Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: Rvhf8XjLCemWU2Zb0u0R9JZt7KiAA76JbUf3rFiuXzY=
Subject key identifier: EE:AC:49:0F:78:B9:53:C1:82:9E:A8:DE:83:DC:DF:D2:9C:5F:55:C9
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 01984475D5CD92549E6CAC4440AB5934FFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 07E3
Signing time: Sat 26 Jul 2025 02:00:29 +0000
Manifest this update: Sat 26 Jul 2025 02:00:29 +0000
Manifest next update: Sun 27 Jul 2025 02:00:29 +0000
Files and hashes: 1: 8np8dFC03aZy-NSvKyaibYkoD2c.roa (hash: yH2zRDSO2w0uHZTYPQwRFl05v2muoqWJ+Z0OUk1oMhY=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: O4zhZMQNbPZeFB6JVSZlfF59eJK6pkFXM+9SktbqJi8=)
3: dl7fBf_Q9iWR2RTbgzduCGEsnu0.roa (hash: eVfjDssVSwbldy+Bqk+kwlieiStmiWJtJAkqUXW89hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:d5:cd:92:54:9e:6c:ac:44:40:ab:59:34:ff:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Jul 26 02:00:29 2025 GMT
Not After : Jul 27 02:00:29 2025 GMT
Subject: CN=eeac490f78b953c1829ea8de83dcdfd29c5f55c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:13:5b:ef:3d:96:c1:20:01:23:ae:50:25:
52:e3:ba:6d:6b:5f:19:be:06:b5:ce:03:fe:98:e1:
24:db:4b:3d:f9:0f:7b:af:25:e6:a2:50:c7:df:ac:
2f:93:ca:6c:f1:e0:18:33:f5:d9:d3:86:70:7a:f4:
5a:bc:66:3b:6c:ba:0b:40:98:a4:ad:16:5f:83:98:
9c:e3:3f:de:21:ed:57:ca:f4:6d:cb:6f:be:9d:e6:
90:eb:de:7a:b9:07:cf:69:e1:99:fa:f2:99:80:e6:
cf:4a:4a:df:d3:fb:f2:81:3d:5e:e5:79:62:96:01:
96:3a:3d:47:78:67:87:59:3b:05:79:70:8e:4b:1f:
91:9e:80:45:0d:ac:b5:ab:5d:a4:2f:8b:03:6d:a8:
b7:de:8f:95:74:76:0f:da:2f:2b:cc:de:73:a9:b4:
25:aa:03:83:2a:e7:96:1a:70:9f:c3:0c:c1:c3:a6:
4d:2a:73:d7:46:10:87:c3:a9:e4:04:9c:6b:44:1c:
20:bd:8c:ab:0b:16:0f:6f:e2:80:19:18:f7:1d:4e:
92:18:95:3e:e4:bb:07:4b:e1:6d:f0:83:33:a0:b4:
8f:ce:d1:29:00:a7:09:b0:d5:65:13:a9:c1:41:db:
1b:ed:bb:88:10:49:86:9e:51:43:e4:67:4f:e7:13:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AC:49:0F:78:B9:53:C1:82:9E:A8:DE:83:DC:DF:D2:9C:5F:55:C9
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ca:93:ed:8d:e3:1b:ff:57:e8:11:d9:19:6c:b5:23:c2:d7:
b5:90:fd:53:91:1a:41:88:79:3b:b8:c4:e5:8c:dd:57:51:76:
a3:1a:4c:06:fc:db:12:c1:ed:ea:9f:57:d2:d0:21:f0:03:df:
11:a7:14:6e:bd:41:f4:41:bd:57:f0:54:47:7e:73:5f:b7:df:
7b:e6:6c:d7:67:a4:f8:05:95:05:b5:31:a9:f4:69:44:8c:e3:
88:4a:45:98:e5:b8:c8:57:0d:ed:61:ec:eb:82:8e:e7:80:df:
0f:cd:7e:fb:05:77:c1:3b:c9:84:de:50:b7:5e:e8:ec:12:a7:
9a:36:c7:08:b8:fd:b1:37:18:22:1c:69:ed:1b:b8:14:cd:4a:
5b:b2:73:8e:ab:6b:a9:c0:a3:fc:04:c5:f0:ad:d3:1a:2f:5c:
1b:b1:79:5c:a2:dd:9d:c1:51:58:fc:0f:d3:d4:09:b1:63:d2:
3c:d2:47:7b:c6:27:b7:e5:25:9b:dd:0a:6e:3c:42:7b:4a:97:
8e:45:8d:c7:c4:62:ce:5b:b4:53:ea:cb:e0:0d:96:13:6c:31:
49:42:58:51:cd:a4:6b:df:99:3b:d1:15:20:71:f5:e9:7e:b5:
70:55:6d:01:c3:47:54:23:5d:ba:e5:b6:d4:c8:64:a6:98:4b:
86:f0:f4:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEddXNklSebKxEQKtZNP/IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMzFkY2E4ODdkOGJlNjA2MDE5ZDBhMTU5M2ExNmZmZDM5
ZmQ2OTIwHhcNMjUwNzI2MDIwMDI5WhcNMjUwNzI3MDIwMDI5WjAzMTEwLwYDVQQD
EyhlZWFjNDkwZjc4Yjk1M2MxODI5ZWE4ZGU4M2RjZGZkMjljNWY1NWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBITW+89lsEgASOuUCVS47pta18Z
vga1zgP+mOEk20s9+Q97ryXmolDH36wvk8ps8eAYM/XZ04ZwevRavGY7bLoLQJik
rRZfg5ic4z/eIe1XyvRty2++neaQ6956uQfPaeGZ+vKZgObPSkrf0/vygT1e5Xli
lgGWOj1HeGeHWTsFeXCOSx+RnoBFDay1q12kL4sDbai33o+VdHYP2i8rzN5zqbQl
qgODKueWGnCfwwzBw6ZNKnPXRhCHw6nkBJxrRBwgvYyrCxYPb+KAGRj3HU6SGJU+
5LsHS+Ft8IMzoLSPztEpAKcJsNVlE6nBQdsb7buIEEmGnlFD5GdP5xOrswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6sSQ94uVPBgp6o3oPc39KcX1XJMB8GA1UdIwQY
MBaAFBox3KiH2L5gYBnQoVk6Fv/Tn9aSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEt
OTBjOTk5ZDM1ZWQ4LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEtOTBjOTk5ZDM1ZWQ4
LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosqT7Y3j
G/9X6BHZGWy1I8LXtZD9U5EaQYh5O7jE5YzdV1F2oxpMBvzbEsHt6p9X0tAh8APf
EacUbr1B9EG9V/BUR35zX7ffe+Zs12ek+AWVBbUxqfRpRIzjiEpFmOW4yFcN7WHs
64KO54DfD81++wV3wTvJhN5Qt17o7BKnmjbHCLj9sTcYIhxp7Ru4FM1KW7Jzjqtr
qcCj/ATF8K3TGi9cG7F5XKLdncFRWPwP09QJsWPSPNJHe8Ynt+Ulm90KbjxCe0qX
jkWNx8Rizlu0U+rL4A2WE2wxSUJYUc2ka9+ZO9EVIHH16X61cFVtAcNHVCNduuW2
1MhkpphLhvD0OQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:16:34 2025 by rpki-client