:79:44:c8:8e:b1:64:23:c5:8c:89:30:
86:6e:b5:ec:d7:07:00:59:c0:3f:34:67:9e:67:fb:
c3:6b:bd:76:4b:d1:86:39:a7:91:7c:81:55:60:6c:
bf:63:4b:50:5a:cf:d5:69:07:34:61:bd:49:5e:2a:
e8:9f:42:34:f3:08:c6:3c:fc:ae:b8:49:cb:9a:bb:
b8:eb:7e:a0:9f:ba:3b:d6:b3:fb:b2:4a:3f:a4:c8:
2c:ee:c0:c4:a2:65:92:94:96:b5:95:4e:5a:ce:2c:
1d:08:72:e8:ac:94:7e:0b:86:d1:42:bd:1e:c7:38:
aa:25:d3:c2:10:09:6d:3a:4d:79:7d:18:73:82:47:
fd:ae:45:90:b9:d7:0b:46:cb:fb:0d:8f:8c:b6:3c:
8e:96:e6:fc:7c:bc:ac:e9:ed:c7:dd:86:a7:4e:df:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:15:AE:C8:9A:97:96:80:81:08:06:85:0C:33:90:0E:70:64:3D:D0
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5b:1e:de:bc:c2:ff:c7:c1:4f:94:f2:9e:77:a5:a7:81:9b:
23:f9:6f:01:e2:9d:8d:33:3f:ae:34:cf:0b:8b:c3:91:00:d9:
de:ff:77:9c:3c:42:2e:13:0f:ab:3c:6a:49:ab:b1:8f:77:f7:
aa:dc:75:24:81:3e:0f:27:e6:25:e7:a7:fe:39:b9:b0:a1:af:
2b:d0:8f:9d:69:f8:ce:f8:fa:ed:6a:c0:30:a9:d9:e4:de:1c:
6c:50:be:e3:30:d8:55:41:d5:27:ef:28:0f:ec:ea:d3:cd:94:
27:ee:e0:60:ba:3c:b0:e4:d0:29:1c:6b:57:4a:94:8c:3c:65:
b8:e5:bc:4c:2a:1a:ee:a1:a7:1b:ce:58:a8:ff:50:28:56:4c:
94:e3:f7:03:4c:6e:f4:8b:42:35:7c:d1:38:f6:72:92:6a:a3:
f6:90:59:9d:53:ea:b1:16:0a:37:24:95:2f:dc:be:3f:aa:e1:
8c:49:b7:b5:87:8b:14:25:9c:4c:a9:c6:c0:3e:1a:1b:fe:c5:
b1:97:c2:65:ce:d8:31:77:be:fa:9d:9d:47:8d:78:5e:da:05:
13:70:6b:dc:93:4f:e5:a9:02:c0:5c:0e:97:f4:2b:a2:1e:71:
f1:7c:cf:4c:fc:b1:0a:eb:8d:62:a6:d9:b8:28:ba:a6:f4:cf:
e7:7f:c1:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBMJmlIKW+Z5F8yDH8gooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGUxMGE5NTZmYTUyNTE2ZThmZDNiOTMxOGU4NGE1NTM4
M2Q2MmIwHhcNMjUwODIyMjMwMjE4WhcNMjUwODIzMjMwMjE4WjAzMTEwLwYDVQQD
EygyZDE1YWVjODlhOTc5NjgwODEwODA2ODUwYzMzOTAwZTcwNjQzZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDAJTB2m4FgUAPEa8VG+sE54bd52
R39ICdaJRt75SWpQNltaUbHZ7XFbbrqW1mz6Iwo4P6gZzNf2qKoTf1Mc675cTojl
qb2lBf1fmTBVrzbpZWUCv6OVTLnunriZeUTIjrFkI8WMiTCGbrXs1wcAWcA/NGee
Z/vDa712S9GGOaeRfIFVYGy/Y0tQWs/VaQc0Yb1JXiron0I08wjGPPyuuEnLmru4
636gn7o71rP7sko/pMgs7sDEomWSlJa1lU5aziwdCHLorJR+C4bRQr0exziqJdPC
EAltOk15fRhzgkf9rkWQudcLRsv7DY+MtjyOlub8fLys6e3H3YanTt+WNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0Vrsial5aAgQgGhQwzkA5wZD3QMB8GA1UdIwQY
MBaAFBlOEKlW+lJRbo/TuTGOhKVTg9YrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDct
NTFmMDc3ZjMwZDNmLzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDctNTFmMDc3ZjMwZDNm
LzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFse3rzC
/8fBT5Tynnelp4GbI/lvAeKdjTM/rjTPC4vDkQDZ3v93nDxCLhMPqzxqSauxj3f3
qtx1JIE+DyfmJeen/jm5sKGvK9CPnWn4zvj67WrAMKnZ5N4cbFC+4zDYVUHVJ+8o
D+zq082UJ+7gYLo8sOTQKRxrV0qUjDxluOW8TCoa7qGnG85YqP9QKFZMlOP3A0xu
9ItCNXzROPZykmqj9pBZnVPqsRYKNySVL9y+P6rhjEm3tYeLFCWcTKnGwD4aG/7F
sZfCZc7YMXe++p2dR414XtoFE3Br3JNP5akCwFwOl/Qroh5x8XzPTPyxCuuNYqbZ
uCi6pvTP53/Bgg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:07:52 2025 by rpki-client