Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
File: gbv0m8K-YG6m9Ivb-WJX3natfMA.mft (raw, json)
Hash identifier: k5NMiXiMKQnxotOa3vBYbCy2kjxx9+2plHjz4i0QTt0=
Subject key identifier: 5D:9B:36:85:65:02:42:04:6E:A2:98:E1:B9:C8:BF:C9:3E:F1:CD:E1
Authority key identifier: 81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0
Certificate issuer: /CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0
Certificate serial: 0198D850FFEF65E19A14444FFDF24DF93B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 19:04:03 +0000
Manifest this update: Sat 23 Aug 2025 19:04:03 +0000
Manifest next update: Sun 24 Aug 2025 19:04:03 +0000
Files and hashes: 1: gbv0m8K-YG6m9Ivb-WJX3natfMA.crl (hash: Rrg8uUC6oZ07/ubo+s7xT5uJsPHyRMqOlWAbVtir2F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:ff:ef:65:e1:9a:14:44:4f:fd:f2:4d:f9:3b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0
Validity
Not Before: Aug 23 19:04:03 2025 GMT
Not After : Aug 24 19:04:03 2025 GMT
Subject: CN=5d9b3685650242046ea298e1b9c8bfc93ef1cde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:b3:0e:6a:5d:81:cb:81:72:90:56:37:9a:
b5:dd:de:81:56:41:ae:14:4b:df:31:06:2f:6c:b5:
32:e5:bb:b7:5a:c0:da:f7:79:9a:50:c9:f9:85:7e:
8f:b1:fd:88:da:39:4d:81:d1:4a:dc:9e:61:93:67:
72:4f:94:d4:51:a7:ce:f6:be:f0:1d:44:b9:1a:f3:
b9:48:a2:73:3b:5b:d9:0b:a2:36:0f:a4:3f:9b:02:
a3:9c:6a:30:18:d7:48:da:09:55:0d:c3:89:52:2a:
b8:a5:69:e8:03:fc:54:cd:a3:3b:3e:38:89:8f:56:
4c:0a:f7:20:21:95:99:aa:f5:ee:33:0b:76:b0:33:
57:f2:ff:9a:78:f9:df:94:fa:14:b0:bc:32:2e:50:
92:36:46:9b:99:24:1c:b3:4a:7b:a9:71:c1:62:75:
f1:f0:1a:8c:34:71:a6:cf:2b:c1:3d:d2:af:c6:e8:
d3:dc:1e:b0:34:66:67:6f:fa:b2:1e:b0:07:7b:72:
56:84:0c:95:8e:12:8d:0b:01:6a:fe:b5:67:ef:56:
b5:95:fa:d4:89:c2:05:b4:34:8d:48:b3:78:ce:4b:
07:63:3e:73:66:78:a3:41:8c:25:06:70:a8:62:05:
1f:e0:dc:14:25:f3:72:af:4a:c3:a8:cc:62:36:ed:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:36:85:65:02:42:04:6E:A2:98:E1:B9:C8:BF:C9:3E:F1:CD:E1
X509v3 Authority Key Identifier:
keyid:81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2e:dc:39:1f:7e:70:10:2c:2f:b9:de:01:9c:4b:5d:d0:9c:
a1:ca:30:aa:0c:93:cf:7f:57:fb:2c:77:65:fc:9b:d8:c1:26:
eb:f9:57:b3:65:f2:11:57:fd:d8:2d:f6:4d:79:4e:9a:1c:2b:
d2:33:4c:43:e9:6d:5c:13:fd:87:47:8f:2d:c2:77:ce:3a:42:
33:64:75:ae:fc:ef:6f:32:7c:db:c9:47:73:bc:79:b1:87:7f:
f8:a5:25:55:48:51:f5:1e:6b:45:b2:d9:53:24:43:54:dc:86:
bd:ad:9d:80:08:fa:8a:08:aa:b6:2c:33:2f:cf:63:cd:66:37:
56:e4:2d:f5:45:e7:9f:4c:6d:ec:15:57:48:99:97:31:fb:02:
67:32:08:dc:ed:e0:36:35:30:2d:76:9e:50:77:ef:6a:6b:25:
61:4e:a6:05:ef:30:8f:ba:ee:8f:5b:12:e0:d4:e1:f5:64:db:
4d:4a:a0:f2:d2:bc:0d:8b:e0:e2:11:4b:8f:53:4d:4a:a3:3b:
e0:20:42:71:07:ed:07:3a:bd:12:99:03:a3:a4:7a:e9:7c:16:
38:4d:b1:4f:b0:0e:41:d4:8e:4b:3d:5e:a7:ab:d0:ab:84:d1:
3e:53:56:54:db:d5:8f:b8:9d:e7:be:fb:dc:2a:d4:58:c5:f2:
fc:c9:1c:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUP/vZeGaFERP/fJN+TtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYmJmNDliYzJiZTYwNmVhNmY0OGJkYmY5NjI1N2RlNzZh
ZDdjYzAwHhcNMjUwODIzMTkwNDAzWhcNMjUwODI0MTkwNDAzWjAzMTEwLwYDVQQD
Eyg1ZDliMzY4NTY1MDI0MjA0NmVhMjk4ZTFiOWM4YmZjOTNlZjFjZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyguzDmpdgcuBcpBWN5q13d6BVkGu
FEvfMQYvbLUy5bu3WsDa93maUMn5hX6Psf2I2jlNgdFK3J5hk2dyT5TUUafO9r7w
HUS5GvO5SKJzO1vZC6I2D6Q/mwKjnGowGNdI2glVDcOJUiq4pWnoA/xUzaM7PjiJ
j1ZMCvcgIZWZqvXuMwt2sDNX8v+aePnflPoUsLwyLlCSNkabmSQcs0p7qXHBYnXx
8BqMNHGmzyvBPdKvxujT3B6wNGZnb/qyHrAHe3JWhAyVjhKNCwFq/rVn71a1lfrU
icIFtDSNSLN4zksHYz5zZnijQYwlBnCoYgUf4NwUJfNyr0rDqMxiNu2XtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2bNoVlAkIEbqKY4bnIv8k+8c3hMB8GA1UdIwQY
MBaAFIG79JvCvmBupvSL2/liV952rXzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84NjNlZWUtNzcxNC00YmM0LTkyNjgt
NDE2OTQyMDJkZTY4LzEvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84NjNlZWUtNzcxNC00YmM0LTkyNjgtNDE2OTQyMDJkZTY4
LzEvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABS7cOR9+
cBAsL7neAZxLXdCcocowqgyTz39X+yx3Zfyb2MEm6/lXs2XyEVf92C32TXlOmhwr
0jNMQ+ltXBP9h0ePLcJ3zjpCM2R1rvzvbzJ828lHc7x5sYd/+KUlVUhR9R5rRbLZ
UyRDVNyGva2dgAj6igiqtiwzL89jzWY3VuQt9UXnn0xt7BVXSJmXMfsCZzII3O3g
NjUwLXaeUHfvamslYU6mBe8wj7ruj1sS4NTh9WTbTUqg8tK8DYvg4hFLj1NNSqM7
4CBCcQftBzq9EpkDo6R66XwWOE2xT7AOQdSOSz1ep6vQq4TRPlNWVNvVj7id5777
3CrUWMXy/MkcrQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:10:54 2025 by rpki-client