Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: cKaqCEpDCKL0e5VLkYIB75sZf4yhljCFuybV0mbZK+c=
Subject key identifier: 39:DB:8A:47:5B:63:5E:7A:ED:74:59:B7:8F:32:CF:6C:F0:52:80:56
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 019834CC11813AD6B19225A2F8C75FA39DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 019A
Signing time: Wed 23 Jul 2025 01:00:45 +0000
Manifest this update: Wed 23 Jul 2025 01:00:45 +0000
Manifest next update: Thu 24 Jul 2025 01:00:45 +0000
Files and hashes: 1: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (hash: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: BBAbeWc0W116UYzOuyk3lq5dc6Ti2XQW8leH4H3X2pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:cc:11:81:3a:d6:b1:92:25:a2:f8:c7:5f:a3:9d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Jul 23 01:00:45 2025 GMT
Not After : Jul 24 01:00:45 2025 GMT
Subject: CN=39db8a475b635e7aed7459b78f32cf6cf0528056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:c9:3c:9a:59:2c:6d:58:3a:5c:5c:8c:89:
3a:cb:48:5f:23:fd:8c:a9:0a:1d:c8:cf:68:26:4e:
c2:0e:3a:b3:0a:96:26:a3:30:26:d0:68:f0:cc:18:
01:33:0d:a6:56:cf:6e:ca:00:25:65:5c:8a:15:3d:
0a:23:1f:be:06:d1:d0:73:7f:91:ad:63:e7:f6:2e:
49:f2:77:5a:ca:df:bf:98:90:23:63:c5:06:4b:f1:
79:a2:22:c0:13:f8:5b:8e:87:7e:55:ea:0b:68:e9:
0f:ce:61:8e:22:df:6a:6c:b6:80:48:40:f2:ff:80:
00:ad:d6:64:97:46:ed:fb:2c:53:83:74:0f:d7:6a:
f6:fe:5f:f2:88:ba:68:fb:b3:ee:9c:3e:68:af:69:
a8:f1:ad:cb:4c:da:f4:ea:af:c5:7b:12:9e:2c:89:
65:84:ca:d7:88:6b:1e:84:17:33:92:9b:53:cb:83:
83:bd:a0:18:73:fe:7a:c0:84:2f:a4:cd:1c:ce:d9:
01:f9:8d:ce:03:85:fb:8e:e0:91:49:b3:b0:cb:8e:
51:25:2a:c1:be:48:32:21:77:e7:df:9b:25:51:72:
15:73:35:f8:98:41:14:16:ba:f5:57:0f:a9:6f:1e:
e4:90:c6:b0:8a:2b:d8:fa:71:70:b4:6e:e1:41:aa:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DB:8A:47:5B:63:5E:7A:ED:74:59:B7:8F:32:CF:6C:F0:52:80:56
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3e:af:89:a2:5a:0c:3c:23:a8:1e:50:30:a7:a1:b1:19:ea:
e4:e5:86:a4:af:97:75:2e:41:e8:2d:28:e6:2c:41:23:3b:81:
2e:1d:8b:97:40:79:9a:d6:b8:90:c8:d6:5d:5d:5a:7b:05:af:
2a:96:ec:2b:d3:d7:6b:3d:44:e4:ee:0f:bc:cd:2c:d3:b2:b0:
85:8a:f2:57:30:95:3d:a5:2f:1c:5c:ca:eb:b3:5d:08:d0:d7:
5a:42:90:53:98:63:11:14:47:22:b9:b4:06:36:2b:6f:3d:4a:
33:09:14:73:cd:cc:df:70:ec:45:ef:4d:68:87:e3:e1:bb:ba:
9f:aa:4d:a5:05:0e:e3:45:96:90:1f:b7:f3:fb:96:22:fe:57:
73:53:b2:03:91:65:e6:72:32:56:38:70:e4:94:6f:07:13:1b:
94:c4:20:fb:3b:2b:23:16:f6:99:15:1c:6c:aa:ed:7c:bb:b5:
ab:ae:d0:5b:6a:da:e3:45:4d:ec:ad:c8:9b:c8:ed:b3:bf:bf:
30:ee:a3:43:ed:4d:70:7a:40:8d:78:64:e2:bd:68:b4:e5:a7:
71:a5:e1:5b:b1:f4:34:3e:1d:e2:32:d9:dc:f5:a3:e6:ad:94:
b2:54:f7:e5:f9:c7:79:19:05:64:25:ae:76:30:11:6c:2f:3f:
21:86:1f:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg0zBGBOtaxkiWi+Mdfo52wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODE0NDBhMzY3YTM0ZDMwNmJjMGY2ODVhZTljZDg2OTUy
ZjdmOTUwHhcNMjUwNzIzMDEwMDQ1WhcNMjUwNzI0MDEwMDQ1WjAzMTEwLwYDVQQD
EygzOWRiOGE0NzViNjM1ZTdhZWQ3NDU5Yjc4ZjMyY2Y2Y2YwNTI4MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8zJPJpZLG1YOlxcjIk6y0hfI/2M
qQodyM9oJk7CDjqzCpYmozAm0GjwzBgBMw2mVs9uygAlZVyKFT0KIx++BtHQc3+R
rWPn9i5J8ndayt+/mJAjY8UGS/F5oiLAE/hbjod+VeoLaOkPzmGOIt9qbLaASEDy
/4AArdZkl0bt+yxTg3QP12r2/l/yiLpo+7PunD5or2mo8a3LTNr06q/FexKeLIll
hMrXiGsehBczkptTy4ODvaAYc/56wIQvpM0cztkB+Y3OA4X7juCRSbOwy45RJSrB
vkgyIXfn35slUXIVczX4mEEUFrr1Vw+pbx7kkMawiivY+nFwtG7hQarnowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnbikdbY1567XRZt48yz2zwUoBWMB8GA1UdIwQY
MBaAFIGBRAo2ejTTBrwPaFrpzYaVL3+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQt
NTU2OTFhNTY5NzIwLzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQtNTU2OTFhNTY5NzIw
LzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPD6viaJa
DDwjqB5QMKehsRnq5OWGpK+XdS5B6C0o5ixBIzuBLh2Ll0B5mta4kMjWXV1aewWv
KpbsK9PXaz1E5O4PvM0s07KwhYryVzCVPaUvHFzK67NdCNDXWkKQU5hjERRHIrm0
BjYrbz1KMwkUc83M33DsRe9NaIfj4bu6n6pNpQUO40WWkB+38/uWIv5Xc1OyA5Fl
5nIyVjhw5JRvBxMblMQg+zsrIxb2mRUcbKrtfLu1q67QW2ra40VN7K3Im8jts7+/
MO6jQ+1NcHpAjXhk4r1otOWncaXhW7H0ND4d4jLZ3PWj5q2UslT35fnHeRkFZCWu
djARbC8/IYYfJw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:06:36 2025 by rpki-client