Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
File: Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft (raw, json)
Hash identifier: sZ9T/41Cf/YnaBhvlsdcTupBhLpP7Uv1qjKLlPoTwaA=
Subject key identifier: C1:4D:21:E6:30:10:3F:CC:5F:88:CD:14:23:4C:4D:8F:EA:0F:29:B5
Authority key identifier: 1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
Certificate issuer: /CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Certificate serial: 019849D2C35DCA32FC9472E9443EC373DF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
Manifest number: 08E0
Signing time: Sun 27 Jul 2025 03:00:05 +0000
Manifest this update: Sun 27 Jul 2025 03:00:05 +0000
Manifest next update: Mon 28 Jul 2025 03:00:05 +0000
Files and hashes: 1: Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl (hash: Vo9VCtSDEK5IUVeywjtnz1vEGAcZ46G+q26nWPg1KFo=)
2: tv0huOh6mK0H4w2Pkxi0zxGdHcU.roa (hash: AhjG9w2zaLD4mADBnCLY0U88JMMTl5C2x9ZxBk5L0+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:c3:5d:ca:32:fc:94:72:e9:44:3e:c3:73:df:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Validity
Not Before: Jul 27 03:00:05 2025 GMT
Not After : Jul 28 03:00:05 2025 GMT
Subject: CN=c14d21e630103fcc5f88cd14234c4d8fea0f29b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:01:1f:a5:84:34:05:e3:c5:c3:6f:90:fd:
ee:9d:da:0b:b8:0d:e6:07:da:be:11:a3:8d:91:1b:
b9:da:36:1a:1c:43:3d:df:b4:7b:53:f6:91:3d:96:
eb:17:56:44:5f:60:92:aa:04:90:f2:8f:15:16:fb:
44:d7:76:fc:7f:b5:e0:f6:01:b3:35:3e:3b:1c:b1:
ae:e9:4c:2b:81:1f:53:3e:b5:2e:1c:6d:2f:e7:48:
a6:a7:21:c8:35:05:eb:b7:2c:7d:66:fd:3d:2d:50:
62:4c:9d:64:22:4e:1f:de:3c:6b:78:9d:1f:6d:26:
66:65:74:24:cb:84:d2:ea:dd:5a:c8:4c:f9:f6:77:
48:e0:de:3e:69:1b:0c:c3:a2:3a:12:f3:9d:ff:4c:
e0:0f:42:86:e5:31:28:d7:e1:f4:6d:d3:a7:ee:23:
d9:cf:24:94:ed:9a:c0:b7:b6:96:27:f1:40:b6:1e:
87:a2:6b:c2:66:04:89:7f:a4:66:91:32:ac:0f:8c:
5f:cc:3d:c9:50:b1:4a:b1:a6:02:15:bc:48:93:1a:
73:93:29:5e:e9:af:31:85:1a:7e:ac:3b:18:d9:4b:
d8:fb:22:09:de:af:37:7b:a2:be:ef:0d:74:58:b5:
14:16:8a:0d:55:c4:85:d4:5a:e4:e7:5c:e2:52:15:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4D:21:E6:30:10:3F:CC:5F:88:CD:14:23:4C:4D:8F:EA:0F:29:B5
X509v3 Authority Key Identifier:
keyid:1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:57:d1:0c:6c:57:8f:4a:cf:4b:4d:f8:1c:b6:ea:c3:58:53:
43:42:00:25:64:52:71:40:cf:6f:17:b7:8f:62:bf:cb:72:74:
