Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
File: ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft (raw, json)
Hash identifier: 5PBRALySKWlW42azEYZM3HPlovTZ/VXpX2Umq6nC9pY=
Subject key identifier: F7:79:BF:B7:5E:F7:DB:C6:B0:9E:DE:78:20:47:1A:F6:65:0A:3F:26
Authority key identifier: 82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
Certificate issuer: /CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Certificate serial: 0198342912F368335FF1BA88EC547ED8D3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
Manifest number: 05E9
Signing time: Tue 22 Jul 2025 22:02:43 +0000
Manifest this update: Tue 22 Jul 2025 22:02:43 +0000
Manifest next update: Wed 23 Jul 2025 22:02:43 +0000
Files and hashes: 1: fdOHadbduUc9htmWTS-jPq_zv2U.roa (hash: gZYnTf+6Tdj5UA3epTVfXJljvvit6fFaXTM2YVnS+ZA=)
2: ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl (hash: 3sw0yTBcAOvLU0Z6/nQQAxvb36el7wDUSlDMIlGaxLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:29:12:f3:68:33:5f:f1:ba:88:ec:54:7e:d8:d3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Validity
Not Before: Jul 22 22:02:43 2025 GMT
Not After : Jul 23 22:02:43 2025 GMT
Subject: CN=f779bfb75ef7dbc6b09ede7820471af6650a3f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:a8:ba:40:91:6c:93:32:4d:4a:df:fb:53:
fe:9f:c3:7f:63:c2:f3:4d:9f:b0:84:09:e2:92:3b:
ed:63:39:6a:df:10:ed:b8:62:19:98:5e:1d:20:43:
dd:8f:de:59:27:fa:3c:1b:4e:2e:81:3e:ac:7c:4f:
30:16:bb:56:14:05:f5:ea:f3:9c:12:cc:a4:c0:de:
6d:51:32:e4:21:2a:b6:29:11:0d:3f:e5:cd:65:b5:
8a:8b:5d:32:5f:d0:99:db:fa:f9:9a:3c:6c:eb:3c:
3c:f4:fa:01:6e:24:d3:30:24:96:a9:39:c9:11:8a:
5f:a5:99:07:8c:6a:ad:95:1e:94:51:48:cc:32:97:
86:6f:95:1c:bf:3c:e5:64:fc:6f:0c:f7:4c:9f:2d:
2a:a6:c3:a2:38:f6:56:e2:29:46:ad:12:1f:34:ae:
41:60:95:d9:3a:22:19:23:c2:02:11:60:4a:d5:50:
b3:d2:ff:03:97:4d:43:60:37:91:35:9d:e9:30:a7:
9c:cd:c3:15:d1:c6:4e:fc:0c:ef:07:58:90:09:8e:
6d:07:88:86:9f:84:10:9f:41:d9:77:fe:b4:c3:56:
c9:4d:07:db:13:99:8a:33:12:a9:20:89:cc:0c:d2:
44:27:7c:c0:25:a0:8f:88:da:d8:67:1d:5f:fe:9f:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:79:BF:B7:5E:F7:DB:C6:B0:9E:DE:78:20:47:1A:F6:65:0A:3F:26
X509v3 Authority Key Identifier:
keyid:82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:82:ec:c6:17:d5:98:dd:ff:da:79:74:11:ed:7c:b2:c8:cd:
a4:39:3d:f9:a7:42:1d:a9:0e:66:70:7c:38:0b:46:5e:46:be:
