Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
File: GYOwLhDKghv-G-bnUdks9z1tTAs.mft (raw, json)
Hash identifier: ZCfGnt9mKzrg4LSWfG5QODw28n8kwUpBkbSDX7SnqQ0=
Subject key identifier: 14:B5:1C:B5:EC:06:E4:B1:23:DD:85:AA:7C:1B:63:C4:A2:EA:C2:41
Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
Certificate issuer: /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Certificate serial: 019864DCF74623EF5810897DCEEE3B58759E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
Manifest number: 0921
Signing time: Fri 01 Aug 2025 09:00:59 +0000
Manifest this update: Fri 01 Aug 2025 09:00:59 +0000
Manifest next update: Sat 02 Aug 2025 09:00:59 +0000
Files and hashes: 1: GYOwLhDKghv-G-bnUdks9z1tTAs.crl (hash: cHz3hUHB19LPU2v41BagzHJ3xBVRH+o3UKKFc+I2EyE=)
2: Ni5vtm0M3bjCTeGdNSnDAVszYLE.roa (hash: OME01+LPKlOdHdZ6RncStdMa9nK9uQNDcVGUK02vlcM=)
3: UN74uc5YlLqW_undi6fagl4jLqE.roa (hash: T8wwQEk35bUytAqstSvFlsiKKzh4r6h8H/xSeUZvLig=)
4: YRiImFoNZVxU37wmm_1wL-_QqNY.roa (hash: xKbt/nH87U6XbMkmr2VvoP8n6E36rmfBqZRV+O9xVJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:dc:f7:46:23:ef:58:10:89:7d:ce:ee:3b:58:75:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Validity
Not Before: Aug 1 09:00:59 2025 GMT
Not After : Aug 2 09:00:59 2025 GMT
Subject: CN=14b51cb5ec06e4b123dd85aa7c1b63c4a2eac241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:f6:97:a3:5b:73:b8:94:23:89:69:02:72:
a9:77:f6:88:36:a8:93:59:28:71:9b:f7:f1:a7:6b:
ec:86:74:22:f2:52:e1:56:8e:ab:e4:b5:1e:3c:fb:
f7:99:1c:ac:ec:d2:8d:81:4f:fb:2c:33:70:d2:c6:
a7:18:a2:8c:54:70:8f:9e:09:19:a1:0e:34:bf:45:
d3:c3:95:08:75:4f:67:22:38:71:d3:0e:8b:4a:a1:
93:95:4d:95:13:c8:69:fb:e0:8c:6d:a0:3a:f7:3a:
a6:22:a0:9e:e0:dc:87:8e:68:38:4c:75:5e:a2:e7:
fb:74:db:3c:79:46:0f:eb:24:c9:e2:e1:26:8c:93:
7d:5d:9f:9e:f6:f7:70:b5:e6:f6:b1:fc:d9:48:89:
3f:e4:3f:59:d3:26:92:2e:5d:06:dc:23:61:68:84:
d5:88:e2:86:1b:8a:7b:e7:46:d1:f5:f6:b9:28:94:
1a:69:a8:61:c6:43:18:75:21:d6:88:90:45:5b:69:
3e:66:15:47:ea:49:96:94:10:49:d9:ae:00:6b:d6:
65:3c:f0:55:72:c4:cd:75:24:e9:53:57:49:8e:b4:
d7:09:07:81:ce:18:1d:10:7e:8f:ef:64:eb:b7:dd:
c4:0d:6c:b0:e8:38:eb:46:d6:de:70:17:9c:db:39:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B5:1C:B5:EC:06:E4:B1:23:DD:85:AA:7C:1B:63:C4:A2:EA:C2:41
X509v3 Authority Key Identifier:
keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:22:8f:16:c0:ee:5a:53:34:2b:a8:73:a7:34:99:7b:cf:35:
30:48:cf:ae:e5:89:c3:92:eb:9b:00:32:d6:df:b7:b5:c9:ff:
8f:35:a1:db:df:5a:82:a4:73:6f:ab:be:53:cc:cb:8d:dd:48:
df:7b:5c:a5:08:03:24:ee:6d:73:96:5f:e8:ac:5e:97:90:ce:
1c:ac:9a:4e:64:e1:8d:9b:59:36:f0:f5:ee:cc:af:6f:b3:7a:
60:45:f8:75:ff:1a:25:48:87:10:ac:12:2e:2e:7c:8d:6b:bd:
f4:84:d6:f2:66:39:6d:38:5f:3b:21:87:74:7a:6e:95:8f:3c:
71:4e:3c:aa:76:80:06:f3:2e:be:12:09:5c:d0:0c:26:1c:5e:
b6:9e:f4:af:e7:1d:65:82:76:d0:8b:48:c7:2a:66:0f:d8:0e:
3d:28:c9:4a:6e:d4:f3:eb:d3:03:d7:8c:40:8b:51:f4:53:53:
8e:61:fe:e3:8f:ab:59:ab:ca:27:1b:23:06:5f:a6:e3:c0:3e:
17:10:3f:bc:b5:61:85:d4:a5:5f:b3:c9:93:a9:33:37:36:3e:
f1:dd:f8:68:2b:bb:64:3a:d5:e3:b0:c3:c4:70:ff:73:0b:87:
ee:97:b4:c8:00:0c:22:10:71:19:41:cc:4d:5c:0f:b8:bd:c3:
b6:e3:c6:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhk3PdGI+9YEIl9zu47WHWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODNiMDJlMTBjYTgyMWJmZTFiZTZlNzUxZDkyY2Y3M2Q2
ZDRjMGIwHhcNMjUwODAxMDkwMDU5WhcNMjUwODAyMDkwMDU5WjAzMTEwLwYDVQQD
EygxNGI1MWNiNWVjMDZlNGIxMjNkZDg1YWE3YzFiNjNjNGEyZWFjMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwf2l6Nbc7iUI4lpAnKpd/aINqiT
WShxm/fxp2vshnQi8lLhVo6r5LUePPv3mRys7NKNgU/7LDNw0sanGKKMVHCPngkZ
oQ40v0XTw5UIdU9nIjhx0w6LSqGTlU2VE8hp++CMbaA69zqmIqCe4NyHjmg4THVe
ouf7dNs8eUYP6yTJ4uEmjJN9XZ+e9vdwteb2sfzZSIk/5D9Z0yaSLl0G3CNhaITV
iOKGG4p750bR9fa5KJQaaahhxkMYdSHWiJBFW2k+ZhVH6kmWlBBJ2a4Aa9ZlPPBV
csTNdSTpU1dJjrTXCQeBzhgdEH6P72Trt93EDWyw6DjrRtbecBec2zm8XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBS1HLXsBuSxI92FqnwbY8Si6sJBMB8GA1UdIwQY
MBaAFBmDsC4QyoIb/hvm51HZLPc9bUwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEt
Y2RhMzYyNTYyOTZjLzEvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEtY2RhMzYyNTYyOTZj
LzEvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCKPFsDu
WlM0K6hzpzSZe881MEjPruWJw5LrmwAy1t+3tcn/jzWh299agqRzb6u+U8zLjd1I
33tcpQgDJO5tc5Zf6Kxel5DOHKyaTmThjZtZNvD17syvb7N6YEX4df8aJUiHEKwS
Li58jWu99ITW8mY5bThfOyGHdHpulY88cU48qnaABvMuvhIJXNAMJhxetp70r+cd
ZYJ20ItIxypmD9gOPSjJSm7U8+vTA9eMQItR9FNTjmH+44+rWavKJxsjBl+m48A+
FxA/vLVhhdSlX7PJk6kzNzY+8d34aCu7ZDrV47DDxHD/cwuH7pe0yAAMIhBxGUHM
TVwPuL3DtuPGYw==
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:19:18 2025 by rpki-client