Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: E1V4WOrbZk8yYkS+vu9E/QRSl4cFXLoIfvUGlMptEIo=
Subject key identifier: E1:A1:BA:9D:32:45:2D:B7:DA:51:EF:A6:31:5E:51:E2:53:66:67:1C
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 0198D58377805F55B10D1EC501B7B1A52DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 06:00:19 +0000
Manifest this update: Sat 23 Aug 2025 06:00:19 +0000
Manifest next update: Sun 24 Aug 2025 06:00:19 +0000
Files and hashes: 1: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (hash: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: 6O5YYiJiKrFd/cSjA/2Z5hGSzptPMJqurIfaaR5IFZ4=)
3: zHD1UIuWQeduzn45VRXboBoA5NM.roa (hash: ToC2fZb+9n4mNoZ0Xp4h8y1142lDAhVM0QODtU55JXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:77:80:5f:55:b1:0d:1e:c5:01:b7:b1:a5:2d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Aug 23 06:00:19 2025 GMT
Not After : Aug 24 06:00:19 2025 GMT
Subject: CN=e1a1ba9d32452db7da51efa6315e51e25366671c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:8e:85:0d:d9:44:ee:6a:19:d0:bb:02:d7:
3f:c2:da:57:ac:5f:02:f6:d2:5d:b0:31:dd:57:c2:
8c:21:0e:50:c2:69:6a:71:69:a2:7a:f3:a1:05:6a:
60:04:3f:52:76:16:a2:c1:17:4a:d4:fb:8e:ab:65:
ba:d3:92:d9:f6:5b:b2:b4:5c:44:2c:a5:95:63:a3:
e3:d5:88:ea:a4:90:eb:58:52:a4:8d:7c:b2:22:e5:
3f:5f:fe:5a:9b:f2:d6:92:82:e4:b4:f1:38:e7:ea:
b3:1d:a8:0b:03:1a:24:b3:f6:cf:42:11:18:85:e1:
4d:db:46:29:f1:29:05:41:01:32:fe:48:89:ad:ca:
b2:1c:c7:f0:45:11:9f:a4:6e:7f:6a:8a:82:48:38:
62:89:65:63:5a:92:d3:6a:a3:19:db:e3:b1:f4:f2:
fd:ae:49:01:5e:37:e6:d5:1a:6d:a6:ed:13:b6:cd:
2d:c3:ae:50:6d:c1:07:b6:18:84:18:cf:3a:e2:d5:
b4:19:e7:c0:3f:f6:12:28:f8:83:68:f0:05:3e:1c:
5e:60:05:eb:d0:4a:ed:b0:3a:ec:ec:63:67:09:2c:
c6:f3:1d:9f:1d:c4:f5:07:00:71:38:3b:e2:b3:95:
76:3a:ed:ba:62:2d:e6:92:11:2a:17:5f:82:ec:95:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A1:BA:9D:32:45:2D:B7:DA:51:EF:A6:31:5E:51:E2:53:66:67:1C
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:74:18:4e:9f:11:bf:9d:0c:de:e4:76:b3:72:c4:0f:6a:07:
ad:01:e0:7a:d1:e8:4e:07:b2:3b:0f:8a:21:61:fb:4c:cd:96:
b9:9d:d6:1a:4a:70:ef:15:b5:e7:04:56:4d:d7:52:5e:89:e4:
14:aa:c5:8a:00:b4:51:4c:a3:45:6a:b4:bf:50:eb:4c:b6:3b:
5d:f2:de:00:e2:a1:6f:c3:f5:f5:a0:89:a1:a3:8c:97:a5:bc:
6f:82:e3:fc:4a:56:61:5e:dd:ec:4a:53:19:93:aa:69:fa:f3:
82:c6:1c:25:6e:97:45:65:50:db:6b:c2:32:4f:55:d9:d9:47:
3a:a7:b5:f7:24:64:ad:bf:8a:7f:a4:d5:be:fa:1d:48:64:d4:
7e:99:de:74:c7:91:51:70:85:83:14:fa:d2:9d:18:3f:36:29:
86:32:fe:50:1d:36:a5:2a:7d:46:9e:44:06:44:5d:33:48:31:
21:e0:66:f1:9d:d9:81:3a:5f:c9:6e:97:91:49:31:d5:f7:96:
71:98:b4:62:14:4d:4c:ed:26:76:0f:6f:ca:fa:0f:96:a9:db:
6b:04:51:4e:8d:98:37:19:24:7d:6a:f2:a7:cb:48:bc:bf:46:
e9:d5:fd:d3:93:42:b6:c8:a9:49:1a:a7:f1:11:21:bf:7a:fb:
06:26:ea:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg3eAX1WxDR7FAbexpS3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmQwMDgyOTUzNmQ0Nzc0NWY0N2RhOWQxYThhNzJmNmRk
NDYyZDQwHhcNMjUwODIzMDYwMDE5WhcNMjUwODI0MDYwMDE5WjAzMTEwLwYDVQQD
EyhlMWExYmE5ZDMyNDUyZGI3ZGE1MWVmYTYzMTVlNTFlMjUzNjY2NzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGmOhQ3ZRO5qGdC7Atc/wtpXrF8C
9tJdsDHdV8KMIQ5QwmlqcWmievOhBWpgBD9SdhaiwRdK1PuOq2W605LZ9luytFxE
LKWVY6Pj1YjqpJDrWFKkjXyyIuU/X/5am/LWkoLktPE45+qzHagLAxoks/bPQhEY
heFN20Yp8SkFQQEy/kiJrcqyHMfwRRGfpG5/aoqCSDhiiWVjWpLTaqMZ2+Ox9PL9
rkkBXjfm1Rptpu0Tts0tw65QbcEHthiEGM864tW0GefAP/YSKPiDaPAFPhxeYAXr
0ErtsDrs7GNnCSzG8x2fHcT1BwBxODvis5V2Ou26Yi3mkhEqF1+C7JVEuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGhup0yRS232lHvpjFeUeJTZmccMB8GA1UdIwQY
MBaAFIC9AIKVNtR3RfR9qdGopy9t1GLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMt
MDliOTkyMGZlMDBmLzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMtMDliOTkyMGZlMDBm
LzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3QYTp8R
v50M3uR2s3LED2oHrQHgetHoTgeyOw+KIWH7TM2WuZ3WGkpw7xW15wRWTddSXonk
FKrFigC0UUyjRWq0v1DrTLY7XfLeAOKhb8P19aCJoaOMl6W8b4Lj/EpWYV7d7EpT
GZOqafrzgsYcJW6XRWVQ22vCMk9V2dlHOqe19yRkrb+Kf6TVvvodSGTUfpnedMeR
UXCFgxT60p0YPzYphjL+UB02pSp9Rp5EBkRdM0gxIeBm8Z3ZgTpfyW6XkUkx1feW
cZi0YhRNTO0mdg9vyvoPlqnbawRRTo2YNxkkfWryp8tIvL9G6dX905NCtsipSRqn
8REhv3r7BibqWg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:17 2025 by rpki-client