80:d2:9e:5e:89:1d:9c:22:16:d1:80:ea:9f:a7:0c:86:5f:36:
31:ee:bd:f2:3f:1d:4d:c8:49:b6:2e:2f:7f:20:6c:e9:69:17:
57:87:33:9b:b5:0a:69:eb:92:5f:c3:e9:a3:ec:24:ff:3b:50:
aa:48:24:d0:ab:de:f6:37:17:9f:c2:76:e0:46:ae:75:1e:cc:
e3:ad:70:fd:1a:94:5a:be:87:d0:94:9d:7a:b4:b3:29:6c:3f:
a4:fb:e8:ae:90:22:b9:65:f5:68:50:05:d5:79:46:69:e9:13:
35:84:2b:14:f8:7e:21:74:4a:7c:5f:5f:4c:58:b5:3d:02:ae:
aa:3a:8b:b6:bc:ab:b4:30:7b:07:15:19:a3:53:1c:07:50:24:
28:4b:7b:a5:60:53:86:19:61:aa:f3:4e:ad:d7:26:c8:1e:bb:
7e:cc:34:13:1b:18:56:23:c9:76:c3:5d:3c:79:c6:90:42:87:
9f:96:90:a8:b7:bd:3f:fb:b6:79:1f:32:64:ae:64:0c:6a:a9:
3e:46:2f:70:4a:7d:d8:45:7c:7b:96:e4:12:20:5d:c9:6e:84:
a1:57:30:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg0KRLzaDNf8bqI7FR+2NO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMTIxOTQ2OWM2ZGY3NmNmNDc2ZjI3NGNkY2YyN2U1MmY4
ZjBkZjgwHhcNMjUwNzIyMjIwMjQzWhcNMjUwNzIzMjIwMjQzWjAzMTEwLwYDVQQD
EyhmNzc5YmZiNzVlZjdkYmM2YjA5ZWRlNzgyMDQ3MWFmNjY1MGEzZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO6oukCRbJMyTUrf+1P+n8N/Y8Lz
TZ+whAnikjvtYzlq3xDtuGIZmF4dIEPdj95ZJ/o8G04ugT6sfE8wFrtWFAX16vOc
EsykwN5tUTLkISq2KRENP+XNZbWKi10yX9CZ2/r5mjxs6zw89PoBbiTTMCSWqTnJ
EYpfpZkHjGqtlR6UUUjMMpeGb5UcvzzlZPxvDPdMny0qpsOiOPZW4ilGrRIfNK5B
YJXZOiIZI8ICEWBK1VCz0v8Dl01DYDeRNZ3pMKeczcMV0cZO/AzvB1iQCY5tB4iG
n4QQn0HZd/60w1bJTQfbE5mKMxKpIInMDNJEJ3zAJaCPiNrYZx1f/p80YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPd5v7de99vGsJ7eeCBHGvZlCj8mMB8GA1UdIwQY
MBaAFIISGUacbfds9HbydM3PJ+Uvjw34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2hJWlJweHQ5MnowZHZKMHpjOG41Uy1QRGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hMWExMWQtMTFmYi00NDI0LThjZDQt
MGRhYTA3MDRiOTkyLzEvZ2hJWlJweHQ5MnowZHZKMHpjOG41Uy1QRGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hMWExMWQtMTFmYi00NDI0LThjZDQtMGRhYTA3MDRiOTky
LzEvZ2hJWlJweHQ5MnowZHZKMHpjOG41Uy1QRGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYLsxhfV
mN3/2nl0Ee18ssjNpDk9+adCHakOZnB8OAtGXka+gNKeXokdnCIW0YDqn6cMhl82
Me698j8dTchJti4vfyBs6WkXV4czm7UKaeuSX8Ppo+wk/ztQqkgk0Kve9jcXn8J2
4EaudR7M461w/RqUWr6H0JSderSzKWw/pPvorpAiuWX1aFAF1XlGaekTNYQrFPh+
IXRKfF9fTFi1PQKuqjqLtryrtDB7BxUZo1McB1AkKEt7pWBThhlhqvNOrdcmyB67
fsw0ExsYViPJdsNdPHnGkEKHn5aQqLe9P/u2eR8yZK5kDGqpPkYvcEp92EV8e5bk
EiBdyW6EoVcwFA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:05:43 2025 by rpki-client