3b:29:56:35:b8:ac:5a:07:72:ba:f3:c6:a7:91:a7:54:38:e5:
d6:64:24:82:77:c7:6f:0e:38:03:d0:5f:87:a2:c5:c5:7a:31:
ea:4a:b1:97:5f:39:ab:ee:80:bf:7e:53:d1:3b:ad:b7:65:b1:
41:74:76:16:5d:c7:9a:63:90:64:91:7b:23:18:05:e7:4d:67:
5e:66:40:96:fa:a0:51:09:11:8b:a8:fa:05:e5:82:53:de:c3:
b7:a6:7b:66:41:33:8e:3d:13:06:56:10:94:c2:f2:97:34:bc:
4b:11:3e:85:02:c5:83:15:43:35:5e:5a:06:1d:42:83:7e:55:
51:62:9b:ce:3f:70:0b:87:2e:45:65:9c:71:e1:22:ac:bf:8c:
8f:07:d2:dd:2c:29:ee:f8:14:00:5c:48:85:0a:21:63:9a:9d:
34:fd:c7:2e:e1:ea:3a:c9:8c:d2:c3:f4:ae:0c:ee:a4:fd:97:
a4:64:5e:ee:6e:8f:a5:d8:8f:b9:99:1e:b8:78:62:1d:64:a8:
34:e8:2c:1b:37:78:f9:92:9d:31:79:64:11:30:62:2a:3a:f7:
2b:8d:0c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0sNdyjL8lHLpRD7Dc98pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYWM3ZGI1MTkzYzFiM2I3NDg3ZTg0N2Q0MWEzODNlZDVi
MjY2NzEwHhcNMjUwNzI3MDMwMDA1WhcNMjUwNzI4MDMwMDA1WjAzMTEwLwYDVQQD
EyhjMTRkMjFlNjMwMTAzZmNjNWY4OGNkMTQyMzRjNGQ4ZmVhMGYyOWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNYBH6WENAXjxcNvkP3undoLuA3m
B9q+EaONkRu52jYaHEM937R7U/aRPZbrF1ZEX2CSqgSQ8o8VFvtE13b8f7Xg9gGz
NT47HLGu6UwrgR9TPrUuHG0v50impyHINQXrtyx9Zv09LVBiTJ1kIk4f3jxreJ0f
bSZmZXQky4TS6t1ayEz59ndI4N4+aRsMw6I6EvOd/0zgD0KG5TEo1+H0bdOn7iPZ
zySU7ZrAt7aWJ/FAth6HomvCZgSJf6RmkTKsD4xfzD3JULFKsaYCFbxIkxpzkyle
6a8xhRp+rDsY2UvY+yIJ3q83e6K+7w10WLUUFooNVcSF1Frk51ziUhXP1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFNIeYwED/MX4jNFCNMTY/qDym1MB8GA1UdIwQY
MBaAFBqsfbUZPBs7dIfoR9QaOD7VsmZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3F4OXRSazhHenQwaC1oSDFCbzRQdFd5Wm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lNmYxYTQtYTQzZS00N2JkLWExNzgt
YzM2YTk2YzA0MTc3LzEvR3F4OXRSazhHenQwaC1oSDFCbzRQdFd5Wm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lNmYxYTQtYTQzZS00N2JkLWExNzgtYzM2YTk2YzA0MTc3
LzEvR3F4OXRSazhHenQwaC1oSDFCbzRQdFd5Wm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlfRDGxX
j0rPS034HLbqw1hTQ0IAJWRScUDPbxe3j2K/y3J0OylWNbisWgdyuvPGp5GnVDjl
1mQkgnfHbw44A9Bfh6LFxXox6kqxl185q+6Av35T0Tutt2WxQXR2Fl3HmmOQZJF7
IxgF501nXmZAlvqgUQkRi6j6BeWCU97Dt6Z7ZkEzjj0TBlYQlMLylzS8SxE+hQLF
gxVDNV5aBh1Cg35VUWKbzj9wC4cuRWWcceEirL+MjwfS3Swp7vgUAFxIhQohY5qd
NP3HLuHqOsmM0sP0rgzupP2XpGRe7m6PpdiPuZkeuHhiHWSoNOgsGzd4+ZKdMXlk
ETBiKjr3K40Mow==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:12 2025 by rpki-client