Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
File: GnU2E7QiD2jytUbQkqIwvtbtrLg.mft (raw, json)
Hash identifier: ho5A9JVMHtTV9mhG+rLyeJgfzVLKXWvKvb+zcz9ox9c=
Subject key identifier: 02:83:E9:2C:78:12:FC:E1:B4:E7:F8:F0:BD:3E:13:85:B8:D2:DA:3F
Authority key identifier: 1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
Certificate issuer: /CN=1a753613b4220f68f2b546d092a230bed6edacb8
Certificate serial: 0198D4E018B7E02FDA8067A65BC8EC5E1EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
Manifest number: 0998
Signing time: Sat 23 Aug 2025 03:01:52 +0000
Manifest this update: Sat 23 Aug 2025 03:01:52 +0000
Manifest next update: Sun 24 Aug 2025 03:01:52 +0000
Files and hashes: 1: GnU2E7QiD2jytUbQkqIwvtbtrLg.crl (hash: shkuKkIt9V5KCLOJNL0xtf1+Lea/30RIZatiA1hIv9U=)
2: dZV8dvdnA_9uSLTQkNXVl8a3FaI.roa (hash: Krx07PHv8S1aDWSKbtOJAHlzZWfSCAV78WJWEmqXiPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:18:b7:e0:2f:da:80:67:a6:5b:c8:ec:5e:1e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a753613b4220f68f2b546d092a230bed6edacb8
Validity
Not Before: Aug 23 03:01:52 2025 GMT
Not After : Aug 24 03:01:52 2025 GMT
Subject: CN=0283e92c7812fce1b4e7f8f0bd3e1385b8d2da3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7a:2e:f4:dd:c2:43:38:56:28:70:d1:2d:66:
35:75:4f:e0:26:51:f3:2a:2e:06:85:b6:00:cc:34:
a0:76:cf:9c:c4:88:b3:9a:ee:82:ac:7d:bb:1e:48:
a9:e8:6f:4e:15:f9:7f:10:8e:e7:26:0b:65:83:e6:
ab:45:26:9c:a8:cf:b4:84:47:6a:a7:e2:28:bf:d3:
9e:f0:66:84:ad:9f:1f:17:54:4c:64:7f:1a:dd:40:
85:f4:ca:84:6e:8f:68:40:9b:df:7a:92:b0:dc:a8:
47:57:27:9c:3c:da:e8:35:f0:98:28:94:ea:cb:a4:
be:68:e0:7c:59:07:be:68:8e:db:c0:cc:d3:30:65:
9c:d5:96:03:49:e6:e8:50:00:8b:3a:ea:80:7e:8f:
15:71:58:31:e5:48:8b:e5:02:4a:3c:24:fa:13:7b:
7d:49:cc:00:27:bc:51:b5:6e:a3:f0:3d:36:07:45:
bc:01:ba:85:f4:ed:af:8c:75:66:d9:c0:fe:da:e8:
bc:61:df:ae:d4:6f:2e:f6:c8:88:c5:22:c6:88:b8:
c8:2e:18:cc:a9:7e:bc:4b:6c:fc:43:c9:c8:da:99:
f1:48:56:0b:8f:33:e0:95:78:97:af:29:88:e9:43:
4e:10:63:9f:22:67:46:e9:7b:9a:be:a9:60:16:6b:
6b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:83:E9:2C:78:12:FC:E1:B4:E7:F8:F0:BD:3E:13:85:B8:D2:DA:3F
X509v3 Authority Key Identifier:
keyid:1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a9:76:d0:a0:51:fd:3f:58:10:b1:3c:97:c5:48:51:3a:19:
b4:0e:99:ce:17:3f:c9:5a:4a:c2:a5:28:fc:b5:d5:ba:4a:3f:
