Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
File: ghhRSqrfoDhGuh9tOfH55DfGPEE.mft (raw, json)
Hash identifier: Oo/6jLgXPKTejxqk16i6TFbe27llKCYZHCoYYP6itPE=
Subject key identifier: D4:AA:E7:9E:77:AF:FF:C7:2F:0C:BE:DB:1D:72:E9:88:11:AC:10:54
Authority key identifier: 82:18:51:4A:AA:DF:A0:38:46:BA:1F:6D:39:F1:F9:E4:37:C6:3C:41
Certificate issuer: /CN=8218514aaadfa03846ba1f6d39f1f9e437c63c41
Certificate serial: 0198D472CE1CB8AD87E1B983F62104AD47B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
Manifest number: FE
Signing time: Sat 23 Aug 2025 01:02:30 +0000
Manifest this update: Sat 23 Aug 2025 01:02:30 +0000
Manifest next update: Sun 24 Aug 2025 01:02:30 +0000
Files and hashes: 1: ghhRSqrfoDhGuh9tOfH55DfGPEE.crl (hash: NjysQpOzqsTsc9Q/Cd0UAbSlLpKDiHGdlHao9GZowi0=)
2: i_8OV4hfwWGXwF9V2zc6PphYPKE.roa (hash: C7CIFHPDYn+G4rh2qeYAbZYKxEJSwAPGvW6pQ9glEwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ce:1c:b8:ad:87:e1:b9:83:f6:21:04:ad:47:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8218514aaadfa03846ba1f6d39f1f9e437c63c41
Validity
Not Before: Aug 23 01:02:30 2025 GMT
Not After : Aug 24 01:02:30 2025 GMT
Subject: CN=d4aae79e77afffc72f0cbedb1d72e98811ac1054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:2e:a9:82:4f:95:c6:78:c4:f7:94:81:e3:
d3:eb:a8:74:43:c3:4f:65:29:0a:4a:29:73:0b:1e:
06:cb:8c:0a:63:83:ee:82:1e:7b:4b:89:9e:30:b4:
94:22:40:93:18:e9:01:ce:34:c3:3d:0f:bf:86:20:
54:3f:e3:f8:3d:ec:7c:88:4e:ed:3c:a3:c1:79:c9:
de:ed:8d:a3:a3:32:72:e7:39:37:16:df:01:aa:e3:
43:92:0d:e2:d6:56:b7:6f:41:9b:dd:0a:8b:d5:7f:
96:6d:10:70:c3:ee:9a:95:0c:56:a0:c0:11:dd:21:
99:5c:af:31:cd:5e:43:63:9a:34:19:43:a1:cd:eb:
fc:1f:df:a7:be:12:a1:92:70:84:42:52:7f:fd:d4:
18:59:fc:2b:47:38:d4:dd:fb:fc:e9:ce:f5:a0:95:
30:13:8a:73:ec:00:c6:5a:73:d7:72:f4:01:71:c6:
59:82:92:5e:29:5b:d1:7a:74:c4:0e:1a:d8:ec:c2:
db:68:25:86:b7:7a:6d:fe:12:d7:4b:2a:a1:64:f0:
9c:19:8a:e6:90:f2:3c:de:b3:22:ab:12:2c:d4:1d:
f3:86:bc:f9:6e:6e:c3:a9:75:b4:0a:bf:17:be:0b:
55:71:ab:04:3d:c1:fe:d0:0b:a9:77:6c:dc:83:b2:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AA:E7:9E:77:AF:FF:C7:2F:0C:BE:DB:1D:72:E9:88:11:AC:10:54
X509v3 Authority Key Identifier:
keyid:82:18:51:4A:AA:DF:A0:38:46:BA:1F:6D:39:F1:F9:E4:37:C6:3C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:40:3f:cd:5e:09:43:99:d2:d0:10:47:f3:37:3c:e5:f6:2b:
