Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
File: gxtyb8yYIAzzkDTflY6P6LPHnDc.mft (raw, json)
Hash identifier: 7EIjI+7TRp9QX6QorizZKiG1gFal5UZtbj+duDs8WS0=
Subject key identifier: 41:E3:D3:7D:21:0B:5F:A1:03:B4:68:AC:B1:E7:7D:D8:AB:43:38:75
Authority key identifier: 83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
Certificate issuer: /CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Certificate serial: 0198D515F9B90B6C2F4DFBD4A8F4F045ACD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
Manifest number: 0560
Signing time: Sat 23 Aug 2025 04:00:43 +0000
Manifest this update: Sat 23 Aug 2025 04:00:43 +0000
Manifest next update: Sun 24 Aug 2025 04:00:43 +0000
Files and hashes: 1: gxtyb8yYIAzzkDTflY6P6LPHnDc.crl (hash: +E+JwTbGBRwJN3/jArMhWlqFJpIPQ7kKAnIM0E3PzYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f9:b9:0b:6c:2f:4d:fb:d4:a8:f4:f0:45:ac:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Validity
Not Before: Aug 23 04:00:43 2025 GMT
Not After : Aug 24 04:00:43 2025 GMT
Subject: CN=41e3d37d210b5fa103b468acb1e77dd8ab433875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:fc:b1:40:b9:81:c8:0a:6f:65:86:e7:d3:
08:ce:e6:24:59:2c:3e:be:49:2f:a8:17:14:df:f7:
f5:9f:e8:5a:12:e1:c2:d6:9b:0c:c5:a2:0b:09:bf:
ca:b8:77:63:4d:c7:c3:1c:7e:42:38:6a:9e:6b:35:
64:a4:0d:6e:c2:69:64:7c:24:fa:42:04:6e:7c:2a:
69:3f:1d:20:cd:cc:de:82:98:c2:49:2e:b2:e7:3e:
b6:31:02:f8:fd:81:d8:51:4c:cf:cd:96:bd:ef:1a:
e9:03:7d:f8:79:8d:0e:2a:a5:6a:25:94:d7:09:41:
d6:f4:f1:bb:20:c6:03:dc:55:7e:8f:b5:e9:ee:70:
b4:ae:ac:e6:4d:6c:25:63:c7:06:d7:9c:0d:e7:78:
1c:4b:a3:9a:e2:7a:28:66:b3:11:37:5a:11:02:bb:
62:85:1d:15:af:85:81:3f:4d:f0:03:56:29:7a:aa:
d9:06:9e:30:b1:df:bd:04:24:94:a3:8a:bf:14:ff:
12:17:f5:90:d1:0b:14:cf:36:4c:e8:bb:53:7e:f7:
8c:aa:52:f9:6f:d8:4c:4c:c8:29:8f:19:5d:33:6c:
65:f2:07:23:f7:62:07:89:90:e0:92:fb:a7:f8:b1:
81:c5:9a:61:71:08:af:54:4c:6f:1d:bf:66:1e:1d:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E3:D3:7D:21:0B:5F:A1:03:B4:68:AC:B1:E7:7D:D8:AB:43:38:75
X509v3 Authority Key Identifier:
keyid:83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9e:10:91:c9:f0:3f:3f:ee:9a:f9:d1:49:98:eb:80:e0:88:
c6:c7:7b:44:f9:1a:28:b9:c6:a8:bd:95:33:0d:4b:85:1f:8c:
d5:d9:55:b2:3a:07:2f:1a:44:bd:bb:26:e9:44:af:aa:7d:90:
6a:3f:f4:3d:a7:af:b5:7f:06:8c:85:85:52:a4:58:0d:84:96:
33:78:e5:e4:ec:82:18:8f:1e:c3:1b:56:16:a0:24:25:b5:32:
40:a8:d1:fa:79:75:95:8b:10:e0:3c:ad:17:97:3d:8c:d4:b6:
fb:c1:77:02:c9:ca:0d:8a:b9:39:54:b8:70:13:ff:8a:b7:ae:
42:d1:7b:a8:06:94:95:4d:6c:a1:2b:cc:fa:58:e5:8b:a8:9c:
05:9d:c6:17:d5:3e:11:2d:23:49:54:da:35:54:32:54:ff:46:
6a:70:81:36:8c:f8:2f:cc:c6:8d:52:c0:b3:8d:c4:68:40:88:
ea:46:dc:cf:57:4a:34:60:30:ba:11:01:b5:87:a9:c0:f2:35:
10:dc:db:60:63:dd:c3:c1:c7:17:a1:5d:ed:ef:96:68:c1:93:
85:63:19:5a:00:0a:88:5d:ca:2d:db:b8:95:d4:64:2c:be:af:
ad:e5:90:ed:5f:2a:4d:0b:c3:97:0d:bb:c9:a0:99:87:19:36:
75:08:bc:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFfm5C2wvTfvUqPTwRazVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMWI3MjZmY2M5ODIwMGNmMzkwMzRkZjk1OGU4ZmU4YjNj
NzljMzcwHhcNMjUwODIzMDQwMDQzWhcNMjUwODI0MDQwMDQzWjAzMTEwLwYDVQQD
Eyg0MWUzZDM3ZDIxMGI1ZmExMDNiNDY4YWNiMWU3N2RkOGFiNDMzODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOv8sUC5gcgKb2WG59MIzuYkWSw+
vkkvqBcU3/f1n+haEuHC1psMxaILCb/KuHdjTcfDHH5COGqeazVkpA1uwmlkfCT6
QgRufCppPx0gzczegpjCSS6y5z62MQL4/YHYUUzPzZa97xrpA334eY0OKqVqJZTX
CUHW9PG7IMYD3FV+j7Xp7nC0rqzmTWwlY8cG15wN53gcS6Oa4nooZrMRN1oRArti
hR0Vr4WBP03wA1YpeqrZBp4wsd+9BCSUo4q/FP8SF/WQ0QsUzzZM6LtTfveMqlL5
b9hMTMgpjxldM2xl8gcj92IHiZDgkvun+LGBxZphcQivVExvHb9mHh1NUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHj030hC1+hA7RorLHnfdirQzh1MB8GA1UdIwQY
MBaAFIMbcm/MmCAM85A035WOj+izx5w3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNTE0M2YtYzNjOS00MzU3LTg0N2Ut
M2MzNDM2MzY4NGU2LzEvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wNTE0M2YtYzNjOS00MzU3LTg0N2UtM2MzNDM2MzY4NGU2
LzEvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG54Qkcnw
Pz/umvnRSZjrgOCIxsd7RPkaKLnGqL2VMw1LhR+M1dlVsjoHLxpEvbsm6USvqn2Q
aj/0PaevtX8GjIWFUqRYDYSWM3jl5OyCGI8ewxtWFqAkJbUyQKjR+nl1lYsQ4Dyt
F5c9jNS2+8F3AsnKDYq5OVS4cBP/ireuQtF7qAaUlU1soSvM+ljli6icBZ3GF9U+
ES0jSVTaNVQyVP9GanCBNoz4L8zGjVLAs43EaECI6kbcz1dKNGAwuhEBtYepwPI1
ENzbYGPdw8HHF6Fd7e+WaMGThWMZWgAKiF3KLdu4ldRkLL6vreWQ7V8qTQvDlw27
yaCZhxk2dQi8+Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:39 2025 by rpki-client