Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: LeLcmvAGDZ+1TIBI702Qx2psWu01vGj7wIy9QpO4IkM=
Subject key identifier: 13:CB:97:12:C5:A7:E0:AC:4C:DF:5B:17:2A:92:BA:AC:AA:E3:E7:CE
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 0198D5BC3E80BFECF3CE996F750C65A041EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:20 +0000
Manifest this update: Sat 23 Aug 2025 07:02:20 +0000
Manifest next update: Sun 24 Aug 2025 07:02:20 +0000
Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: E+l5xU7ONF1YjEjhWzB0220NyJmzqfWhhG++ReaMr6M=)
2: lrVdWYePrfvjN2tTsNMy_Nf4Gn4.roa (hash: twkAP7rnPOwhMAXsaX+PpZC1dZNkXLlK0+tLwfHke2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3e:80:bf:ec:f3:ce:99:6f:75:0c:65:a0:41:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Aug 23 07:02:20 2025 GMT
Not After : Aug 24 07:02:20 2025 GMT
Subject: CN=13cb9712c5a7e0ac4cdf5b172a92baacaae3e7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:03:e1:9d:dc:c1:fa:bb:9b:6b:b4:55:ab:b2:
8f:e8:9f:52:53:89:ed:ab:fa:d1:c0:e9:de:c3:b3:
59:9e:be:48:80:b1:89:cb:51:3f:2b:1c:29:a1:b2:
1b:3f:28:17:23:bd:51:89:0f:8b:5f:46:57:fe:99:
ec:36:bc:1f:a1:4d:79:59:0d:c1:b4:9b:dd:ec:73:
b9:56:e5:fd:42:07:bf:89:b9:ed:3c:e0:44:f6:c8:
d2:7c:44:3e:07:c9:c0:16:11:f8:43:e3:5f:63:9d:
2a:8b:98:f0:af:a6:66:39:1f:54:fa:6d:2c:83:32:
5d:b7:fe:37:39:df:51:53:3a:c5:ed:19:ce:6c:74:
cd:f3:e5:d1:8c:f0:a4:75:2a:73:e7:38:9e:ec:7c:
93:72:80:3c:f7:d0:1b:29:d2:7c:b9:5e:fc:4b:ba:
b7:3e:14:29:51:e4:a6:6e:e5:77:90:bf:36:3b:84:
a2:49:ec:82:7c:3f:15:ee:f5:46:ce:1e:c5:77:49:
0f:c3:7a:8b:31:2c:4d:77:66:16:7a:1c:e7:ce:74:
29:99:3c:00:82:96:e0:d9:a9:30:cf:76:74:da:bd:
ac:2e:b0:78:f9:47:35:eb:75:19:3d:b7:6e:e7:9c:
a1:d9:a7:69:f7:1f:18:ee:75:ba:7d:56:2d:ef:d8:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CB:97:12:C5:A7:E0:AC:4C:DF:5B:17:2A:92:BA:AC:AA:E3:E7:CE
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ea:6a:40:76:08:c4:c8:b0:e4:f3:e4:bb:c7:bc:1b:2a:a2:
77:b7:a3:74:19:e7:b7:90:43:21:1f:77:0f:bc:41:70:97:02:
e8:72:b6:e1:91:73:e2:69:11:80:f7:29:93:97:db:cd:61:91:
22:32:42:a9:91:33:e2:1a:6a:7d:1a:f3:35:2e:7c:28:13:f1:
8c:af:f3:52:ed:c2:29:2b:c6:56:92:5e:54:39:f6:c8:d1:6a:
17:33:58:34:eb:d0:c8:bb:90:6e:3c:69:49:b5:09:e5:9a:c4:
b9:ea:ad:52:ad:3a:5d:a8:02:af:a2:6c:ab:6c:c4:14:ec:27:
36:ec:ac:08:00:f0:64:fa:50:da:1c:cd:55:f6:67:b0:5c:46:
be:b2:ee:04:51:ac:f9:4d:64:37:8a:2d:59:4b:30:3f:56:85:
7b:b6:de:a8:81:b1:13:83:92:78:89:2b:b5:55:ed:8f:ae:cd:
83:16:10:b0:53:4d:c5:91:98:2b:ae:db:0e:b9:7e:01:17:15:
90:36:e8:22:4e:ec:eb:21:af:11:21:5b:44:fa:b7:e7:32:00:
a9:74:53:9b:c5:7a:64:60:46:d8:cd:c8:fb:82:55:7d:c0:00:
e3:ff:00:a1:eb:72:ca:f0:73:14:81:73:32:0c:07:9b:09:0a:
bc:c9:35:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvD6Av+zzzplvdQxloEHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMDQzZjIzOTM2NjIyODI0MTExZTg4NjVhNTAwMDIwNjdk
OTVhNjIwHhcNMjUwODIzMDcwMjIwWhcNMjUwODI0MDcwMjIwWjAzMTEwLwYDVQQD
EygxM2NiOTcxMmM1YTdlMGFjNGNkZjViMTcyYTkyYmFhY2FhZTNlN2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwPhndzB+ruba7RVq7KP6J9SU4nt
q/rRwOnew7NZnr5IgLGJy1E/KxwpobIbPygXI71RiQ+LX0ZX/pnsNrwfoU15WQ3B
tJvd7HO5VuX9Qge/ibntPOBE9sjSfEQ+B8nAFhH4Q+NfY50qi5jwr6ZmOR9U+m0s
gzJdt/43Od9RUzrF7RnObHTN8+XRjPCkdSpz5zie7HyTcoA899AbKdJ8uV78S7q3
PhQpUeSmbuV3kL82O4SiSeyCfD8V7vVGzh7Fd0kPw3qLMSxNd2YWehznznQpmTwA
gpbg2akwz3Z02r2sLrB4+Uc163UZPbdu55yh2adp9x8Y7nW6fVYt79isQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPLlxLFp+CsTN9bFyqSuqyq4+fOMB8GA1UdIwQY
MBaAFIAEPyOTZiKCQRHohlpQACBn2VpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zOWYyOGMtOWViOC00Y2FlLThkOTgt
NjhjZGM2OTJhZDA5LzEvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zOWYyOGMtOWViOC00Y2FlLThkOTgtNjhjZGM2OTJhZDA5
LzEvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOpqQHYI
xMiw5PPku8e8Gyqid7ejdBnnt5BDIR93D7xBcJcC6HK24ZFz4mkRgPcpk5fbzWGR
IjJCqZEz4hpqfRrzNS58KBPxjK/zUu3CKSvGVpJeVDn2yNFqFzNYNOvQyLuQbjxp
SbUJ5ZrEueqtUq06XagCr6Jsq2zEFOwnNuysCADwZPpQ2hzNVfZnsFxGvrLuBFGs
+U1kN4otWUswP1aFe7beqIGxE4OSeIkrtVXtj67NgxYQsFNNxZGYK67bDrl+ARcV
kDboIk7s6yGvESFbRPq35zIAqXRTm8V6ZGBG2M3I+4JVfcAA4/8AoetyyvBzFIFz
MgwHmwkKvMk1aw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:48 2025 by rpki-client