44:cd:d0:cb:dd:02:34:34:ef:79:17:72:17:86:49:e0:1f:c8:
ee:99:07:f0:93:c3:06:a0:4a:f5:b2:f0:bc:2b:8a:e7:db:9a:
2d:a8:5d:fc:94:ee:be:d5:cd:3d:41:8d:c5:cf:06:f0:68:ce:
35:ca:d3:53:4d:aa:c0:fb:03:08:89:47:85:77:3d:cc:12:a7:
ef:3f:4f:57:68:3e:26:c5:41:9c:2b:84:b0:70:4d:82:77:d6:
01:e7:45:c9:ae:1f:cf:c2:55:48:2a:97:de:44:92:4c:d8:80:
33:a7:ce:b9:95:cd:17:93:08:dd:91:d3:ad:8e:a9:7d:41:cb:
ff:de:fa:5a:29:eb:88:d5:a0:7a:22:41:97:91:05:8c:0e:4b:
ff:fc:23:1a:5f:9e:99:77:46:4e:72:f1:01:04:5c:91:bf:8d:
4c:0e:5f:f2:d6:af:c5:d7:0e:38:c4:67:e2:f6:c1:c3:4f:af:
2a:5c:40:03:9b:22:07:b6:ec:73:32:a8:dc:08:60:42:75:e4:
1c:d4:6b:e0:eb:7f:9a:db:5d:76:fa:9f:00:b5:ec:d2:5b:5b:
77:5c:e9:36:c8:f1:83:cb:0f:80:d4:77:81:dc:6b:9b:99:c2:
a6:9a:02:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcs4cuK2H4bmD9iEErUe5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMTg1MTRhYWFkZmEwMzg0NmJhMWY2ZDM5ZjFmOWU0Mzdj
NjNjNDEwHhcNMjUwODIzMDEwMjMwWhcNMjUwODI0MDEwMjMwWjAzMTEwLwYDVQQD
EyhkNGFhZTc5ZTc3YWZmZmM3MmYwY2JlZGIxZDcyZTk4ODExYWMxMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3ouqYJPlcZ4xPeUgePT66h0Q8NP
ZSkKSilzCx4Gy4wKY4Pugh57S4meMLSUIkCTGOkBzjTDPQ+/hiBUP+P4Pex8iE7t
PKPBecne7Y2jozJy5zk3Ft8BquNDkg3i1la3b0Gb3QqL1X+WbRBww+6alQxWoMAR
3SGZXK8xzV5DY5o0GUOhzev8H9+nvhKhknCEQlJ//dQYWfwrRzjU3fv86c71oJUw
E4pz7ADGWnPXcvQBccZZgpJeKVvRenTEDhrY7MLbaCWGt3pt/hLXSyqhZPCcGYrm
kPI83rMiqxIs1B3zhrz5bm7DqXW0Cr8XvgtVcasEPcH+0Aupd2zcg7KJNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSq5553r//HLwy+2x1y6YgRrBBUMB8GA1UdIwQY
MBaAFIIYUUqq36A4RrofbTnx+eQ3xjxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2hoUlNxcmZvRGhHdWg5dE9mSDU1RGZHUEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8zNzQyM2MtZWJkZC00ZWE4LTgxNGMt
MzMzODk2YTAwZTZmLzEvZ2hoUlNxcmZvRGhHdWg5dE9mSDU1RGZHUEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8zNzQyM2MtZWJkZC00ZWE4LTgxNGMtMzMzODk2YTAwZTZm
LzEvZ2hoUlNxcmZvRGhHdWg5dE9mSDU1RGZHUEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkA/zV4J
Q5nS0BBH8zc85fYrRM3Qy90CNDTveRdyF4ZJ4B/I7pkH8JPDBqBK9bLwvCuK59ua
Lahd/JTuvtXNPUGNxc8G8GjONcrTU02qwPsDCIlHhXc9zBKn7z9PV2g+JsVBnCuE
sHBNgnfWAedFya4fz8JVSCqX3kSSTNiAM6fOuZXNF5MI3ZHTrY6pfUHL/976Winr
iNWgeiJBl5EFjA5L//wjGl+emXdGTnLxAQRckb+NTA5f8tavxdcOOMRn4vbBw0+v
KlxAA5siB7bsczKo3AhgQnXkHNRr4Ot/mttddvqfALXs0ltbd1zpNsjxg8sPgNR3
gdxrm5nCppoCMA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:25 2025 by rpki-client