Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
File: GQAdVXoGmNrXfEs-3fKn02tyqwA.mft (raw, json)
Hash identifier: W3rcgLY0iij3M22NosPPKEou0aeSlqfQEDI+04IzKr4=
Subject key identifier: 2D:C0:66:65:2E:89:C9:A1:7B:1C:1C:B6:1D:F6:B8:CB:FC:0A:49:6F
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial: 0198D4E0A731AB54B6A6CC960538BB2B0A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
Manifest number: 0589
Signing time: Sat 23 Aug 2025 03:02:29 +0000
Manifest this update: Sat 23 Aug 2025 03:02:29 +0000
Manifest next update: Sun 24 Aug 2025 03:02:29 +0000
Files and hashes: 1: GQAdVXoGmNrXfEs-3fKn02tyqwA.crl (hash: al0SpcszQYHcMZPsDzYoA5yUfbKFTnQQpD6cWV+9WIE=)
2: _Y3WU0rL_Z5yMospeFK2kheOtgM.roa (hash: qqDo+PPhN0qvkLG+7KSZ3FS8hY7kC2hitlOvSMnc4pQ=)
3: cqleo2TkA-Dax9YzlbPC4oCeXks.roa (hash: WDLbfAf8uLhRV57uZSklRDXJ7tKTUOclgtS0od1R4M4=)
4: spoNsBquI5wjgn7gu8viZ3BO3l4.roa (hash: G+9zvvKyQogrHpfux1dzt3BVRrnfOK8LLcMasK0KKtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a7:31:ab:54:b6:a6:cc:96:05:38:bb:2b:0a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Validity
Not Before: Aug 23 03:02:29 2025 GMT
Not After : Aug 24 03:02:29 2025 GMT
Subject: CN=2dc066652e89c9a17b1c1cb61df6b8cbfc0a496f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:99:fe:67:69:3e:d1:bd:b8:e0:fe:70:42:
b5:1b:2c:0f:24:90:5a:0a:da:0d:93:11:01:f5:14:
30:1f:ed:af:95:58:15:3f:38:4f:aa:35:26:d1:1b:
ba:f8:95:f3:b3:50:3e:7c:1e:a7:bc:02:4f:dc:aa:
44:e4:68:9d:54:c4:07:f4:75:51:4e:43:2d:4e:d1:
82:19:e3:30:fe:a5:e1:18:91:c4:19:ef:63:8e:e9:
bf:20:32:a9:ee:a0:05:fd:49:af:7a:eb:75:d1:2b:
bb:c8:5b:06:77:dc:f2:71:88:18:f2:22:13:f4:b0:
ef:66:9a:3f:1c:0f:f6:e2:c6:ef:ca:af:c1:47:02:
a4:b0:d8:f0:e7:35:ba:47:1b:18:b7:d4:db:e3:4c:
1e:61:ec:0c:c8:dd:47:b0:d2:37:2f:b1:7b:1d:1a:
8e:5a:ed:ef:2b:cd:ae:5f:ec:8d:d3:89:aa:a1:8f:
e1:8c:c5:91:4a:99:42:34:95:53:b2:97:98:75:0d:
96:b5:e4:1d:d3:23:f1:f6:25:fe:78:c4:8e:84:f8:
b6:2d:05:52:9f:69:c6:70:12:51:8f:91:98:13:90:
50:30:39:6a:3a:e1:56:24:c1:78:fe:b7:b9:25:ac:
70:76:25:09:71:14:c4:34:c6:cb:12:26:ec:8a:d1:
06:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C0:66:65:2E:89:C9:A1:7B:1C:1C:B6:1D:F6:B8:CB:FC:0A:49:6F
X509v3 Authority Key Identifier:
keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fb:14:88:84:f7:21:66:0b:1d:6e:8d:6d:71:51:90:dd:c2:
6c:99:a6:1e:d2:ce:05:5b:97:47:9a:3f:8e:21:ca:e2:e7:31:
dd:37:4b:60:2b:f8:64:8d:2d:cd:3c:bf:08:ea:89:b0:8c:80:
b8:27:c2:6d:a8:a5:e4:97:4b:c2:99:d9:84:e2:a1:84:0e:de:
ca:32:64:f5:9b:b5:ec:25:44:60:08:ec:3b:14:66:b1:f7:bc:
08:d6:03:4d:7c:39:ad:34:0b:e7:fb:99:79:48:f9:11:ab:a6:
5f:75:f2:43:f6:38:7f:5c:07:a5:7c:4a:ed:06:b8:3e:04:61:
85:a7:15:ed:6f:df:24:e1:4e:f5:4e:5d:37:d9:91:bc:29:7f:
cd:99:c7:5c:14:98:f4:d7:cd:7e:43:51:8c:e7:5d:73:00:65:
b1:11:b4:1b:db:3d:0f:65:0a:00:7d:21:c8:67:7a:d1:07:68:
af:70:60:19:dc:07:4f:3e:5a:0a:a6:61:ff:0d:ef:e0:30:ac:
ae:71:32:88:a8:c4:92:16:31:ba:a8:4a:ed:e8:9a:d0:e1:73:
75:e2:4c:1b:28:a9:29:7c:b5:c1:e1:b0:a4:6b:8f:de:68:ba:
b9:d8:cd:a6:1a:56:e2:5f:0e:ec:9e:03:06:61:c0:f9:06:78:
ea:9a:7d:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Kcxq1S2psyWBTi7KwohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDAxZDU1N2EwNjk4ZGFkNzdjNGIzZWRkZjJhN2QzNmI3
MmFiMDAwHhcNMjUwODIzMDMwMjI5WhcNMjUwODI0MDMwMjI5WjAzMTEwLwYDVQQD
EygyZGMwNjY2NTJlODljOWExN2IxYzFjYjYxZGY2YjhjYmZjMGE0OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1eZ/mdpPtG9uOD+cEK1GywPJJBa
CtoNkxEB9RQwH+2vlVgVPzhPqjUm0Ru6+JXzs1A+fB6nvAJP3KpE5GidVMQH9HVR
TkMtTtGCGeMw/qXhGJHEGe9jjum/IDKp7qAF/Umveut10Su7yFsGd9zycYgY8iIT
9LDvZpo/HA/24sbvyq/BRwKksNjw5zW6RxsYt9Tb40weYewMyN1HsNI3L7F7HRqO
Wu3vK82uX+yN04mqoY/hjMWRSplCNJVTspeYdQ2WteQd0yPx9iX+eMSOhPi2LQVS
n2nGcBJRj5GYE5BQMDlqOuFWJMF4/re5JaxwdiUJcRTENMbLEibsitEGEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3AZmUuicmhexwcth32uMv8CklvMB8GA1UdIwQY
MBaAFBkAHVV6Bpja13xLPt3yp9NrcqsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDkt
MjBkZTY5NzI2MDliLzEvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDktMjBkZTY5NzI2MDli
LzEvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevsUiIT3
IWYLHW6NbXFRkN3CbJmmHtLOBVuXR5o/jiHK4ucx3TdLYCv4ZI0tzTy/COqJsIyA
uCfCbail5JdLwpnZhOKhhA7eyjJk9Zu17CVEYAjsOxRmsfe8CNYDTXw5rTQL5/uZ
eUj5EaumX3XyQ/Y4f1wHpXxK7Qa4PgRhhacV7W/fJOFO9U5dN9mRvCl/zZnHXBSY
9NfNfkNRjOddcwBlsRG0G9s9D2UKAH0hyGd60Qdor3BgGdwHTz5aCqZh/w3v4DCs
rnEyiKjEkhYxuqhK7eia0OFzdeJMGyipKXy1weGwpGuP3mi6udjNphpW4l8O7J4D
BmHA+QZ46pp98w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:46 2025 by rpki-client