Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: CsJN/ospiS7EH+QyQ8KBuOOlB5BvafSRaloYdywX3iI=
Subject key identifier: BD:21:8A:8A:B9:C7:2C:20:27:D2:04:E1:BF:CF:BE:C0:31:39:4E:11
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 0198D5F16A66E49114AC992238D3ABDEE658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 0728
Signing time: Sat 23 Aug 2025 08:00:25 +0000
Manifest this update: Sat 23 Aug 2025 08:00:25 +0000
Manifest next update: Sun 24 Aug 2025 08:00:25 +0000
Files and hashes: 1: 8sYphYrrmRM_ErwAJ8gqIzEpDGo.roa (hash: rt/OwZDBbcaVJA7rLlh63ti0IkxjXIhkThQceeCTgkI=)
2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: ARkTIXaDFlaFRjSfsPF61CKtE8wL+O2FcZuBffxTYTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6a:66:e4:91:14:ac:99:22:38:d3:ab:de:e6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Aug 23 08:00:25 2025 GMT
Not After : Aug 24 08:00:25 2025 GMT
Subject: CN=bd218a8ab9c72c2027d204e1bfcfbec031394e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:11:cf:a4:8e:ac:e4:75:a7:df:e8:87:0e:
3f:6a:a0:6c:e6:a1:b2:25:f4:a5:2f:6b:1d:ae:ff:
12:8f:e5:46:38:31:7a:a5:a5:29:7d:03:60:ad:80:
79:b0:d7:c5:18:54:e3:e7:41:d8:ea:69:6c:4f:3f:
f6:dd:0a:1d:a1:fb:22:d2:d7:99:07:e8:b9:5f:e7:
92:91:50:8a:e7:b2:27:70:74:a4:82:1c:80:d9:76:
9b:fc:2a:ce:b3:a4:65:49:45:ad:5c:2b:63:98:ff:
8e:ec:1b:42:5c:12:d1:fe:b8:da:d5:bf:95:41:0d:
8a:c2:45:df:91:18:82:9c:8b:8f:17:04:af:82:36:
e8:77:75:ff:c7:2c:d1:df:4f:6b:f6:18:26:42:e1:
d1:c4:f6:eb:40:fb:9c:a7:92:fc:c3:ef:c1:48:16:
bf:ac:59:97:79:83:a1:d3:41:03:eb:85:97:66:23:
a6:8f:12:bd:e6:2a:5b:9e:79:00:1c:8a:b3:71:f7:
26:63:35:1c:e1:ff:83:96:3a:61:bf:85:b8:49:e4:
5a:ca:32:6c:ae:c8:6f:11:61:7b:da:55:76:19:91:
f4:41:34:0c:7f:79:fa:d3:b3:8d:6b:ef:4b:cf:0b:
64:da:c6:af:56:37:d3:89:2b:96:7a:6e:05:f0:52:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:21:8A:8A:B9:C7:2C:20:27:D2:04:E1:BF:CF:BE:C0:31:39:4E:11
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:01:e6:2c:5e:86:87:9b:e1:1b:f7:93:db:05:12:ad:9e:01:
35:d4:3a:34:c1:c5:0b:b7:80:80:f6:76:04:f9:a2:e4:8b:01:
46:d4:aa:01:6b:b9:3c:97:78:07:eb:9d:80:d5:7b:a5:03:3c:
cf:17:57:46:20:3b:f1:f3:4d:01:68:a9:17:86:48:d0:43:f4:
50:c6:5b:f0:ce:b6:14:a2:58:18:cf:fc:a1:31:88:a0:d8:1e:
dd:4f:14:0b:e8:e8:1c:24:12:81:72:4b:1f:6f:17:c2:b4:76:
96:f8:ec:2e:77:8d:d9:0f:15:76:e9:b3:52:96:e5:a0:e0:9d:
de:8a:aa:cb:9f:b4:32:dc:49:1d:d1:bf:e1:7b:df:45:1a:f1:
2c:10:d6:53:07:73:2a:bf:59:0a:b5:4b:fb:52:3b:36:dd:22:
23:ba:76:db:c8:b9:d1:fb:87:03:01:e4:6e:98:39:ca:6b:ef:
e1:dd:fe:58:5c:90:d7:6c:1f:7c:fc:67:05:08:f5:12:95:fc:
eb:17:c9:84:fd:4c:2c:5a:32:0f:32:a2:41:89:5f:eb:c8:e9:
78:66:e9:ee:af:f8:68:3c:34:8b:40:c9:a5:f5:b9:ff:2a:ec:
11:9f:39:72:96:85:e3:92:68:7d:b0:0b:47:ec:98:cd:17:cc:
b4:24:c8:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Wpm5JEUrJkiONOr3uZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxN2NiMTRjZTQwMTRhYzMyNjlkNzBlZWVhODljODcwNTVi
MTc2ZjEwHhcNMjUwODIzMDgwMDI1WhcNMjUwODI0MDgwMDI1WjAzMTEwLwYDVQQD
EyhiZDIxOGE4YWI5YzcyYzIwMjdkMjA0ZTFiZmNmYmVjMDMxMzk0ZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvngRz6SOrOR1p9/ohw4/aqBs5qGy
JfSlL2sdrv8Sj+VGODF6paUpfQNgrYB5sNfFGFTj50HY6mlsTz/23Qodofsi0teZ
B+i5X+eSkVCK57IncHSkghyA2Xab/CrOs6RlSUWtXCtjmP+O7BtCXBLR/rja1b+V
QQ2KwkXfkRiCnIuPFwSvgjbod3X/xyzR309r9hgmQuHRxPbrQPucp5L8w+/BSBa/
rFmXeYOh00ED64WXZiOmjxK95ipbnnkAHIqzcfcmYzUc4f+Dljphv4W4SeRayjJs
rshvEWF72lV2GZH0QTQMf3n607ONa+9Lzwtk2savVjfTiSuWem4F8FKLvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0hioq5xywgJ9IE4b/PvsAxOU4RMB8GA1UdIwQY
MBaAFIF8sUzkAUrDJp1w7uqJyHBVsXbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMt
MWEyYWJkYTFhOWU1LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMtMWEyYWJkYTFhOWU1
LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQHmLF6G
h5vhG/eT2wUSrZ4BNdQ6NMHFC7eAgPZ2BPmi5IsBRtSqAWu5PJd4B+udgNV7pQM8
zxdXRiA78fNNAWipF4ZI0EP0UMZb8M62FKJYGM/8oTGIoNge3U8UC+joHCQSgXJL
H28XwrR2lvjsLneN2Q8VdumzUpbloOCd3oqqy5+0MtxJHdG/4XvfRRrxLBDWUwdz
Kr9ZCrVL+1I7Nt0iI7p228i50fuHAwHkbpg5ymvv4d3+WFyQ12wffPxnBQj1EpX8
6xfJhP1MLFoyDzKiQYlf68jpeGbp7q/4aDw0i0DJpfW5/yrsEZ85cpaF45JofbAL
R+yYzRfMtCTINQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:19 2025 by rpki-client