Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: 7cEYUB6g5HTGVSZcjBOBiko8AaUC/yLXNduj+iuh5OQ=
Subject key identifier: 7D:8B:28:82:2E:19:3E:18:C4:C2:C2:66:F0:2C:9D:4B:54:33:3C:AB
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 0198D515F9E83D3184379B833499BB0CB568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0B6D
Signing time: Sat 23 Aug 2025 04:00:43 +0000
Manifest this update: Sat 23 Aug 2025 04:00:43 +0000
Manifest next update: Sun 24 Aug 2025 04:00:43 +0000
Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: OaOu9mpGmYgPn3HLhiW2+YZStUNNmzJ8HjJO6bRHpGI=)
3: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f9:e8:3d:31:84:37:9b:83:34:99:bb:0c:b5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Aug 23 04:00:43 2025 GMT
Not After : Aug 24 04:00:43 2025 GMT
Subject: CN=7d8b28822e193e18c4c2c266f02c9d4b54333cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:96:f2:33:3e:91:aa:33:a0:2b:1a:90:51:
f2:c4:52:f9:bb:11:48:d2:bb:d3:30:f1:cf:14:f7:
c1:1b:83:34:1e:1d:78:a4:fc:57:c8:91:7d:53:50:
c2:f3:f3:ae:80:73:b0:18:3f:e4:7f:d3:58:e4:d7:
03:85:01:e6:22:78:13:fb:a3:68:91:46:5d:9a:57:
73:0a:bf:f4:d9:0c:05:7b:19:c0:38:d2:ef:86:2e:
f2:cb:dd:4f:35:ff:bc:02:e3:e6:66:25:dc:13:24:
fa:52:01:b7:fc:98:bf:3e:e0:1a:3e:64:4f:16:c0:
75:ae:1f:fb:fe:d1:bf:0a:1c:f5:95:65:5f:51:12:
9d:71:01:37:f9:a4:1a:72:6e:da:63:17:7f:d2:90:
76:ef:dc:6f:2f:3d:90:77:42:f5:8f:af:df:9a:af:
11:db:1f:37:31:c4:22:f5:9a:77:0b:9a:e9:bb:c9:
1f:74:95:10:a2:1f:0e:03:d5:78:94:c7:b6:74:e5:
17:02:92:9f:28:05:93:94:95:8a:62:73:c1:73:74:
6e:d3:6f:46:70:1a:a9:88:1d:e8:61:ab:a7:22:73:
3a:d2:8d:b0:ec:f1:cc:c8:ee:0b:f8:bf:c1:be:a0:
01:06:03:44:c0:2a:19:30:06:1a:de:d3:3f:51:5c:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8B:28:82:2E:19:3E:18:C4:C2:C2:66:F0:2C:9D:4B:54:33:3C:AB
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a5:7c:0a:4a:cb:a4:86:04:6c:42:fa:74:cf:e3:e0:74:35:
c6:c0:9e:e0:3f:07:f5:63:58:c3:ef:12:71:f9:be:10:1a:fb:
84:be:29:c9:03:fa:be:3f:d3:bb:3e:3d:a1:41:a1:5f:96:f1:
f1:4c:8a:41:e5:63:e4:90:4d:6f:67:06:72:01:75:ae:86:1e:
6c:59:26:25:38:84:42:ee:42:3e:f1:e5:1c:9c:62:13:70:87:
95:2b:41:17:59:ff:8a:44:1c:c3:6a:ef:12:ec:f5:57:f4:15:
28:39:af:60:c0:84:a1:24:f3:91:ed:9e:7c:1b:9c:fc:5d:d6:
33:67:ce:23:06:cb:64:b1:11:8c:9b:85:fb:1f:05:52:a0:5c:
ba:a8:2c:35:ae:a7:76:1d:ce:13:18:04:68:69:b6:37:ba:01:
bb:67:fe:94:05:2a:d9:0e:01:f6:68:f5:d2:24:24:8c:17:1f:
b6:7c:28:f4:4c:80:77:bd:39:b7:fa:c3:bf:ac:de:3c:09:62:
97:70:6b:1d:90:90:90:56:22:6c:92:82:44:ca:82:15:a1:c2:
c5:2a:75:75:ab:6e:7e:87:31:c6:ae:64:82:56:20:54:f4:77:
5f:82:e4:74:df:21:b6:fd:4e:2e:d9:9f:d3:0a:fc:08:e8:89:
9d:6d:e9:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFfnoPTGEN5uDNJm7DLVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyOGJiYWQ2ZjQ5MTY4NDJiYmUzMjAyODRmYWZlMTBjYWY1
OWVkZjAwHhcNMjUwODIzMDQwMDQzWhcNMjUwODI0MDQwMDQzWjAzMTEwLwYDVQQD
Eyg3ZDhiMjg4MjJlMTkzZTE4YzRjMmMyNjZmMDJjOWQ0YjU0MzMzY2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWKW8jM+kaozoCsakFHyxFL5uxFI
0rvTMPHPFPfBG4M0Hh14pPxXyJF9U1DC8/OugHOwGD/kf9NY5NcDhQHmIngT+6No
kUZdmldzCr/02QwFexnAONLvhi7yy91PNf+8AuPmZiXcEyT6UgG3/Ji/PuAaPmRP
FsB1rh/7/tG/Chz1lWVfURKdcQE3+aQacm7aYxd/0pB279xvLz2Qd0L1j6/fmq8R
2x83McQi9Zp3C5rpu8kfdJUQoh8OA9V4lMe2dOUXApKfKAWTlJWKYnPBc3Ru029G
cBqpiB3oYaunInM60o2w7PHMyO4L+L/BvqABBgNEwCoZMAYa3tM/UVwz4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2LKIIuGT4YxMLCZvAsnUtUMzyrMB8GA1UdIwQY
MBaAFIKLutb0kWhCu+MgKE+v4QyvWe3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgt
MTg5NjU1NWEyZjBlLzEvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgtMTg5NjU1NWEyZjBl
LzEvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaV8CkrL
pIYEbEL6dM/j4HQ1xsCe4D8H9WNYw+8Scfm+EBr7hL4pyQP6vj/Tuz49oUGhX5bx
8UyKQeVj5JBNb2cGcgF1roYebFkmJTiEQu5CPvHlHJxiE3CHlStBF1n/ikQcw2rv
Euz1V/QVKDmvYMCEoSTzke2efBuc/F3WM2fOIwbLZLERjJuF+x8FUqBcuqgsNa6n
dh3OExgEaGm2N7oBu2f+lAUq2Q4B9mj10iQkjBcftnwo9EyAd705t/rDv6zePAli
l3BrHZCQkFYibJKCRMqCFaHCxSp1datufocxxq5kglYgVPR3X4LkdN8htv1OLtmf
0wr8COiJnW3pKA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:52 2025 by rpki-client