Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: I4FutPhTGnGmWJCi6fFvpqzynCuglfCLz+oXSNI/TPk=
Subject key identifier: 30:94:B3:67:3C:A1:C2:35:FF:71:8B:63:D2:57:70:0C:16:08:DF:12
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 0199221EE04E87C7F2337581214428936AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 92
Signing time: Sun 07 Sep 2025 03:01:12 +0000
Manifest this update: Sun 07 Sep 2025 03:01:12 +0000
Manifest next update: Mon 08 Sep 2025 03:01:12 +0000
Files and hashes: 1: YdAjbfCRxVQuhwuJCOd8n6-9uGc.roa (hash: ryQI+IE9GniEW1zRKSAQBzSoJ8r45pp9QujhZtOYmEk=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: zH7bP4qJ2vUWaoXUwXKn/Ge8b4vCHGIxR7EOWbL3P/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:e0:4e:87:c7:f2:33:75:81:21:44:28:93:6a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Sep 7 03:01:12 2025 GMT
Not After : Sep 8 03:01:12 2025 GMT
Subject: CN=3094b3673ca1c235ff718b63d257700c1608df12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2e:ad:a8:79:a7:1a:98:de:ca:25:f3:05:85:
a5:96:1a:fc:b4:52:69:c6:0a:81:2d:2c:d2:7c:f9:
25:26:55:db:74:26:d0:4c:1b:13:f9:0c:a1:ad:e0:
de:85:c0:7c:51:a8:aa:c2:c5:ac:ec:9d:26:01:77:
95:84:5e:93:aa:49:e2:3c:96:b0:18:74:54:da:4d:
95:28:f7:e1:a1:92:06:f6:24:bf:b3:f2:16:5f:4b:
8f:3b:53:0a:ac:17:00:2b:00:50:37:37:69:e3:2f:
dd:4e:66:c0:fa:3e:71:7b:87:d7:c3:da:13:91:18:
aa:35:3c:1e:d0:78:3d:42:1c:7b:2e:3a:ff:d5:75:
ad:e1:22:2d:39:cb:1f:1e:0b:d4:19:de:1b:3c:95:
8b:9a:9e:c4:7b:bd:c8:eb:74:a9:30:81:c5:e8:70:
00:95:3a:e4:8c:50:eb:73:42:8b:db:ed:38:31:bd:
db:e3:fa:68:b3:66:56:c6:e4:08:bc:dd:a7:37:61:
41:ab:68:4e:24:5e:d0:94:bd:e8:3b:90:d5:85:87:
30:94:6a:ed:6f:04:b0:5f:5d:b7:f6:6d:6e:98:11:
a0:b2:0f:3b:ae:63:58:74:c2:65:8b:30:f5:1f:d0:
bd:6d:71:23:73:6a:19:9b:54:e3:50:4a:fe:75:fb:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:94:B3:67:3C:A1:C2:35:FF:71:8B:63:D2:57:70:0C:16:08:DF:12
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cf:80:6f:9c:50:7c:a0:3e:bf:bc:0a:15:c2:b0:25:1d:48:
8a:6c:22:a2:57:81:c0:7b:de:27:01:fd:fe:7c:05:85:17:6e:
b5:21:e9:63:fe:b0:a4:cb:6e:4e:8f:07:c7:2e:7e:13:3f:f2:
5b:7d:12:ab:31:90:ef:be:fb:c0:11:de:b0:52:bb:97:80:c1:
74:8d:fc:4e:28:f2:b1:5e:3e:75:ed:64:be:9e:95:80:84:87:
a1:66:64:4f:44:d7:7b:6b:68:c1:ca:10:b6:c2:34:6d:6c:4b:
44:94:ef:05:e1:a9:67:7c:a2:e3:b2:17:1e:a6:6a:ba:7e:84:
32:8b:96:a2:e6:e4:c1:9c:2a:2c:e6:1d:da:29:ba:d2:dd:b2:
da:64:50:81:18:ad:0d:c1:9a:d9:c1:b9:f7:66:5e:df:1a:e0:
75:8a:f1:cc:b8:d6:c2:68:36:32:74:e4:a0:41:48:54:24:fe:
01:2d:2c:45:3d:ca:26:b2:91:ec:d9:97:26:a6:5d:30:ec:a6:
ab:50:0a:cd:c8:40:fb:52:bf:f4:b2:65:69:65:e0:46:a4:82:
4d:8d:f3:2a:70:20:6f:43:13:a6:e6:e8:04:48:4e:71:da:d6:
bc:fd:37:07:92:99:95:44:36:33:4c:52:cc:9d:27:a0:aa:e7:
43:13:12:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHuBOh8fyM3WBIUQok2quMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYWZhNzA4ZTA5OGU1Njk0MmIxNjJmMzRlNDYzMzQ5N2Yz
YWUyZDkwHhcNMjUwOTA3MDMwMTEyWhcNMjUwOTA4MDMwMTEyWjAzMTEwLwYDVQQD
EygzMDk0YjM2NzNjYTFjMjM1ZmY3MThiNjNkMjU3NzAwYzE2MDhkZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS6tqHmnGpjeyiXzBYWllhr8tFJp
xgqBLSzSfPklJlXbdCbQTBsT+QyhreDehcB8UaiqwsWs7J0mAXeVhF6TqkniPJaw
GHRU2k2VKPfhoZIG9iS/s/IWX0uPO1MKrBcAKwBQNzdp4y/dTmbA+j5xe4fXw9oT
kRiqNTwe0Hg9Qhx7Ljr/1XWt4SItOcsfHgvUGd4bPJWLmp7Ee73I63SpMIHF6HAA
lTrkjFDrc0KL2+04Mb3b4/pos2ZWxuQIvN2nN2FBq2hOJF7QlL3oO5DVhYcwlGrt
bwSwX1239m1umBGgsg87rmNYdMJlizD1H9C9bXEjc2oZm1TjUEr+dfsp5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCUs2c8ocI1/3GLY9JXcAwWCN8SMB8GA1UdIwQY
MBaAFICvpwjgmOVpQrFi805GM0l/OuLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zNmU0YjgtNGJlYi00M2ZiLWE2OGUt
MmE4YTIyNTNmZTBhLzEvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8zNmU0YjgtNGJlYi00M2ZiLWE2OGUtMmE4YTIyNTNmZTBh
LzEvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdc+Ab5xQ
fKA+v7wKFcKwJR1IimwioleBwHveJwH9/nwFhRdutSHpY/6wpMtuTo8Hxy5+Ez/y
W30SqzGQ7777wBHesFK7l4DBdI38TijysV4+de1kvp6VgISHoWZkT0TXe2towcoQ
tsI0bWxLRJTvBeGpZ3yi47IXHqZqun6EMouWoubkwZwqLOYd2im60t2y2mRQgRit
DcGa2cG592Ze3xrgdYrxzLjWwmg2MnTkoEFIVCT+AS0sRT3KJrKR7NmXJqZdMOym
q1AKzchA+1K/9LJlaWXgRqSCTY3zKnAgb0MTpuboBEhOcdrWvP03B5KZlUQ2M0xS
zJ0noKrnQxMSOA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:37 2025 by rpki-client