Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
File: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json)
Hash identifier: W/xbCwL88IYUL9bicRE792VoFmAS6jCGwKQsRti4RW0=
Subject key identifier: 88:41:DA:81:49:4D:4D:33:B3:88:17:EF:33:0B:69:43:93:AF:6C:D4
Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
Certificate issuer: /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Certificate serial: 0198D515A36D4A5E44A5005C96049FF24015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
Manifest number: 0F06
Signing time: Sat 23 Aug 2025 04:00:21 +0000
Manifest this update: Sat 23 Aug 2025 04:00:21 +0000
Manifest next update: Sun 24 Aug 2025 04:00:21 +0000
Files and hashes: 1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: xEn9n5RKP6fwZQSQP0yaotjwi5tB1+TZ9uI5suS40OM=)
2: dhbqsDMCYbdJQ5KWes-T7R0t68c.roa (hash: A26S4K/y1MLobATqv2Mkxdn527XJqQ0E6NlZCnsWU/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a3:6d:4a:5e:44:a5:00:5c:96:04:9f:f2:40:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Validity
Not Before: Aug 23 04:00:21 2025 GMT
Not After : Aug 24 04:00:21 2025 GMT
Subject: CN=8841da81494d4d33b38817ef330b694393af6cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:da:90:42:32:f6:b1:dc:dc:ec:49:e0:3b:
7e:bf:48:96:15:0d:ba:64:77:22:9e:f1:ff:0d:db:
1c:98:13:63:42:11:67:a2:57:f4:c4:6c:86:c0:f2:
11:31:4a:1c:b5:db:03:8d:5e:8a:de:15:e2:f9:d8:
06:7d:54:b0:0b:f3:5e:7c:16:ca:42:80:13:91:65:
c1:43:0e:89:36:55:0a:5b:cb:f2:3e:b5:21:79:c1:
9f:b8:88:a5:49:4f:c5:e7:0b:ef:c6:ba:b1:82:b5:
67:0a:a7:14:aa:65:5d:d7:ca:7e:ea:ea:7e:9b:00:
97:94:68:fd:6b:d8:53:1e:4e:b5:a9:b7:dc:29:7e:
d9:97:f7:21:0d:94:f8:c6:52:6b:d3:15:18:49:82:
a2:53:09:57:13:2f:37:87:3c:4f:a9:43:f6:35:f6:
94:61:88:26:e9:34:e8:67:16:11:ef:fa:0f:41:5a:
5b:78:4f:2b:65:b9:14:8b:5a:22:88:17:6a:49:be:
ad:8c:0f:54:47:51:83:7b:ed:0f:c1:7f:42:06:5c:
92:fc:bf:d8:24:79:ff:db:e5:35:92:49:53:a1:39:
e1:fb:18:7e:04:d2:bf:b2:01:21:da:47:9d:db:27:
13:29:a2:2e:e3:c9:a1:10:e6:51:a3:0e:b9:36:7a:
b5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:41:DA:81:49:4D:4D:33:B3:88:17:EF:33:0B:69:43:93:AF:6C:D4
X509v3 Authority Key Identifier:
keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:70:32:54:5b:45:2f:ba:5d:c8:4c:42:c7:b7:0c:7c:0c:43:
27:3c:35:d0:18:85:da:2e:5e:a6:ab:6b:1a:2e:94:d4:33:47:
0a:e9:ae:a9:60:55:f9:cb:c8:15:19:dc:97:49:1f:f8:04:92:
c6:90:c4:2a:86:19:0d:87:b7:df:b7:16:9b:ed:23:9f:f0:64:
7c:06:69:36:6c:d5:e5:6f:55:e3:77:d7:00:95:72:b5:8d:70:
99:24:ad:8f:4c:fb:c7:da:ed:ef:bc:3b:84:fd:84:1e:c1:ad:
59:5b:66:92:ce:17:75:1c:ff:23:dc:15:ae:d2:0b:e1:b5:84:
e9:87:b8:ca:55:ab:52:b4:b8:e0:27:00:8f:5f:d9:d5:20:b2:
30:fc:b9:1a:18:5a:46:f7:b2:53:71:60:fd:6b:33:0c:ef:ff:
f9:dc:a9:63:59:3c:27:7e:f0:e2:e8:fc:0f:14:70:0e:09:28:
07:d5:e4:39:67:18:2c:48:fb:f5:c5:9b:21:56:ad:de:0a:11:
3b:ca:5d:42:35:da:5c:44:57:9e:5d:79:d3:20:43:15:07:cd:
a5:c6:31:2a:75:1e:ca:20:0d:d3:34:04:03:d3:5d:8a:fc:27:
5d:bf:33:6e:18:ae:3a:da:44:32:f4:f5:9a:21:c8:1f:f7:e2:
a9:26:92:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFaNtSl5EpQBclgSf8kAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMWI0YjVjMmRhYWE2ZmMzNTA3MWY0MzhmOTY4YWY2ZmY2
Y2E0ZGEwHhcNMjUwODIzMDQwMDIxWhcNMjUwODI0MDQwMDIxWjAzMTEwLwYDVQQD
Eyg4ODQxZGE4MTQ5NGQ0ZDMzYjM4ODE3ZWYzMzBiNjk0MzkzYWY2Y2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruXakEIy9rHc3OxJ4Dt+v0iWFQ26
ZHcinvH/DdscmBNjQhFnolf0xGyGwPIRMUoctdsDjV6K3hXi+dgGfVSwC/NefBbK
QoATkWXBQw6JNlUKW8vyPrUhecGfuIilSU/F5wvvxrqxgrVnCqcUqmVd18p+6up+
mwCXlGj9a9hTHk61qbfcKX7Zl/chDZT4xlJr0xUYSYKiUwlXEy83hzxPqUP2NfaU
YYgm6TToZxYR7/oPQVpbeE8rZbkUi1oiiBdqSb6tjA9UR1GDe+0PwX9CBlyS/L/Y
JHn/2+U1kklToTnh+xh+BNK/sgEh2ked2ycTKaIu48mhEOZRow65Nnq1+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhB2oFJTU0zs4gX7zMLaUOTr2zUMB8GA1UdIwQY
MBaAFBsbS1wtqqb8NQcfQ4+Wivb/bKTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMt
YTEyNDZjNjdkOWRlLzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMtYTEyNDZjNjdkOWRl
LzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3AyVFtF
L7pdyExCx7cMfAxDJzw10BiF2i5epqtrGi6U1DNHCumuqWBV+cvIFRncl0kf+ASS
xpDEKoYZDYe337cWm+0jn/BkfAZpNmzV5W9V43fXAJVytY1wmSStj0z7x9rt77w7
hP2EHsGtWVtmks4XdRz/I9wVrtIL4bWE6Ye4ylWrUrS44CcAj1/Z1SCyMPy5Ghha
RveyU3Fg/WszDO//+dypY1k8J37w4uj8DxRwDgkoB9XkOWcYLEj79cWbIVat3goR
O8pdQjXaXERXnl150yBDFQfNpcYxKnUeyiAN0zQEA9NdivwnXb8zbhiuOtpEMvT1
miHIH/fiqSaSxQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:13 2025 by rpki-client