Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
File: GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json)
Hash identifier: X1ceor5h4GHTQRyfMR18qwYE+JbJ1DzhXGSnhIfFnII=
Subject key identifier: C3:E3:4A:C2:96:3A:7F:0A:C7:A8:3D:F1:A4:32:4B:26:5E:A5:7A:E1
Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
Certificate issuer: /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Certificate serial: 0197B6A1F5116D0E970C81B33ECD6095F052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
Manifest number: 12EA
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: BLFC-FjMHL4wmy7DW2Qg0ynvAks.roa (hash: mla/ifgwtBL/TTlFYXL1kHRIJy6aKWlH3+ijLwE0y4c=)
2: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: KmbfAoX01XJhIlOCrCT4v9O48o+uBLEXCTSNk2OqxXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f5:11:6d:0e:97:0c:81:b3:3e:cd:60:95:f0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=c3e34ac2963a7f0ac7a83df1a4324b265ea57ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:a8:a2:c1:47:7f:df:db:ee:e4:1d:84:fe:
b5:bf:01:89:36:03:cf:0a:48:d4:d0:0e:0e:ab:da:
fd:27:ee:27:fe:65:49:4e:e6:7a:8e:65:e7:c5:91:
26:26:e5:ff:ed:37:ad:9d:42:80:db:d5:2f:8d:58:
4d:3f:df:2f:30:d4:46:33:52:18:1d:22:8b:92:df:
9c:06:fd:73:ff:b5:fd:e8:c1:d8:79:49:83:a9:0f:
05:b8:5c:16:58:98:fe:36:97:cc:ce:21:e1:f1:22:
b8:96:39:ac:9c:6c:e0:65:3d:64:70:77:c7:e2:02:
9a:96:5c:c9:5e:4a:b6:6c:b8:d7:3f:11:58:d6:97:
50:d5:b8:3e:01:48:01:d0:29:cd:c0:03:59:cc:41:
41:bb:19:03:ca:4c:76:fd:e3:1a:8a:56:47:96:3e:
77:fb:b7:26:b1:ff:34:50:1e:e4:02:cd:48:56:f6:
d8:ce:f8:dd:04:7b:3e:f5:54:2b:87:38:7e:27:b0:
7c:c3:f5:e5:83:f9:6f:82:ad:51:2e:ef:cd:bb:df:
af:b3:c9:d8:eb:23:b7:76:13:f8:c8:44:9d:d7:41:
b5:bf:1e:b5:00:4d:9b:3c:21:db:61:23:05:75:24:
72:bb:db:e1:99:27:b4:24:b1:31:4e:e3:af:f4:4a:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E3:4A:C2:96:3A:7F:0A:C7:A8:3D:F1:A4:32:4B:26:5E:A5:7A:E1
X509v3 Authority Key Identifier:
keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9f:6d:62:8e:87:a3:57:f5:60:1f:d6:af:a8:cb:e5:44:65:
bd:4f:6d:ce:1c:31:00:15:07:74:be:90:a1:3b:a9:7d:88:6e:
3e:e2:63:7e:aa:ec:c7:ec:6d:73:49:17:b9:3c:16:ee:69:35:
ce:3d:2a:41:2b:d6:54:24:ca:55:f9:05:c9:ab:02:67:6a:ea:
9d:9c:7f:bb:bc:7a:cc:d3:d1:a3:28:44:df:45:58:d8:d7:b6:
cb:fa:f3:b8:52:98:93:4a:0d:c8:31:73:0b:81:66:e1:64:0e:
fb:07:b0:2b:37:e2:3b:cb:14:72:b8:a1:68:3d:42:14:e4:9a:
e6:f7:fd:dd:bf:63:4a:b7:50:75:3f:ed:b6:96:ba:bc:4c:17:
3e:3e:3d:39:b2:7f:ee:5c:61:19:5c:7f:ba:15:9d:b7:78:67:
3c:c0:31:93:bf:63:29:bc:06:0e:c0:37:bc:7a:51:f3:17:25:
40:9f:b0:99:3b:2e:a2:dc:73:86:39:3a:0b:06:de:b1:be:67:
6e:81:53:ff:4e:19:25:0e:c0:f4:0a:2a:33:7a:96:70:d4:b3:
2c:d5:ff:02:44:1d:1c:13:fb:d7:81:d2:7d:9d:3e:6c:7e:68:
af:5b:54:c6:1b:05:db:14:7a:b9:f2:45:36:fa:df:c7:e1:5f:
ce:23:c5:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ofURbQ6XDIGzPs1glfBSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzAyOTYzNGVhOGVkNTQ2ODFiYTg0ZDE0OTkwYjAwYjg2
NGRkYjgwHhcNMjUwNjI4MTMwMjM2WhcNMjUwNjI5MTMwMjM2WjAzMTEwLwYDVQQD
EyhjM2UzNGFjMjk2M2E3ZjBhYzdhODNkZjFhNDMyNGIyNjVlYTU3YWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL+oosFHf9/b7uQdhP61vwGJNgPP
CkjU0A4Oq9r9J+4n/mVJTuZ6jmXnxZEmJuX/7TetnUKA29UvjVhNP98vMNRGM1IY
HSKLkt+cBv1z/7X96MHYeUmDqQ8FuFwWWJj+NpfMziHh8SK4ljmsnGzgZT1kcHfH
4gKallzJXkq2bLjXPxFY1pdQ1bg+AUgB0CnNwANZzEFBuxkDykx2/eMailZHlj53
+7cmsf80UB7kAs1IVvbYzvjdBHs+9VQrhzh+J7B8w/Xlg/lvgq1RLu/Nu9+vs8nY
6yO3dhP4yESd10G1vx61AE2bPCHbYSMFdSRyu9vhmSe0JLExTuOv9EqG3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPjSsKWOn8Kx6g98aQySyZepXrhMB8GA1UdIwQY
MBaAFBswKWNOqO1UaBuoTRSZCwC4ZN24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3pBcFkwNm83VlJvRzZoTkZKa0xBTGhrM2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9hM2JmZTktZGM1Ni00YzFmLTk3YTct
NmIzMWE3MzYwZjBmLzEvR3pBcFkwNm83VlJvRzZoTkZKa0xBTGhrM2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9hM2JmZTktZGM1Ni00YzFmLTk3YTctNmIzMWE3MzYwZjBm
LzEvR3pBcFkwNm83VlJvRzZoTkZKa0xBTGhrM2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhp9tYo6H
o1f1YB/Wr6jL5URlvU9tzhwxABUHdL6QoTupfYhuPuJjfqrsx+xtc0kXuTwW7mk1
zj0qQSvWVCTKVfkFyasCZ2rqnZx/u7x6zNPRoyhE30VY2Ne2y/rzuFKYk0oNyDFz
C4Fm4WQO+wewKzfiO8sUcrihaD1CFOSa5vf93b9jSrdQdT/ttpa6vEwXPj49ObJ/
7lxhGVx/uhWdt3hnPMAxk79jKbwGDsA3vHpR8xclQJ+wmTsuotxzhjk6Cwbesb5n
boFT/04ZJQ7A9AoqM3qWcNSzLNX/AkQdHBP714HSfZ0+bH5or1tUxhsF2xR6ufJF
Nvrfx+FfziPF7Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:53 2025 by rpki-client