Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: lFpufkPJ/1TXisURWDX1HCDLJA6YXwYKfdr6Hqow3cY=
Subject key identifier: DC:A6:C9:1C:7C:34:BB:79:4A:CD:51:37:E8:CC:8E:3C:63:05:21:15
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 0198D7A9129B8A208AA32257162142CABA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 132C
Signing time: Sat 23 Aug 2025 16:00:38 +0000
Manifest this update: Sat 23 Aug 2025 16:00:38 +0000
Manifest next update: Sun 24 Aug 2025 16:00:38 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: X84IIF/5YhmKoIqBZb3Jp9NsI0kS1+N4J/whJbyZMnI=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:12:9b:8a:20:8a:a3:22:57:16:21:42:ca:ba:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Aug 23 16:00:38 2025 GMT
Not After : Aug 24 16:00:38 2025 GMT
Subject: CN=dca6c91c7c34bb794acd5137e8cc8e3c63052115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:9a:cb:41:a6:15:3e:0a:22:8a:98:66:f9:
cc:a0:2f:12:28:b6:5a:4b:d2:ef:7e:09:93:b1:9f:
9b:41:91:9c:c6:ba:65:d4:df:a5:14:55:65:99:d9:
fe:67:53:08:9f:f8:1a:63:c5:80:40:22:c2:dd:8a:
8a:7b:ac:45:2e:78:98:e7:77:67:bb:fc:bc:d1:d6:
3b:3b:85:6e:45:a5:0b:b9:75:8f:55:83:ae:ec:87:
85:cf:18:07:f3:54:5a:53:0e:32:30:29:cf:25:0f:
43:26:91:6e:76:61:e1:79:33:41:6f:e9:de:0f:73:
80:f5:79:6b:90:05:47:6a:8f:e6:1d:ca:f4:65:25:
83:ef:ca:b3:9c:6e:a5:a9:06:dd:39:bf:cc:a4:a0:
67:f2:71:2f:98:fa:b0:ed:02:34:86:43:bf:61:6f:
a5:6d:8c:5e:05:37:f0:9d:92:f8:d1:53:95:93:d6:
cd:73:1f:83:f5:6e:ec:1e:eb:e6:be:43:17:c1:35:
b5:2c:0d:f3:fe:7a:56:15:5e:c8:34:8f:39:61:84:
0e:f7:45:1f:35:6a:eb:c6:1b:5e:c4:c6:13:f3:ea:
14:07:70:14:60:2f:6c:a4:57:70:c9:99:ce:50:e4:
2b:cf:b8:30:20:07:e1:11:7c:cb:13:eb:88:c9:33:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A6:C9:1C:7C:34:BB:79:4A:CD:51:37:E8:CC:8E:3C:63:05:21:15
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fa:d9:8a:a9:e6:13:b7:4d:de:64:49:d4:42:50:10:e4:98:
63:18:2b:c8:c5:17:2a:98:7b:db:2b:40:72:0d:3f:2a:ba:cb:
10:df:63:e8:1c:58:6c:42:97:5a:e0:83:a4:96:d7:b1:98:1b:
da:3b:2f:3c:e2:c9:ff:e4:11:88:11:fe:19:ef:95:b8:16:02:
ab:91:02:b8:54:48:2e:a4:ba:82:00:3a:34:11:69:bc:8d:67:
2d:07:77:cb:39:32:35:a2:f0:67:36:35:19:5c:2c:8e:fe:91:
92:07:ae:fe:23:e2:60:a2:6e:b0:9e:da:7a:ec:66:1b:e3:9c:
91:80:ed:d1:c9:f2:82:47:e3:ca:0d:6c:5e:dd:3a:d3:f0:ea:
79:fb:7a:be:e9:3b:93:e1:1d:20:b3:59:5e:7c:1f:35:70:da:
b7:81:f0:db:14:8d:b0:07:46:45:c7:42:4f:2d:fe:a1:55:de:
19:24:fc:3a:b1:d6:5c:b1:1f:43:50:fa:0d:3a:f2:0e:77:fe:
90:d4:26:cc:62:5b:e2:c7:09:29:95:81:53:49:26:d2:7f:7c:
4e:42:56:9c:c7:7d:3d:65:11:83:ba:88:c2:dd:1a:3e:c2:5d:
a1:23:cc:c7:f5:e1:b5:ba:9c:64:23:41:a8:4d:2f:93:0f:9d:
ce:db:11:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqRKbiiCKoyJXFiFCyroeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjgwMGMzOTEyNmRiM2NhNGUwZDU2OTEwZjBhZDM3OTI1
N2U0YTAwHhcNMjUwODIzMTYwMDM4WhcNMjUwODI0MTYwMDM4WjAzMTEwLwYDVQQD
EyhkY2E2YzkxYzdjMzRiYjc5NGFjZDUxMzdlOGNjOGUzYzYzMDUyMTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz2ay0GmFT4KIoqYZvnMoC8SKLZa
S9LvfgmTsZ+bQZGcxrpl1N+lFFVlmdn+Z1MIn/gaY8WAQCLC3YqKe6xFLniY53dn
u/y80dY7O4VuRaULuXWPVYOu7IeFzxgH81RaUw4yMCnPJQ9DJpFudmHheTNBb+ne
D3OA9XlrkAVHao/mHcr0ZSWD78qznG6lqQbdOb/MpKBn8nEvmPqw7QI0hkO/YW+l
bYxeBTfwnZL40VOVk9bNcx+D9W7sHuvmvkMXwTW1LA3z/npWFV7INI85YYQO90Uf
NWrrxhtexMYT8+oUB3AUYC9spFdwyZnOUOQrz7gwIAfhEXzLE+uIyTOkrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNymyRx8NLt5Ss1RN+jMjjxjBSEVMB8GA1UdIwQY
MBaAFBm4AMORJts8pODVaRDwrTeSV+SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEt
ZjE4YWQ5ZjRjYzM0LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEtZjE4YWQ5ZjRjYzM0
LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPrZiqnm
E7dN3mRJ1EJQEOSYYxgryMUXKph72ytAcg0/KrrLEN9j6BxYbEKXWuCDpJbXsZgb
2jsvPOLJ/+QRiBH+Ge+VuBYCq5ECuFRILqS6ggA6NBFpvI1nLQd3yzkyNaLwZzY1
GVwsjv6Rkgeu/iPiYKJusJ7aeuxmG+OckYDt0cnygkfjyg1sXt060/Dqeft6vuk7
k+EdILNZXnwfNXDat4Hw2xSNsAdGRcdCTy3+oVXeGST8OrHWXLEfQ1D6DTryDnf+
kNQmzGJb4scJKZWBU0km0n98TkJWnMd9PWURg7qIwt0aPsJdoSPMx/XhtbqcZCNB
qE0vkw+dztsRJA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:29 2025 by rpki-client