Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier: hT4J2f8w0T/yox8GkhOPeO4TheST8JnE0X/GEKBe+rw=
Subject key identifier: D1:10:03:7A:17:E8:7D:B8:AA:89:B5:B5:97:3E:5F:A6:40:E6:DE:74
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 0198D4A8205A6A37C9216714356F133021AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (hash: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=)
2: XtfrcY0xGbaYSlWTXL9nm2Diii0.roa (hash: aEZWDKAQcPeSAXKY4jWlj23Ulwbg4fWY9kpGKgMl9kU=)
3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: 2x+J4XjjbwLjMedSl1pyz1dDlcGU6qydScrV2JZo8hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:20:5a:6a:37:c9:21:67:14:35:6f:13:30:21:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=d110037a17e87db8aa89b5b5973e5fa640e6de74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2e:31:9b:15:02:fe:db:98:79:24:da:cb:f4:
56:17:29:6a:00:6c:ff:76:2e:ae:fc:1f:09:8a:c9:
a0:c1:a3:54:d5:d1:f4:7a:88:fd:6b:4d:4a:02:6a:
86:2d:71:ad:39:bf:90:db:b7:10:b9:27:64:83:ee:
1c:4d:62:0f:da:88:4e:18:b1:12:9e:71:a8:61:67:
f8:6d:0f:80:57:c7:22:a5:1b:75:3c:a7:83:54:94:
9f:19:3c:a7:e1:59:5c:c2:59:3d:49:4b:c9:6f:1c:
24:9d:e9:da:e9:82:e4:aa:e7:f4:78:6b:7c:f2:6e:
c6:8c:76:fd:e5:b3:f3:4d:dd:cb:04:9a:d1:15:d9:
db:d6:24:b5:e5:f2:d5:02:71:6e:36:ff:62:2a:d5:
0c:d0:de:a9:f4:5d:7f:59:d5:6f:c4:1e:a8:27:da:
4a:67:47:e1:43:d4:aa:4e:b7:90:c9:aa:a2:41:73:
64:4c:c5:1b:99:18:11:5b:8f:28:2d:5e:61:1d:b2:
a8:8b:c3:24:d0:5c:ac:da:dd:1b:23:cc:65:40:ed:
73:8d:6b:34:e6:dd:f2:ef:94:4a:62:d5:72:c1:86:
72:8a:ea:66:eb:1f:f1:1c:d8:62:70:60:4f:5e:43:
18:49:ad:aa:a3:b6:17:5f:50:df:32:9d:a6:44:b8:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:10:03:7A:17:E8:7D:B8:AA:89:B5:B5:97:3E:5F:A6:40:E6:DE:74
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ae:84:25:05:20:9c:00:1f:7f:c8:c5:79:58:a8:61:1d:cf:
30:2d:d2:b9:3e:db:62:3d:7e:88:78:d7:50:98:6c:11:dc:5d:
8a:7a:b1:1b:bf:62:62:51:e5:f6:0a:83:a0:ce:0b:b3:e4:f3:
f9:ad:29:45:1d:78:db:6e:8b:b7:07:91:bd:e3:7f:ec:6c:3d:
7d:f4:eb:18:40:35:cf:e8:39:17:df:27:70:19:41:ef:62:e1:
35:b7:98:2a:69:21:1c:da:bc:66:d8:be:42:7d:e2:56:6d:58:
81:d6:96:e0:cb:d0:23:32:51:58:89:55:56:8f:12:70:56:4d:
e8:41:1e:68:55:30:98:72:19:0f:4d:72:92:fa:a2:c4:0e:06:
98:21:d0:42:dc:38:3a:91:ed:1a:08:dc:52:8c:56:3c:97:61:
0c:b4:67:12:55:15:11:be:bc:bd:a8:77:d8:af:33:d3:ef:e8:
ab:ac:5f:3f:0d:d9:bf:d0:3c:4e:72:fb:bd:b0:01:8d:a9:c8:
6f:03:9d:35:eb:35:24:f6:a9:22:ef:71:4a:f6:c1:67:e1:2b:
a4:a9:8e:9d:d8:e8:ac:b0:db:0d:b3:66:89:7d:20:74:9d:03:
0b:5f:8d:27:6f:0b:ea:ac:cc:8e:2b:43:83:7d:b0:20:cb:01:
96:57:ab:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqCBaajfJIWcUNW8TMCGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjlkOWZmZTA0OGE3MDAwM2YxNmYwNmUyNGQ5YmYyZGI4
NWViNTIwHhcNMjUwODIzMDIwMDQ0WhcNMjUwODI0MDIwMDQ0WjAzMTEwLwYDVQQD
EyhkMTEwMDM3YTE3ZTg3ZGI4YWE4OWI1YjU5NzNlNWZhNjQwZTZkZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y4xmxUC/tuYeSTay/RWFylqAGz/
di6u/B8JismgwaNU1dH0eoj9a01KAmqGLXGtOb+Q27cQuSdkg+4cTWIP2ohOGLES
nnGoYWf4bQ+AV8cipRt1PKeDVJSfGTyn4Vlcwlk9SUvJbxwknena6YLkquf0eGt8
8m7GjHb95bPzTd3LBJrRFdnb1iS15fLVAnFuNv9iKtUM0N6p9F1/WdVvxB6oJ9pK
Z0fhQ9SqTreQyaqiQXNkTMUbmRgRW48oLV5hHbKoi8Mk0Fys2t0bI8xlQO1zjWs0
5t3y75RKYtVywYZyiupm6x/xHNhicGBPXkMYSa2qo7YXX1DfMp2mRLiaIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEQA3oX6H24qom1tZc+X6ZA5t50MB8GA1UdIwQY
MBaAFIBp2f/gSKcAA/FvBuJNm/LbhetSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWIt
ZTAyMmUzMDA5YTcxLzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWItZTAyMmUzMDA5YTcx
LzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAta6EJQUg
nAAff8jFeVioYR3PMC3SuT7bYj1+iHjXUJhsEdxdinqxG79iYlHl9gqDoM4Ls+Tz
+a0pRR14226LtweRveN/7Gw9ffTrGEA1z+g5F98ncBlB72LhNbeYKmkhHNq8Zti+
Qn3iVm1YgdaW4MvQIzJRWIlVVo8ScFZN6EEeaFUwmHIZD01ykvqixA4GmCHQQtw4
OpHtGgjcUoxWPJdhDLRnElUVEb68vah32K8z0+/oq6xfPw3Zv9A8TnL7vbABjanI
bwOdNes1JPapIu9xSvbBZ+ErpKmOndjorLDbDbNmiX0gdJ0DC1+NJ28L6qzMjitD
g32wIMsBllerlA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:38 2025 by rpki-client