Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: JT3fzpIDYQNuxDg9pRRqLx3D6s0pvBJ/yi/ro/8QJgI=
Subject key identifier: 32:9C:EE:FE:5A:0C:14:82:0C:50:05:E1:9A:FE:62:37:45:0C:DB:4A
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 019848F77E17BE523A0ED16B01A557D1917A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: A7
Signing time: Sat 26 Jul 2025 23:00:35 +0000
Manifest this update: Sat 26 Jul 2025 23:00:35 +0000
Manifest next update: Sun 27 Jul 2025 23:00:35 +0000
Files and hashes: 1: 9PkegdPcOVaHYch8whuUGhkGOzc.roa (hash: nTpt8kDLjSLrMGR0C/m0j9Ftj77WGzhvL7KxFH3u7Z8=)
2: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: U3Ml79u1wmWYxJIt+MmfmNBKWMIurH1d86afTYceftE=)
3: mo525hECNfAEonllRKyyBVCuVuY.roa (hash: a5b0LUZ9waSvhihXnwQQ6mCuKjGwIDzPkvhonuJ3oDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:7e:17:be:52:3a:0e:d1:6b:01:a5:57:d1:91:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Jul 26 23:00:35 2025 GMT
Not After : Jul 27 23:00:35 2025 GMT
Subject: CN=329ceefe5a0c14820c5005e19afe6237450cdb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:20:1d:c8:f8:46:b3:69:77:dc:86:05:6a:
8e:8e:40:4b:9d:38:3b:23:d9:bc:de:c8:d6:ab:6e:
be:94:e0:d6:c3:56:a3:cc:33:23:06:cf:3f:2a:03:
50:65:7e:76:05:bd:76:56:65:fb:a2:61:a5:55:1e:
99:f5:79:0e:f0:97:2f:96:59:c3:98:08:b0:54:14:
e6:59:23:54:f4:18:4b:eb:aa:dd:f5:4d:ad:3b:f2:
b1:8b:48:6b:d5:13:e4:9f:90:5f:15:59:cf:85:70:
c3:b2:6c:69:0e:b9:86:bf:6b:58:14:ac:7a:45:19:
e0:af:7f:be:08:5a:a9:31:b6:ea:6f:f7:55:c2:ea:
7b:7e:79:d7:8b:e0:7d:0f:38:0e:d5:a2:fb:8a:45:
46:58:8b:90:be:bc:df:90:20:83:b7:09:a1:af:a3:
a6:de:ab:5a:d9:6a:72:c4:e3:cc:46:56:01:c1:8b:
3d:e8:cb:35:92:59:89:88:03:82:f1:ec:18:25:c4:
c7:fe:3c:a3:86:2c:ed:86:c7:3b:b7:80:f1:6c:8d:
54:d9:06:a6:06:a6:68:74:ea:7f:31:c2:9c:b1:12:
c8:da:68:a7:57:c8:2a:9d:2e:c5:d4:99:c3:f7:88:
2b:dc:2a:98:d8:ab:fb:b2:62:e3:5f:dd:ba:9b:5b:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9C:EE:FE:5A:0C:14:82:0C:50:05:E1:9A:FE:62:37:45:0C:DB:4A
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2a:96:b9:e7:64:43:4f:d2:3f:28:11:d3:39:ba:3d:58:d7:
d3:96:10:37:f4:de:e3:3d:32:3f:9d:1c:74:93:86:a3:91:26:
69:20:53:1a:c3:48:50:30:33:5f:1d:44:ae:78:4f:7e:eb:81:
15:30:32:ba:f8:53:06:3c:33:b8:7f:e5:48:84:40:f3:84:45:
28:53:27:ea:8a:94:14:05:07:14:db:68:43:31:84:23:ac:f3:
a1:22:05:d8:02:6f:49:41:65:3c:3d:17:87:a7:13:b6:05:2c:
e6:db:c3:a5:ff:d0:a9:ad:6e:1e:4f:ff:cc:cb:08:08:b8:50:
5c:46:68:0b:c6:c1:cd:79:ee:74:a4:c0:3f:ae:da:71:08:23:
e1:ed:d5:18:30:21:5e:4f:81:c9:c5:bf:8b:3f:ad:3b:59:21:
4c:5d:2c:bb:6a:88:46:2e:34:a6:5d:d5:de:95:30:92:72:ae:
9d:13:35:b9:da:d1:b8:2b:37:1e:af:25:09:b7:a0:9d:b5:6f:
61:b0:80:18:61:f9:7e:ba:53:ec:cb:24:b4:cd:4d:32:5c:cc:
03:d6:e1:39:33:ff:ba:27:de:2d:a5:01:1e:ec:15:78:89:e5:
b0:93:31:d5:a2:42:60:18:fb:64:10:1a:62:1e:82:4f:de:1e:
21:3b:86:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI934XvlI6DtFrAaVX0ZF6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGUxMGE5NTZmYTUyNTE2ZThmZDNiOTMxOGU4NGE1NTM4
M2Q2MmIwHhcNMjUwNzI2MjMwMDM1WhcNMjUwNzI3MjMwMDM1WjAzMTEwLwYDVQQD
EygzMjljZWVmZTVhMGMxNDgyMGM1MDA1ZTE5YWZlNjIzNzQ1MGNkYjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ0gHcj4RrNpd9yGBWqOjkBLnTg7
I9m83sjWq26+lODWw1ajzDMjBs8/KgNQZX52Bb12VmX7omGlVR6Z9XkO8JcvllnD
mAiwVBTmWSNU9BhL66rd9U2tO/Kxi0hr1RPkn5BfFVnPhXDDsmxpDrmGv2tYFKx6
RRngr3++CFqpMbbqb/dVwup7fnnXi+B9DzgO1aL7ikVGWIuQvrzfkCCDtwmhr6Om
3qta2WpyxOPMRlYBwYs96Ms1klmJiAOC8ewYJcTH/jyjhizthsc7t4DxbI1U2Qam
BqZodOp/McKcsRLI2minV8gqnS7F1JnD94gr3CqY2Kv7smLjX926m1tFIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKc7v5aDBSCDFAF4Zr+YjdFDNtKMB8GA1UdIwQY
MBaAFBlOEKlW+lJRbo/TuTGOhKVTg9YrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDct
NTFmMDc3ZjMwZDNmLzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDctNTFmMDc3ZjMwZDNm
LzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCqWuedk
Q0/SPygR0zm6PVjX05YQN/Te4z0yP50cdJOGo5EmaSBTGsNIUDAzXx1ErnhPfuuB
FTAyuvhTBjwzuH/lSIRA84RFKFMn6oqUFAUHFNtoQzGEI6zzoSIF2AJvSUFlPD0X
h6cTtgUs5tvDpf/Qqa1uHk//zMsICLhQXEZoC8bBzXnudKTAP67acQgj4e3VGDAh
Xk+BycW/iz+tO1khTF0su2qIRi40pl3V3pUwknKunRM1udrRuCs3Hq8lCbegnbVv
YbCAGGH5frpT7MsktM1NMlzMA9bhOTP/uifeLaUBHuwVeInlsJMx1aJCYBj7ZBAa
Yh6CT94eITuGdQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:38 2025 by rpki-client