Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier: 8hwUqq06ihvhe1whEUStN1Dq77lMxny6iwMe2wG0hIs=
Subject key identifier: 32:AD:AF:E1:92:E0:89:E5:28:5B:B3:26:07:81:4A:58:DF:BB:F1:2A
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 019853440F1EAB47E6B247939CD8864CC84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number: 160D
Signing time: Mon 28 Jul 2025 23:00:25 +0000
Manifest this update: Mon 28 Jul 2025 23:00:25 +0000
Manifest next update: Tue 29 Jul 2025 23:00:25 +0000
Files and hashes: 1: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (hash: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=)
2: XtfrcY0xGbaYSlWTXL9nm2Diii0.roa (hash: aEZWDKAQcPeSAXKY4jWlj23Ulwbg4fWY9kpGKgMl9kU=)
3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: Hj1Atl0w5WEQFh1302LhrAT138hK7vWnAIbFhEP8WPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:0f:1e:ab:47:e6:b2:47:93:9c:d8:86:4c:c8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Jul 28 23:00:25 2025 GMT
Not After : Jul 29 23:00:25 2025 GMT
Subject: CN=32adafe192e089e5285bb32607814a58dfbbf12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:d2:90:81:60:01:df:dd:2f:80:0a:86:6c:
84:7e:d9:ec:53:46:14:7e:37:de:90:aa:ef:83:74:
05:7d:dd:bb:8d:83:a7:c4:60:0d:10:ff:df:e9:d6:
14:0f:84:23:22:80:67:ed:38:a6:2f:01:23:8c:de:
71:e7:d5:4d:70:35:fd:f5:cf:55:f8:cf:1d:1d:f3:
ad:d1:07:df:13:28:73:8c:df:d4:2b:a7:4b:01:f4:
6d:54:07:81:2f:d5:cc:d2:63:d2:e1:f7:37:0a:b3:
c1:0a:fd:e8:92:3a:19:e1:31:dd:5c:59:d6:86:17:
dc:42:9a:59:7c:ff:d3:8d:7d:45:3f:76:f6:17:57:
87:69:fd:56:c3:19:9c:6d:45:dc:b4:78:fc:1d:97:
74:fb:73:e4:22:d1:22:fb:f8:94:70:a2:46:fc:13:
18:df:03:95:f0:49:96:05:e2:b9:50:45:c7:05:be:
61:df:b7:4e:f8:ae:2b:a3:9c:38:e3:3b:17:1e:5d:
ad:6e:c3:f6:c7:8c:5a:c3:de:24:e1:ca:61:e0:c3:
a5:c4:71:c5:0e:55:32:02:46:64:d9:58:aa:3c:4c:
0b:eb:51:4e:38:78:b4:1e:48:5e:c8:18:d4:6a:65:
b4:41:45:b8:ed:a4:05:76:b1:b2:38:b2:0a:59:95:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AD:AF:E1:92:E0:89:E5:28:5B:B3:26:07:81:4A:58:DF:BB:F1:2A
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:42:9f:88:51:c1:46:db:cd:c9:21:8d:f0:2f:63:53:d2:e5:
c1:1a:20:2f:a9:06:f0:21:b6:20:95:34:bf:f3:6d:9e:64:4d:
65:41:ef:88:3a:a8:2f:d7:10:e6:74:6d:99:79:60:6c:f4:3c:
37:1a:97:b0:1e:e6:9f:43:1c:5f:1c:2f:ec:4b:95:40:d8:23:
b8:94:9f:05:a4:52:de:7e:0e:6e:b9:df:1e:d1:bb:73:11:ab:
11:28:49:5b:40:dd:d5:b1:bd:1d:d4:40:6d:90:b4:a3:a1:e5:
db:63:ef:13:7a:a8:01:ae:60:92:aa:16:72:13:ee:59:44:61:
31:e0:6c:0a:17:97:15:40:d8:6e:9f:e9:2e:01:66:9d:bb:47:
4f:d0:f1:65:8f:c4:10:3e:17:21:fe:63:f8:9b:92:44:f7:c0:
e9:98:04:0f:9f:9f:cd:48:4c:60:93:d6:66:ec:7e:45:82:46:
0c:d0:fc:90:0f:91:4d:7d:ef:79:ea:b9:15:46:de:49:a6:8c:
75:d4:ea:fb:25:86:04:5c:95:c9:4e:f3:d7:46:74:4b:0c:83:
9e:18:df:09:52:5d:d2:97:b4:38:04:77:68:f2:90:ee:e1:5f:
07:bc:54:70:a1:91:d8:08:4f:e2:f2:34:48:75:6b:14:4d:f3:
85:95:ca:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRA8eq0fmskeTnNiGTMhNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjlkOWZmZTA0OGE3MDAwM2YxNmYwNmUyNGQ5YmYyZGI4
NWViNTIwHhcNMjUwNzI4MjMwMDI1WhcNMjUwNzI5MjMwMDI1WjAzMTEwLwYDVQQD
EygzMmFkYWZlMTkyZTA4OWU1Mjg1YmIzMjYwNzgxNGE1OGRmYmJmMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5TSkIFgAd/dL4AKhmyEftnsU0YU
fjfekKrvg3QFfd27jYOnxGANEP/f6dYUD4QjIoBn7TimLwEjjN5x59VNcDX99c9V
+M8dHfOt0QffEyhzjN/UK6dLAfRtVAeBL9XM0mPS4fc3CrPBCv3okjoZ4THdXFnW
hhfcQppZfP/TjX1FP3b2F1eHaf1WwxmcbUXctHj8HZd0+3PkItEi+/iUcKJG/BMY
3wOV8EmWBeK5UEXHBb5h37dO+K4ro5w44zsXHl2tbsP2x4xaw94k4cph4MOlxHHF
DlUyAkZk2ViqPEwL61FOOHi0HkheyBjUamW0QUW47aQFdrGyOLIKWZVNwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKtr+GS4InlKFuzJgeBSljfu/EqMB8GA1UdIwQY
MBaAFIBp2f/gSKcAA/FvBuJNm/LbhetSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWIt
ZTAyMmUzMDA5YTcxLzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWItZTAyMmUzMDA5YTcx
LzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEKfiFHB
RtvNySGN8C9jU9LlwRogL6kG8CG2IJU0v/NtnmRNZUHviDqoL9cQ5nRtmXlgbPQ8
NxqXsB7mn0McXxwv7EuVQNgjuJSfBaRS3n4ObrnfHtG7cxGrEShJW0Dd1bG9HdRA
bZC0o6Hl22PvE3qoAa5gkqoWchPuWURhMeBsCheXFUDYbp/pLgFmnbtHT9DxZY/E
ED4XIf5j+JuSRPfA6ZgED5+fzUhMYJPWZux+RYJGDND8kA+RTX3veeq5FUbeSaaM
ddTq+yWGBFyVyU7z10Z0SwyDnhjfCVJd0pe0OAR3aPKQ7uFfB7xUcKGR2AhP4vI0
SHVrFE3zhZXKDg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:41:19 2025 by rpki-client