4a:d9:6d:de:50:78:2f:e0:f5:ac:00:d1:bd:0c:9a:c5:ae:99:
be:53:3f:92:a2:99:02:37:ac:40:d3:8c:14:e2:45:4f:38:b0:
ab:8b:a5:3a:07:7d:00:c0:74:9f:df:82:80:38:72:c0:57:99:
c2:88:37:2b:df:07:90:88:17:b5:03:9d:e5:99:85:27:39:82:
99:31:ca:fb:d8:a1:fc:67:16:8f:2c:14:95:f7:79:b8:08:bf:
65:9c:b2:1b:9f:33:3a:02:9e:7d:ad:9f:e4:7d:fb:15:cd:62:
f7:be:3b:10:49:50:e9:5d:9e:2c:1c:84:17:2c:6c:e2:41:21:
72:ae:c0:34:f4:e6:74:4c:f2:eb:02:a7:4a:e2:41:0c:07:8a:
d3:2a:f8:24:f4:0f:21:78:7d:69:8a:85:cd:30:20:3e:c1:49:
9e:df:bf:df:40:81:c8:ca:38:cc:d4:c5:86:8c:ef:69:46:91:
3c:db:7c:73:91:a2:b5:8d:db:25:ac:08:c2:61:0e:9c:88:b8:
cd:84:12:e0:c6:52:ae:b2:71:31:d1:8e:f0:5b:c7:95:ab:34:
b5:b9:73:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Bi34C/agGemW8jsXh7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzUzNjEzYjQyMjBmNjhmMmI1NDZkMDkyYTIzMGJlZDZl
ZGFjYjgwHhcNMjUwODIzMDMwMTUyWhcNMjUwODI0MDMwMTUyWjAzMTEwLwYDVQQD
EygwMjgzZTkyYzc4MTJmY2UxYjRlN2Y4ZjBiZDNlMTM4NWI4ZDJkYTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXou9N3CQzhWKHDRLWY1dU/gJlHz
Ki4GhbYAzDSgds+cxIizmu6CrH27Hkip6G9OFfl/EI7nJgtlg+arRSacqM+0hEdq
p+Iov9Oe8GaErZ8fF1RMZH8a3UCF9MqEbo9oQJvfepKw3KhHVyecPNroNfCYKJTq
y6S+aOB8WQe+aI7bwMzTMGWc1ZYDSeboUACLOuqAfo8VcVgx5UiL5QJKPCT6E3t9
ScwAJ7xRtW6j8D02B0W8AbqF9O2vjHVm2cD+2ui8Yd+u1G8u9siIxSLGiLjILhjM
qX68S2z8Q8nI2pnxSFYLjzPglXiXrymI6UNOEGOfImdG6XuavqlgFmtr1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKD6Sx4EvzhtOf48L0+E4W40to/MB8GA1UdIwQY
MBaAFBp1NhO0Ig9o8rVG0JKiML7W7ay4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25VMkU3UWlEMmp5dFViUWtxSXd2dGJ0ckxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83M2MzZTMtODFlNi00ZWI0LWE5NDYt
NjA5ZmE0ZTU0MDY3LzEvR25VMkU3UWlEMmp5dFViUWtxSXd2dGJ0ckxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83M2MzZTMtODFlNi00ZWI0LWE5NDYtNjA5ZmE0ZTU0MDY3
LzEvR25VMkU3UWlEMmp5dFViUWtxSXd2dGJ0ckxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6l20KBR
/T9YELE8l8VIUToZtA6Zzhc/yVpKwqUo/LXVuko/Stlt3lB4L+D1rADRvQyaxa6Z
vlM/kqKZAjesQNOMFOJFTziwq4ulOgd9AMB0n9+CgDhywFeZwog3K98HkIgXtQOd
5ZmFJzmCmTHK+9ih/GcWjywUlfd5uAi/ZZyyG58zOgKefa2f5H37Fc1i9747EElQ
6V2eLByEFyxs4kEhcq7ANPTmdEzy6wKnSuJBDAeK0yr4JPQPIXh9aYqFzTAgPsFJ
nt+/30CByMo4zNTFhozvaUaRPNt8c5GitY3bJawIwmEOnIi4zYQS4MZSrrJxMdGO
8FvHlas0tblzYw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:49 2025 by rpki-client