Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier: 8jyMBv6NeOgcLIZu2yNHSCYNIAEc4KD58usJggFH4Cg=
Subject key identifier: 7A:6C:D4:07:45:59:2B:6F:15:D5:2C:1B:86:EE:8F:5D:02:DE:EB:22
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 01984A77F2974127F6DBFC8F02EBA47A1623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 06:00:31 +0000
Manifest this update: Sun 27 Jul 2025 06:00:31 +0000
Manifest next update: Mon 28 Jul 2025 06:00:31 +0000
Files and hashes: 1: 1-KYSj48sD3jE1Gzvv9kFu9QJGtY.roa (hash: H4x96iKua2b3UDRaB1WSf9rakbeSZ8QQwLawXzA3kBc=)
2: kroCcDuLJiEm7WFd8GtQQzKukrk.roa (hash: C4/C9Nc89baYiSQf8o8T95z101LyK5Fm6SS+L143NqQ=)
3: oWikPPO3V0QeY0v8vBGwReraGUs.roa (hash: xHZgaltZECGHYZXkWizrY9iMMJdCdaYUNGOTHUNFxDM=)
4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: tqhV0IEPJljexjFhaVGWRutS87nvM1hv+pHsqetS6m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:f2:97:41:27:f6:db:fc:8f:02:eb:a4:7a:16:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Jul 27 06:00:31 2025 GMT
Not After : Jul 28 06:00:31 2025 GMT
Subject: CN=7a6cd40745592b6f15d52c1b86ee8f5d02deeb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:57:ca:66:b4:c2:9a:e2:1d:ea:6b:1b:a1:
c6:89:47:2f:bb:e8:3d:ae:e6:84:21:8b:2d:07:9d:
5b:7b:f2:f0:21:4c:a4:ab:9a:74:15:e8:70:55:87:
02:39:ad:05:f0:f3:1c:37:36:91:95:90:56:e6:c1:
d9:43:5b:b1:64:44:95:c3:a6:66:52:33:25:4b:a0:
b5:48:9c:81:8e:65:91:f9:d3:fa:b5:f2:4d:b9:27:
7f:fc:2b:b4:f6:e7:64:6a:71:da:90:37:ee:bc:08:
37:4f:a1:00:51:31:d6:aa:37:51:cc:93:22:65:79:
98:31:cd:1d:1e:ab:a4:0e:03:1d:a5:e7:e2:10:40:
1e:c4:a8:90:10:6f:a7:74:29:cc:80:a1:25:fa:de:
87:1d:87:d9:c2:78:97:aa:83:3e:a1:5c:38:9b:2e:
36:c5:75:cb:c4:6a:87:1d:b0:15:7e:40:c1:69:f1:
56:3e:78:aa:ef:07:58:9b:a6:f2:82:a6:d7:98:77:
65:1c:5d:1a:e2:9f:5d:48:fe:0b:f5:df:6a:b6:6e:
90:bb:ad:d4:62:0c:e9:7e:c6:29:cc:56:9c:ec:85:
87:8c:46:ef:d6:f4:76:59:6a:81:06:ff:2c:10:bb:
46:2d:1f:57:a7:b6:83:63:d3:37:db:8b:42:f1:11:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6C:D4:07:45:59:2B:6F:15:D5:2C:1B:86:EE:8F:5D:02:DE:EB:22
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3c:32:64:70:15:7b:ab:55:98:c8:47:df:d3:79:48:dd:33:
0c:0d:a0:78:79:de:ad:b7:5a:8c:0b:39:f7:32:a9:fa:a2:06:
fd:3a:3a:c8:20:4c:7b:af:55:15:e4:35:f0:52:da:e6:be:a2:
54:02:62:1c:35:e8:b4:ee:cc:f6:1f:f0:ab:09:85:c1:4d:6a:
30:0e:28:05:0e:dc:f8:3c:8c:27:e6:f5:53:75:90:b0:f2:74:
27:a5:a8:3c:36:25:d7:f5:be:82:27:d1:ad:c9:ab:9f:71:92:
8d:ce:2e:35:90:67:69:77:29:a5:e4:50:7d:c7:e0:9e:af:85:
ad:a4:a8:06:cf:91:58:3a:ed:00:0c:90:b1:dc:fd:ee:b0:d2:
b4:a3:65:a4:b3:17:8f:3f:b8:30:be:dc:e2:eb:01:27:4c:b0:
35:af:d6:0f:60:f1:80:3a:f0:a9:cc:76:6c:83:8a:12:a9:c5:
5c:33:c9:15:a6:42:9d:3c:29:8b:41:fe:03:64:6a:f8:ca:c3:
3a:6e:c5:67:54:2d:67:df:7c:01:58:a2:6a:e3:67:11:ea:dd:
65:77:29:6c:46:c7:e8:b0:99:65:a4:31:e9:1a:62:ea:1c:92:
79:4f:7d:26:ad:f2:3d:bf:56:0d:21:fc:53:12:31:72:5e:59:
2e:ab:72:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd/KXQSf22/yPAuukehYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MmZjNjBkMzZlMjhiYjhkZjE0NWM4NGFjYWIxOWNmYTUz
YjAyNWEwHhcNMjUwNzI3MDYwMDMxWhcNMjUwNzI4MDYwMDMxWjAzMTEwLwYDVQQD
Eyg3YTZjZDQwNzQ1NTkyYjZmMTVkNTJjMWI4NmVlOGY1ZDAyZGVlYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt5Xyma0wpriHeprG6HGiUcvu+g9
ruaEIYstB51be/LwIUykq5p0FehwVYcCOa0F8PMcNzaRlZBW5sHZQ1uxZESVw6Zm
UjMlS6C1SJyBjmWR+dP6tfJNuSd//Cu09udkanHakDfuvAg3T6EAUTHWqjdRzJMi
ZXmYMc0dHqukDgMdpefiEEAexKiQEG+ndCnMgKEl+t6HHYfZwniXqoM+oVw4my42
xXXLxGqHHbAVfkDBafFWPniq7wdYm6bygqbXmHdlHF0a4p9dSP4L9d9qtm6Qu63U
YgzpfsYpzFac7IWHjEbv1vR2WWqBBv8sELtGLR9Xp7aDY9M324tC8RFcowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHps1AdFWStvFdUsG4buj10C3usiMB8GA1UdIwQY
MBaAFKUvxg024ou43xRchKyrGc+lOwJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTct
OWI0YTJkNWYzYTc2LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTctOWI0YTJkNWYzYTc2
LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjwyZHAV
e6tVmMhH39N5SN0zDA2geHnerbdajAs59zKp+qIG/To6yCBMe69VFeQ18FLa5r6i
VAJiHDXotO7M9h/wqwmFwU1qMA4oBQ7c+DyMJ+b1U3WQsPJ0J6WoPDYl1/W+gifR
rcmrn3GSjc4uNZBnaXcppeRQfcfgnq+FraSoBs+RWDrtAAyQsdz97rDStKNlpLMX
jz+4ML7c4usBJ0ywNa/WD2DxgDrwqcx2bIOKEqnFXDPJFaZCnTwpi0H+A2Rq+MrD
Om7FZ1QtZ998AViiauNnEerdZXcpbEbH6LCZZaQx6Rpi6hySeU99Jq3yPb9WDSH8
UxIxcl5ZLqty3g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:05 2025 by rpki-client