Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: of70CMKocsyECCk2zKteEzKILaBz/RKWuRL0iEznmz4=
Subject key identifier: 8B:16:F8:5F:67:70:AC:CF:09:BA:5A:2E:A2:82:12:38:C0:F7:32:AE
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 0198499BF4F2561B2817427B509C03193FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 1694
Signing time: Sun 27 Jul 2025 02:00:14 +0000
Manifest this update: Sun 27 Jul 2025 02:00:14 +0000
Manifest next update: Mon 28 Jul 2025 02:00:14 +0000
Files and hashes: 1: PKnw-L5JAMuLVLW_rPUfl50hgHY.roa (hash: Byni1NysoU1wt70wQe2A3ExqD7CHoo8EoSDduRrEOLI=)
2: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
3: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: j/qmBxfTCWtoETnVy7X5gK2WiKw17PZ9RPSEc1RKbSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f4:f2:56:1b:28:17:42:7b:50:9c:03:19:3f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jul 27 02:00:14 2025 GMT
Not After : Jul 28 02:00:14 2025 GMT
Subject: CN=8b16f85f6770accf09ba5a2ea2821238c0f732ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:b1:97:21:80:39:30:ea:3c:72:fe:a7:db:
21:28:d9:e6:61:33:3e:f5:df:b4:52:08:65:8a:bd:
0c:48:3f:dd:46:ce:e6:3e:ae:71:73:31:7c:76:b1:
12:bd:0c:87:b2:13:d3:46:99:97:8d:c7:25:31:dc:
ed:59:a7:74:d0:e6:2b:fb:6f:a6:d3:af:b4:aa:b2:
51:5c:c4:8e:ed:45:e1:45:77:39:de:28:03:ec:b8:
f5:71:33:94:d7:6f:d7:ef:72:6c:cc:dc:89:ba:cc:
4c:0f:3b:fb:50:ea:e9:7d:5c:3b:db:11:69:99:1a:
54:9e:74:24:36:85:7f:8f:16:c2:27:93:e8:0d:56:
53:86:41:63:45:41:dc:c3:80:69:9a:a3:50:5f:c4:
1c:92:a2:2f:e5:69:3a:4f:e2:2f:0e:33:89:97:37:
8e:26:ac:10:d4:d1:80:ac:50:1f:71:da:79:0c:de:
4d:23:c2:ae:e0:1c:7c:96:6d:df:a4:b0:8f:a9:d5:
ad:a2:8f:88:a8:2a:19:06:ff:20:72:6b:9c:eb:b1:
b2:26:7c:f3:a6:0b:10:77:45:f8:7b:5a:49:1f:db:
6b:93:bf:83:06:75:3a:b9:a6:21:dc:e6:36:4f:8f:
6c:b1:8c:c1:55:3b:d3:b2:a5:8e:9e:fc:df:5c:76:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:16:F8:5F:67:70:AC:CF:09:BA:5A:2E:A2:82:12:38:C0:F7:32:AE
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:50:27:c2:a3:7a:ed:29:fc:bc:51:3f:62:86:eb:b4:a5:06:
3f:1c:c2:63:4e:d7:cb:90:b6:ff:73:0a:e2:ea:97:f3:ab:cb:
74:9b:d9:4f:a2:ff:c7:11:d6:65:f8:ed:6f:10:e7:d5:44:79:
42:56:61:fd:b0:c7:96:44:52:7e:88:aa:51:c3:99:fa:c2:bf:
b6:1b:3e:0c:6a:49:a9:f7:d6:95:a4:87:cd:70:c7:9f:1a:58:
e4:ab:21:18:16:38:90:f4:06:72:b0:57:62:51:c7:29:d0:9a:
1e:18:aa:73:dc:fb:9e:41:89:9a:dc:76:4c:80:af:7a:49:cd:
00:e2:1b:45:bc:69:12:eb:25:3b:88:8e:5d:cd:73:2d:59:a0:
7b:fe:9b:82:d4:0c:5c:83:8d:35:09:ef:73:95:94:cf:e3:7d:
84:cd:bc:57:31:13:b9:73:84:04:3d:12:ec:f3:e9:cd:5e:fe:
20:3b:33:67:7c:99:b6:d1:bb:1a:25:4f:6c:60:eb:ce:ad:0a:
d6:00:02:a3:2d:e6:d8:d4:5e:82:78:04:13:03:d3:97:9c:99:
21:cf:38:b9:e6:db:77:44:4f:56:38:72:29:5d:7e:02:d6:5e:
d2:23:6c:b8:74:14:83:3c:db:1f:4d:0e:c2:59:80:47:8d:63:
26:ef:35:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJm/TyVhsoF0J7UJwDGT/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjUwNzI3MDIwMDE0WhcNMjUwNzI4MDIwMDE0WjAzMTEwLwYDVQQD
Eyg4YjE2Zjg1ZjY3NzBhY2NmMDliYTVhMmVhMjgyMTIzOGMwZjczMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nyxlyGAOTDqPHL+p9shKNnmYTM+
9d+0Ughlir0MSD/dRs7mPq5xczF8drESvQyHshPTRpmXjcclMdztWad00OYr+2+m
06+0qrJRXMSO7UXhRXc53igD7Lj1cTOU12/X73JszNyJusxMDzv7UOrpfVw72xFp
mRpUnnQkNoV/jxbCJ5PoDVZThkFjRUHcw4BpmqNQX8QckqIv5Wk6T+IvDjOJlzeO
JqwQ1NGArFAfcdp5DN5NI8Ku4Bx8lm3fpLCPqdWtoo+IqCoZBv8gcmuc67GyJnzz
pgsQd0X4e1pJH9trk7+DBnU6uaYh3OY2T49ssYzBVTvTsqWOnvzfXHYrtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsW+F9ncKzPCbpaLqKCEjjA9zKuMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFAnwqN6
7Sn8vFE/YobrtKUGPxzCY07Xy5C2/3MK4uqX86vLdJvZT6L/xxHWZfjtbxDn1UR5
QlZh/bDHlkRSfoiqUcOZ+sK/ths+DGpJqffWlaSHzXDHnxpY5KshGBY4kPQGcrBX
YlHHKdCaHhiqc9z7nkGJmtx2TICveknNAOIbRbxpEuslO4iOXc1zLVmge/6bgtQM
XIONNQnvc5WUz+N9hM28VzETuXOEBD0S7PPpzV7+IDszZ3yZttG7GiVPbGDrzq0K
1gACoy3m2NRegngEEwPTl5yZIc84uebbd0RPVjhyKV1+AtZe0iNsuHQUgzzbH00O
wlmAR41jJu81aQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:18 2025 by rpki-client