Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
File: gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json)
Hash identifier: FdHu9wnIo13TVu6/Bc23OIK5uZ+q+Q5nPpYhiiKik2o=
Subject key identifier: E3:BC:78:AF:F0:EA:3D:D9:B5:10:6B:20:AD:79:34:D7:D1:65:6B:1F
Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
Certificate issuer: /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Certificate serial: 0198D5BBE531BE85FEC02B2D56A6B3476131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
Manifest number: 10F6
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: Ax6Vm0VTZQY0FLe1VYl0Sd0_sqo.roa (hash: X5Han0rbC/tYWBQcqeDkAJUru7qclM/G19tIpVV4C6g=)
2: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: eYJS89CSJXKBsfnv0T7p3PsF2/LK9cFUvDfdt3vEp9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e5:31:be:85:fe:c0:2b:2d:56:a6:b3:47:61:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=e3bc78aff0ea3dd9b5106b20ad7934d7d1656b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:d7:da:1e:05:5d:99:0a:90:d5:92:af:f0:
72:37:1c:a8:b4:13:19:6c:4c:60:62:54:87:01:01:
dd:1f:e3:3b:9c:e4:16:53:c3:fa:0a:61:25:70:5d:
ae:51:7d:96:55:d5:a6:5d:9b:1c:28:5f:03:10:82:
5b:62:e8:76:bb:f9:39:9a:32:98:cc:87:6e:69:3e:
a3:39:09:3e:ce:da:41:ee:53:64:9b:49:fb:42:4d:
8c:c4:e1:0b:c6:88:c0:6c:13:ef:a0:ac:bf:92:f3:
03:84:cd:fa:2b:e5:00:0c:82:c5:6d:f2:3b:41:82:
62:93:ee:ed:c3:d0:23:4f:62:ab:1f:c9:07:2d:f5:
2e:03:dc:78:c9:a6:f4:9e:33:e5:8e:4a:eb:d0:f0:
31:ee:53:15:65:a3:ff:5f:da:d7:36:ae:49:3c:68:
d6:71:a0:45:d6:e2:ec:78:03:02:b9:98:66:29:df:
ac:57:7e:06:27:0e:76:18:f6:2e:07:44:2f:4a:51:
0f:f0:09:45:26:2f:c8:9b:9b:b0:93:0c:47:9e:d7:
34:5c:de:24:35:60:50:fa:a6:2f:72:97:81:dc:71:
38:3e:a5:d0:3d:2b:f3:7f:e2:bf:14:32:7f:79:04:
1f:fe:b5:32:06:59:ca:bf:bc:d6:96:4b:6c:3c:a6:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BC:78:AF:F0:EA:3D:D9:B5:10:6B:20:AD:79:34:D7:D1:65:6B:1F
X509v3 Authority Key Identifier:
keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:23:a2:80:7a:15:83:99:dd:b8:9e:de:81:b5:90:6b:f1:c8:
07:90:b6:c3:84:1d:d8:fd:5b:9f:b7:dc:1f:fc:f8:d8:55:a5:
e7:53:31:e0:32:96:5c:22:0d:80:42:45:fb:d4:f3:ce:93:19:
0f:9d:1f:24:af:7a:b9:4c:80:92:bb:12:57:08:49:69:67:45:
e8:a7:9b:5e:7b:09:5e:dc:ae:13:2e:9c:c7:57:cc:7b:70:7c:
8c:16:80:dc:0a:98:0d:73:e4:83:9b:6e:35:04:ad:cd:dc:59:
a3:bf:17:6b:e9:cc:72:8d:a6:4a:99:37:f2:f3:03:82:af:19:
c9:0a:c5:25:8f:95:58:1c:7a:f4:7b:c3:c2:9c:76:36:e9:0d:
e6:52:ec:f8:d6:1a:6b:04:b5:f7:0c:ef:ff:bf:93:80:cb:2f:
55:4b:e0:17:27:dd:ea:2e:2c:d8:ba:3f:43:dc:e4:51:3c:35:
e2:85:d1:6d:54:fa:e8:b7:02:3a:25:87:91:65:0f:7b:3e:7e:
75:46:98:99:cf:5e:f3:9e:d9:eb:95:a7:69:3e:96:19:a0:bb:
01:34:ed:37:b4:16:3e:d4:ca:2c:e9:2d:11:00:fb:be:ee:d5:
f6:64:2f:05:b1:97:84:f0:b5:0e:a5:c5:79:cc:0a:7a:aa:d7:
9e:96:92:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu+UxvoX+wCstVqazR2ExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMTZjY2IxYWM3N2M3YzAyYTRlZGU2MDZkZjFmN2VmOTcz
YTBiZjkwHhcNMjUwODIzMDcwMTU3WhcNMjUwODI0MDcwMTU3WjAzMTEwLwYDVQQD
EyhlM2JjNzhhZmYwZWEzZGQ5YjUxMDZiMjBhZDc5MzRkN2QxNjU2YjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1vX2h4FXZkKkNWSr/ByNxyotBMZ
bExgYlSHAQHdH+M7nOQWU8P6CmElcF2uUX2WVdWmXZscKF8DEIJbYuh2u/k5mjKY
zIduaT6jOQk+ztpB7lNkm0n7Qk2MxOELxojAbBPvoKy/kvMDhM36K+UADILFbfI7
QYJik+7tw9AjT2KrH8kHLfUuA9x4yab0njPljkrr0PAx7lMVZaP/X9rXNq5JPGjW
caBF1uLseAMCuZhmKd+sV34GJw52GPYuB0QvSlEP8AlFJi/Im5uwkwxHntc0XN4k
NWBQ+qYvcpeB3HE4PqXQPSvzf+K/FDJ/eQQf/rUyBlnKv7zWlktsPKb7bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOO8eK/w6j3ZtRBrIK15NNfRZWsfMB8GA1UdIwQY
MBaAFIAWzLGsd8fAKk7eYG3x9++XOgv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUt
YTk2NmFlODU2OTI2LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUtYTk2NmFlODU2OTI2
LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCOigHoV
g5nduJ7egbWQa/HIB5C2w4Qd2P1bn7fcH/z42FWl51Mx4DKWXCINgEJF+9TzzpMZ
D50fJK96uUyAkrsSVwhJaWdF6KebXnsJXtyuEy6cx1fMe3B8jBaA3AqYDXPkg5tu
NQStzdxZo78Xa+nMco2mSpk38vMDgq8ZyQrFJY+VWBx69HvDwpx2NukN5lLs+NYa
awS19wzv/7+TgMsvVUvgFyfd6i4s2Lo/Q9zkUTw14oXRbVT66LcCOiWHkWUPez5+
dUaYmc9e857Z65WnaT6WGaC7ATTtN7QWPtTKLOktEQD7vu7V9mQvBbGXhPC1DqXF
ecwKeqrXnpaStw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:50 2025 by rpki-client