Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
File: gMez3pa5HtxunIXZ1aZoQZIDtfU.mft (raw, json)
Hash identifier: tXTXl7viYulncGPzGtgJDlNtoDBddCyfShc3Fvp12NA=
Subject key identifier: C5:AE:DB:A2:A9:56:BC:28:FB:9C:BA:E7:71:90:90:15:3E:D5:2D:28
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Certificate issuer: /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial: 0198D660406FD2845A864B86729AA5E0BE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
Manifest number: 0425
Signing time: Sat 23 Aug 2025 10:01:28 +0000
Manifest this update: Sat 23 Aug 2025 10:01:28 +0000
Manifest next update: Sun 24 Aug 2025 10:01:28 +0000
Files and hashes: 1: gMez3pa5HtxunIXZ1aZoQZIDtfU.crl (hash: dDBBcEyJ+uCSVXikUqloyMspKreHPB16hedkMnBYoSs=)
2: xVzCoBRTedY1vT9C7xN3NLO-WeY.roa (hash: ystLlP8JPbF13VOw8QCBVAQ5cldgA4v4fXVvBu8BWIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:40:6f:d2:84:5a:86:4b:86:72:9a:a5:e0:be:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Validity
Not Before: Aug 23 10:01:28 2025 GMT
Not After : Aug 24 10:01:28 2025 GMT
Subject: CN=c5aedba2a956bc28fb9cbae7719090153ed52d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:dd:7f:76:0b:6c:c3:6f:ea:6a:67:a1:05:
fb:cd:4f:12:9c:33:24:97:6c:ee:91:0a:2a:c9:6e:
92:5a:a8:5f:75:17:5e:54:a5:b5:2f:c3:7b:e9:aa:
28:87:77:86:2c:22:69:86:72:02:54:eb:01:95:61:
03:b8:be:2c:dd:58:5c:e6:36:66:06:3b:6a:0f:4e:
14:48:06:8b:19:fb:0f:1e:f6:bb:10:d4:ed:40:43:
09:eb:e7:32:f6:f6:28:ce:01:43:e7:cb:69:89:f9:
25:33:49:65:e8:46:a4:8c:bc:10:89:0f:c8:3b:d5:
ac:d4:8c:77:49:5f:41:93:b3:94:0e:cf:de:5c:a6:
66:d1:ed:41:df:9c:1e:eb:f6:54:3a:ca:a9:ed:19:
2b:6b:61:ff:27:ea:93:64:c6:2a:00:cf:f6:c7:40:
25:df:72:6a:7b:04:95:43:5a:a7:3a:f2:37:78:03:
5b:0a:80:17:91:e7:60:ff:08:2a:fe:d7:1c:6d:a0:
57:45:f8:7c:e1:73:e8:8c:9f:bb:d1:7a:57:f6:ce:
44:f2:ac:3c:04:bf:cd:c7:1f:d8:77:06:6f:ea:c5:
e7:06:68:07:92:3a:cb:82:41:48:dd:3a:dc:e4:d0:
fb:9e:3e:04:f6:98:0f:5f:7d:a2:19:20:e7:2d:1c:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AE:DB:A2:A9:56:BC:28:FB:9C:BA:E7:71:90:90:15:3E:D5:2D:28
X509v3 Authority Key Identifier:
keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9d:ee:3e:54:4b:98:00:28:54:3b:f5:10:a3:2b:dc:09:9e:
b4:d3:ee:ea:45:90:e3:8c:0f:12:79:a4:79:cb:32:0b:03:2b:
2a:85:d6:d6:fa:70:ff:24:3f:f9:fd:ea:81:00:b6:49:9a:45:
11:3b:d8:2a:e5:84:e7:a8:0a:3e:da:0e:85:dc:e4:c7:42:d3:
e2:68:43:26:1a:bb:bb:cd:27:c8:0f:10:d2:5e:36:1c:f9:6d:
a6:ab:ba:0d:d8:cf:40:13:19:f0:a5:01:fe:bf:9f:86:3a:4a:
07:47:9c:ad:8d:86:b0:4c:cc:16:48:ec:72:51:dc:23:72:21:
56:07:b2:52:cd:b6:91:01:a3:30:6d:9f:f7:9b:67:ea:e8:85:
1f:49:51:77:0a:9c:8b:4b:11:84:f1:d7:e0:02:05:ae:c8:58:
fd:0b:0d:0b:cf:04:fc:e3:8a:a1:31:fe:65:00:3c:3c:3d:0c:
fc:4a:6f:23:b1:2c:a3:0c:a8:1e:a3:af:11:75:7b:4b:1d:0e:
df:3e:c5:3e:58:e0:1f:9c:cc:af:0b:26:fa:80:a9:e1:8d:a0:
85:96:68:f6:f5:65:03:1f:23:52:c6:61:29:36:cf:c5:d2:e6:
e1:90:4f:41:b4:d7:72:dc:d6:d0:75:ad:3d:48:72:86:e8:34:
0f:46:4a:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYEBv0oRahkuGcpql4L4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYzdiM2RlOTZiOTFlZGM2ZTljODVkOWQ1YTY2ODQxOTIw
M2I1ZjUwHhcNMjUwODIzMTAwMTI4WhcNMjUwODI0MTAwMTI4WjAzMTEwLwYDVQQD
EyhjNWFlZGJhMmE5NTZiYzI4ZmI5Y2JhZTc3MTkwOTAxNTNlZDUyZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLbdf3YLbMNv6mpnoQX7zU8SnDMk
l2zukQoqyW6SWqhfdRdeVKW1L8N76aooh3eGLCJphnICVOsBlWEDuL4s3Vhc5jZm
BjtqD04USAaLGfsPHva7ENTtQEMJ6+cy9vYozgFD58tpifklM0ll6EakjLwQiQ/I
O9Ws1Ix3SV9Bk7OUDs/eXKZm0e1B35we6/ZUOsqp7Rkra2H/J+qTZMYqAM/2x0Al
33JqewSVQ1qnOvI3eANbCoAXkedg/wgq/tccbaBXRfh84XPojJ+70XpX9s5E8qw8
BL/Nxx/YdwZv6sXnBmgHkjrLgkFI3Trc5ND7nj4E9pgPX32iGSDnLRyRqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWu26KpVrwo+5y653GQkBU+1S0oMB8GA1UdIwQY
MBaAFIDHs96WuR7cbpyF2dWmaEGSA7X1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMzAxZmItMzE3NC00NWMzLWE0NDct
YTdmY2ZiNTI5ZGM3LzEvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jMzAxZmItMzE3NC00NWMzLWE0NDctYTdmY2ZiNTI5ZGM3
LzEvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKp3uPlRL
mAAoVDv1EKMr3AmetNPu6kWQ44wPEnmkecsyCwMrKoXW1vpw/yQ/+f3qgQC2SZpF
ETvYKuWE56gKPtoOhdzkx0LT4mhDJhq7u80nyA8Q0l42HPltpqu6DdjPQBMZ8KUB
/r+fhjpKB0ecrY2GsEzMFkjsclHcI3IhVgeyUs22kQGjMG2f95tn6uiFH0lRdwqc
i0sRhPHX4AIFrshY/QsNC88E/OOKoTH+ZQA8PD0M/EpvI7EsowyoHqOvEXV7Sx0O
3z7FPljgH5zMrwsm+oCp4Y2ghZZo9vVlAx8jUsZhKTbPxdLm4ZBPQbTXctzW0HWt
PUhyhug0D0ZKlw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:12 2025 by rpki-client