Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json)
Hash identifier: ZS6wxuboHCKWc0gLCKyLFdsr147uFlYBcweIJWaOZwM=
Subject key identifier: 2E:34:EE:AF:C1:C4:7F:32:D2:28:05:98:9D:57:C7:A7:58:CE:33:FD
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 0198D660C1FF05CEB6B9212025BDD46563AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
Manifest number: 0E91
Signing time: Sat 23 Aug 2025 10:02:02 +0000
Manifest this update: Sat 23 Aug 2025 10:02:02 +0000
Manifest next update: Sun 24 Aug 2025 10:02:02 +0000
Files and hashes: 1: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: 0yNaJC2IUVW/cKba14hyv+OAChvHB80aXXzF7ogl6gM=)
2: tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa (hash: he0mpoKaeU1kDKUR39rmBxQcGyL1D1fjhdkpr9BtuYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c1:ff:05:ce:b6:b9:21:20:25:bd:d4:65:63:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Aug 23 10:02:02 2025 GMT
Not After : Aug 24 10:02:02 2025 GMT
Subject: CN=2e34eeafc1c47f32d22805989d57c7a758ce33fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:b3:69:cb:9f:6a:19:01:a6:e4:8e:d0:5a:
2e:05:0d:92:2c:ae:17:3a:1c:50:e2:f7:64:f0:ff:
20:a7:88:76:8d:47:36:2c:55:1f:9d:58:6e:35:4b:
17:16:66:02:69:0b:24:61:09:ef:48:19:ee:b3:87:
f7:8a:db:00:30:b1:23:7b:cb:46:7c:4e:3c:46:bb:
15:f9:bf:75:f8:45:a7:7f:18:eb:ff:39:00:bc:30:
66:c7:7b:0e:2e:ec:5f:0c:46:e2:08:85:3a:47:78:
6a:aa:76:35:33:f1:5e:7b:6e:cd:c7:2d:06:1f:cd:
ee:c3:b8:df:2d:ca:21:04:31:54:a8:68:33:10:97:
ee:98:e0:a8:0d:37:4f:66:b5:99:3a:76:71:a5:27:
b3:2f:21:0d:13:7b:9b:fc:77:0b:e6:ad:4a:d5:cb:
d1:3b:2e:a6:1a:59:e2:a4:a6:f6:9f:f3:55:b4:d5:
b2:4a:63:1d:f8:89:7a:e3:1c:09:3f:d1:b8:dd:ad:
c5:cd:f4:28:de:8c:d3:d3:be:ac:7b:7f:88:51:f7:
0f:8b:56:05:92:8d:46:7b:9b:e1:4d:0d:64:96:a1:
bf:cc:c2:e6:ac:41:e8:22:96:9c:07:a8:ef:d2:ec:
51:43:79:de:aa:e5:34:34:d6:80:02:95:f0:bc:fe:
fc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:34:EE:AF:C1:C4:7F:32:D2:28:05:98:9D:57:C7:A7:58:CE:33:FD
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bb:58:c2:3a:5f:10:ca:6a:bc:42:63:75:4d:11:f5:80:f6:
a5:0c:62:90:ce:fc:e7:87:03:97:65:3e:ca:7e:51:9e:2c:28:
28:d5:a2:3d:fa:c9:88:a1:24:20:d0:e0:e2:94:3b:e9:28:f9:
bc:9b:17:2a:fc:66:aa:0c:d4:7c:d4:56:9d:56:be:2a:73:3c:
80:89:3a:eb:81:ad:fe:c1:bc:c8:c8:27:ef:5c:fe:8f:28:5b:
84:b7:a2:f1:c1:f0:d8:83:75:f4:c5:16:21:9b:0d:ae:ff:8b:
93:de:26:95:b9:67:ff:04:cc:93:84:6e:7b:a8:79:27:a6:00:
7a:99:84:bb:dc:70:49:68:2d:c0:f0:0d:4b:42:f2:94:65:9d:
35:c7:a5:16:f9:e1:c2:d9:46:af:2c:06:c1:79:24:76:63:dd:
53:1c:29:51:35:3f:16:5d:81:63:c9:ac:de:72:78:52:be:4a:
5e:c6:77:ca:0a:ff:3e:75:69:35:d7:2b:09:29:11:2c:dc:16:
d6:23:7e:8b:42:ea:97:50:d5:54:0e:35:cc:38:9d:7a:6f:00:
41:a9:c3:f8:e3:6e:f7:f0:ee:92:3e:2e:7a:c2:1a:ef:50:c6:
5e:3d:38:68:da:97:35:2f:87:a4:29:ba:15:0b:7e:4a:cc:74:
72:fd:07:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYMH/Bc62uSEgJb3UZWOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMTUwNGJhZjgyZWY4ZWIwYWU1MDhhZjQwYjYzOGUzNjYw
YTU0ODgwHhcNMjUwODIzMTAwMjAyWhcNMjUwODI0MTAwMjAyWjAzMTEwLwYDVQQD
EygyZTM0ZWVhZmMxYzQ3ZjMyZDIyODA1OTg5ZDU3YzdhNzU4Y2UzM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphyzacufahkBpuSO0FouBQ2SLK4X
OhxQ4vdk8P8gp4h2jUc2LFUfnVhuNUsXFmYCaQskYQnvSBnus4f3itsAMLEje8tG
fE48RrsV+b91+EWnfxjr/zkAvDBmx3sOLuxfDEbiCIU6R3hqqnY1M/Fee27Nxy0G
H83uw7jfLcohBDFUqGgzEJfumOCoDTdPZrWZOnZxpSezLyENE3ub/HcL5q1K1cvR
Oy6mGlnipKb2n/NVtNWySmMd+Il64xwJP9G43a3FzfQo3ozT076se3+IUfcPi1YF
ko1Ge5vhTQ1klqG/zMLmrEHoIpacB6jv0uxRQ3nequU0NNaAApXwvP786wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC407q/BxH8y0igFmJ1Xx6dYzjP9MB8GA1UdIwQY
MBaAFBsVBLr4LvjrCuUIr0C2OONmClSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yYjdmNzAtZmFkMS00MDNjLWIwOGUt
MmMzZWE0Yjg2ZTIwLzEvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8yYjdmNzAtZmFkMS00MDNjLWIwOGUtMmMzZWE0Yjg2ZTIw
LzEvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLtYwjpf
EMpqvEJjdU0R9YD2pQxikM7854cDl2U+yn5RniwoKNWiPfrJiKEkINDg4pQ76Sj5
vJsXKvxmqgzUfNRWnVa+KnM8gIk664Gt/sG8yMgn71z+jyhbhLei8cHw2IN19MUW
IZsNrv+Lk94mlbln/wTMk4Rue6h5J6YAepmEu9xwSWgtwPANS0LylGWdNcelFvnh
wtlGrywGwXkkdmPdUxwpUTU/Fl2BY8ms3nJ4Ur5KXsZ3ygr/PnVpNdcrCSkRLNwW
1iN+i0Lql1DVVA41zDidem8AQanD+ONu9/Dukj4uesIa71DGXj04aNqXNS+HpCm6
FQt+Ssx0cv0HpA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:26:42 2025 by rpki-client