Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File: gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier: L7VkcgzjL21GT2JJgdQ+ha6SsjhORdEBQUTD+OLdHbc=
Subject key identifier: A4:06:BA:5C:EE:C8:31:F6:D7:5A:22:73:6B:E3:2B:F2:F1:B9:18:48
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 0197B96A721AA829E0340405E28D311D2ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 02:00:50 +0000
Manifest this update: Sun 29 Jun 2025 02:00:50 +0000
Manifest next update: Mon 30 Jun 2025 02:00:50 +0000
Files and hashes: 1: EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa (hash: +4JZ98C4BqbbLLfwtggPDHTa1SBuwVe0r20VBr9Sh7Q=)
2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: qffhoy8IGl9704GMgtn3NS7I68n6Vn4ToaUgNWaOy1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:72:1a:a8:29:e0:34:04:05:e2:8d:31:1d:2a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: Jun 29 02:00:50 2025 GMT
Not After : Jun 30 02:00:50 2025 GMT
Subject: CN=a406ba5ceec831f6d75a22736be32bf2f1b91848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:9d:04:7f:9c:be:a1:9d:d1:e5:24:6a:9a:
cd:be:e4:b7:7e:09:5f:7d:ff:21:ec:5e:8c:a6:a8:
7c:54:cb:fe:df:4f:61:72:f7:e5:10:9c:46:8b:2b:
3e:dd:f1:38:45:27:2e:f2:67:aa:34:82:98:30:fa:
ff:e7:e0:68:67:5b:63:4a:0d:a4:2e:c6:78:17:31:
52:e5:e0:36:a4:ab:5f:5b:90:94:ad:b6:9a:4a:d6:
8b:4d:03:a9:a4:40:d4:28:66:b3:fa:b6:05:a1:9b:
e1:5f:17:c3:03:55:f5:fd:86:c6:e1:d1:31:ed:9b:
c2:74:21:8c:3c:86:0b:5e:55:51:27:03:db:a6:66:
06:bf:56:1d:06:56:0f:35:f9:90:96:35:1e:ec:63:
60:45:bf:85:e7:05:49:ba:3a:b9:39:51:56:da:e2:
fc:a3:42:0e:3d:e3:d0:93:45:30:50:0b:be:02:c7:
bd:ef:9b:6c:c2:39:0c:30:64:af:57:c3:9f:d2:24:
e5:3b:f3:45:1d:b4:fc:91:b4:04:a1:fe:90:87:6e:
2b:20:45:0c:85:f1:6b:06:9d:ea:4c:72:6f:2b:05:
52:55:87:7c:71:05:2a:47:35:34:35:11:e6:96:37:
75:01:3a:3c:1e:f3:56:cb:67:d1:b5:ed:e9:bf:be:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:06:BA:5C:EE:C8:31:F6:D7:5A:22:73:6B:E3:2B:F2:F1:B9:18:48
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f6:f4:60:91:1f:38:71:49:7f:be:39:3f:6f:42:98:89:10:
d1:0d:20:78:11:dc:2f:ca:9d:69:06:b4:63:67:4d:fa:43:47:
5a:f8:38:2b:89:cc:6c:39:73:5c:40:26:b9:7b:e9:6d:10:c4:
47:65:69:f6:ad:5c:36:d7:d5:16:bf:52:ca:2d:ae:5f:c7:81:
d2:92:84:21:b0:8d:6b:ca:82:86:57:c6:1f:32:c2:ce:bf:d5:
97:aa:ee:1c:11:6d:a4:9d:21:ca:37:8f:7e:8c:ff:62:5c:64:
0c:f7:c8:56:12:4a:44:45:e9:37:bf:d6:c7:fc:cd:07:19:a3:
8a:a8:b1:4d:df:e9:11:55:66:20:d9:9f:72:c5:d2:ce:0c:89:
a9:78:49:27:4b:df:76:5d:15:bb:8a:40:ce:8f:45:ae:44:b2:
70:cc:5b:c5:38:af:44:19:55:1d:39:e2:d3:6b:5e:bc:7a:4b:
a6:8c:50:e4:fe:8d:d9:50:c9:0e:00:4d:82:6b:f4:45:2e:c3:
5f:ba:cc:5e:f1:df:2c:cc:82:04:3f:b8:c3:f8:1d:34:79:e9:
5e:c8:28:fd:07:7a:f8:53:ee:d3:0a:1b:85:1e:02:d8:2a:19:
d0:96:57:f5:1b:b3:fe:7c:a1:34:24:8f:2e:71:7c:15:c6:f5:
7f:03:b5:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5anIaqCngNAQF4o0xHSrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYTMzM2QxM2RjOTE1ZjRmYmZiNjFiMjVhNDg3N2U5MTM4
ZTdmMWQwHhcNMjUwNjI5MDIwMDUwWhcNMjUwNjMwMDIwMDUwWjAzMTEwLwYDVQQD
EyhhNDA2YmE1Y2VlYzgzMWY2ZDc1YTIyNzM2YmUzMmJmMmYxYjkxODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MmdBH+cvqGd0eUkaprNvuS3fglf
ff8h7F6Mpqh8VMv+309hcvflEJxGiys+3fE4RScu8meqNIKYMPr/5+BoZ1tjSg2k
LsZ4FzFS5eA2pKtfW5CUrbaaStaLTQOppEDUKGaz+rYFoZvhXxfDA1X1/YbG4dEx
7ZvCdCGMPIYLXlVRJwPbpmYGv1YdBlYPNfmQljUe7GNgRb+F5wVJujq5OVFW2uL8
o0IOPePQk0UwUAu+Ase975tswjkMMGSvV8Of0iTlO/NFHbT8kbQEof6Qh24rIEUM
hfFrBp3qTHJvKwVSVYd8cQUqRzU0NRHmljd1ATo8HvNWy2fRte3pv77V5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQGulzuyDH211oic2vjK/LxuRhIMB8GA1UdIwQY
MBaAFICjM9E9yRX0+/thslpId+kTjn8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0tNejBUM0pGZlQ3LTJHeVdraDM2Uk9PZngwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xMzliMzgtNWIyNC00MDdkLWIxN2Ut
NGNhMzU0MzBkY2EzLzEvZ0tNejBUM0pGZlQ3LTJHeVdraDM2Uk9PZngwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xMzliMzgtNWIyNC00MDdkLWIxN2UtNGNhMzU0MzBkY2Ez
LzEvZ0tNejBUM0pGZlQ3LTJHeVdraDM2Uk9PZngwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvb0YJEf
OHFJf745P29CmIkQ0Q0geBHcL8qdaQa0Y2dN+kNHWvg4K4nMbDlzXEAmuXvpbRDE
R2Vp9q1cNtfVFr9Syi2uX8eB0pKEIbCNa8qChlfGHzLCzr/Vl6ruHBFtpJ0hyjeP
foz/YlxkDPfIVhJKREXpN7/Wx/zNBxmjiqixTd/pEVVmINmfcsXSzgyJqXhJJ0vf
dl0Vu4pAzo9FrkSycMxbxTivRBlVHTni02tevHpLpoxQ5P6N2VDJDgBNgmv0RS7D
X7rMXvHfLMyCBD+4w/gdNHnpXsgo/Qd6+FPu0wobhR4C2CoZ0JZX9Ruz/nyhNCSP
LnF8Fcb1fwO13A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:08:06 2025 by rpki-client