Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File: _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier: s3mf57fBxuY7C9F/IcOGlGrQx8QyGnBd2q4IOv1Yos8=
Subject key identifier: 8B:F6:EA:56:BE:2C:BF:20:BC:A7:95:C2:A4:38:49:E0:2B:28:2A:EA
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 0198D4E0A8BC9AF4D6BAE9A3FA6BA0126BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number: 0994
Signing time: Sat 23 Aug 2025 03:02:29 +0000
Manifest this update: Sat 23 Aug 2025 03:02:29 +0000
Manifest next update: Sun 24 Aug 2025 03:02:29 +0000
Files and hashes: 1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=)
2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: rh8OoNdItS3YGm7/QqyzCoK3UHB/fcmK2LTz/q8gmaw=)
3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a8:bc:9a:f4:d6:ba:e9:a3:fa:6b:a0:12:6b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Aug 23 03:02:29 2025 GMT
Not After : Aug 24 03:02:29 2025 GMT
Subject: CN=8bf6ea56be2cbf20bca795c2a43849e02b282aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:2c:3f:26:7f:68:34:6d:8b:59:1a:35:dd:
d3:7e:69:19:7c:af:a4:a8:ff:82:1c:c7:71:6c:17:
8d:4d:c5:d1:a7:62:91:26:5a:ac:65:32:c0:26:ad:
68:8d:23:c0:f7:6b:fe:f6:a7:8f:95:47:80:61:7b:
da:b0:af:ab:b3:ee:9d:d6:da:89:40:d9:9f:da:da:
1f:b1:ff:9f:71:ad:17:e1:26:ec:0a:15:b5:84:38:
19:18:2a:a1:60:5f:08:1d:6d:ba:15:62:4b:46:16:
fc:59:cb:0f:bc:a0:2d:f9:a1:ba:35:df:06:76:91:
c5:8d:75:3a:5b:b6:ef:de:f0:e5:8b:55:3b:84:ad:
92:51:33:21:b2:36:84:ab:38:92:96:32:ea:28:80:
b3:b5:ea:3d:df:c5:c1:bc:9d:ea:b6:56:14:bd:1e:
b2:8f:e8:4d:d8:3a:06:79:66:6f:95:4a:de:e2:f4:
86:94:df:30:c5:2e:bc:cb:79:e4:40:28:88:e2:0c:
c0:53:2b:97:05:aa:d1:c3:63:55:87:95:76:0f:1f:
0e:79:73:86:d2:e5:b6:ae:e3:42:3f:3c:a3:05:1f:
99:f5:29:b5:50:f4:3e:27:6a:86:b5:a3:70:23:dd:
68:30:0f:d8:32:77:e5:f3:16:62:14:8a:53:78:a0:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F6:EA:56:BE:2C:BF:20:BC:A7:95:C2:A4:38:49:E0:2B:28:2A:EA
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:36:7a:82:78:25:55:0f:21:f4:1a:87:9e:ee:68:69:70:78:
44:2d:c0:e3:a6:1c:b3:d9:a7:d7:fb:9f:ce:10:84:d8:00:af:
e3:4c:6f:2d:21:cd:ca:75:a9:22:b7:3b:b7:dd:2b:a8:91:ad:
99:ab:a6:8f:62:92:40:82:f5:90:98:2f:59:cf:fc:4d:fd:66:
8a:c6:84:b5:86:32:7b:3e:6e:d4:ad:23:30:c0:b1:9b:5d:c0:
3d:26:80:85:b5:c2:45:eb:55:a4:45:96:25:c5:ba:2e:e1:f4:
43:8c:ed:a6:ce:90:7f:32:8f:4f:74:9a:9a:5f:89:39:fb:ab:
5b:e2:4f:50:f8:c6:28:9f:9a:97:6a:82:44:f6:39:1f:f9:4d:
14:5c:1e:0f:5a:c5:47:fb:30:35:f1:fc:d7:60:b3:fa:b5:14:
c5:66:6a:44:52:57:ae:2d:22:fb:e5:ef:38:11:b4:bf:bb:4b:
db:0f:65:b5:1c:b5:69:60:ff:b3:14:62:a4:21:5f:7c:1e:6f:
d5:92:b4:a6:38:19:f1:c3:53:5b:07:a0:9b:0a:f4:e7:0e:0d:
61:37:24:68:d8:0b:85:b3:46:ba:90:ca:7d:a2:d4:8e:b0:89:
2f:6b:d6:f4:f1:5a:89:cd:47:bc:a4:d0:fe:be:15:20:55:8d:
df:b3:4c:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Ki8mvTWuumj+mugEmugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMDc2YzRlYjgyMTk4Mjg5YjEzZmY1Mjg1OTM5MDdkMzIx
NGQ2NDgwHhcNMjUwODIzMDMwMjI5WhcNMjUwODI0MDMwMjI5WjAzMTEwLwYDVQQD
Eyg4YmY2ZWE1NmJlMmNiZjIwYmNhNzk1YzJhNDM4NDllMDJiMjgyYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMwsPyZ/aDRti1kaNd3TfmkZfK+k
qP+CHMdxbBeNTcXRp2KRJlqsZTLAJq1ojSPA92v+9qePlUeAYXvasK+rs+6d1tqJ
QNmf2tofsf+fca0X4SbsChW1hDgZGCqhYF8IHW26FWJLRhb8WcsPvKAt+aG6Nd8G
dpHFjXU6W7bv3vDli1U7hK2SUTMhsjaEqziSljLqKICzteo938XBvJ3qtlYUvR6y
j+hN2DoGeWZvlUre4vSGlN8wxS68y3nkQCiI4gzAUyuXBarRw2NVh5V2Dx8OeXOG
0uW2ruNCPzyjBR+Z9Sm1UPQ+J2qGtaNwI91oMA/YMnfl8xZiFIpTeKBJ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIv26la+LL8gvKeVwqQ4SeArKCrqMB8GA1UdIwQY
MBaAFP4HbE64IZgomxP/UoWTkH0yFNZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lNDdiN2QtMzYwYS00YTQxLWI3NmIt
MzY3YTQxMWY5ZWM2LzEvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lNDdiN2QtMzYwYS00YTQxLWI3NmItMzY3YTQxMWY5ZWM2
LzEvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDZ6gngl
VQ8h9BqHnu5oaXB4RC3A46Ycs9mn1/ufzhCE2ACv40xvLSHNynWpIrc7t90rqJGt
maumj2KSQIL1kJgvWc/8Tf1misaEtYYyez5u1K0jMMCxm13APSaAhbXCRetVpEWW
JcW6LuH0Q4ztps6QfzKPT3Saml+JOfurW+JPUPjGKJ+al2qCRPY5H/lNFFweD1rF
R/swNfH812Cz+rUUxWZqRFJXri0i++XvOBG0v7tL2w9ltRy1aWD/sxRipCFffB5v
1ZK0pjgZ8cNTWwegmwr05w4NYTckaNgLhbNGupDKfaLUjrCJL2vW9PFaic1HvKTQ
/r4VIFWN37NMWA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:04 2025 by rpki-client