Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
File: gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json)
Hash identifier: gtLJztwaaOAVZa6v6UDr1Hn/fvNYhaNAZLM2GwussT8=
Subject key identifier: 79:A4:88:CD:6A:EB:F0:43:F0:24:E5:9C:51:46:77:02:C4:0E:28:BC
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Certificate issuer: /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial: 0199315AB1181AE51049ECEC3E88D2A67150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
Manifest number: 0812
Signing time: Wed 10 Sep 2025 02:00:50 +0000
Manifest this update: Wed 10 Sep 2025 02:00:50 +0000
Manifest next update: Thu 11 Sep 2025 02:00:50 +0000
Files and hashes: 1: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: m8DDR0gDsWgdTwzaLi2xfHpideIWU1KFtQ5+1A5Ac6g=)
2: h1XtrgQS4y6F2QyLyCE8H5yVgX0.roa (hash: nBro9lqJpw++Y/bB5Bh7ukI6Oz6bg0ejSLEPfy18Wfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:b1:18:1a:e5:10:49:ec:ec:3e:88:d2:a6:71:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Validity
Not Before: Sep 10 02:00:50 2025 GMT
Not After : Sep 11 02:00:50 2025 GMT
Subject: CN=79a488cd6aebf043f024e59c51467702c40e28bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:b5:af:d1:f0:7a:47:50:3b:fd:4c:44:5e:
75:81:71:5a:db:fe:b3:f8:79:c0:a0:45:89:bf:22:
3f:0e:cb:5b:18:65:2b:7f:e8:89:da:d7:2e:65:cc:
ca:06:c3:3f:4e:77:be:81:8a:3a:5d:c6:28:f6:cd:
66:80:12:cb:60:23:47:80:a1:f8:fd:51:70:75:0a:
0d:dd:af:91:a4:8c:d4:7f:31:a1:a5:45:1e:5e:85:
cf:4e:43:86:45:99:54:92:cc:29:cc:29:d2:58:fa:
96:3c:20:eb:df:70:09:14:98:16:d2:53:1f:95:b2:
9e:30:b8:2d:cf:1f:f6:b9:d3:d5:db:f5:ed:cd:53:
16:95:dd:62:9f:bf:b5:51:8e:7f:c9:c8:a8:73:88:
57:54:c4:36:f9:01:ae:00:86:58:39:75:d8:07:ec:
07:84:04:23:c0:77:28:a7:49:cf:eb:c5:01:31:d5:
30:43:a4:35:b9:bd:73:12:7d:ca:8d:4c:59:eb:74:
06:80:0c:94:4c:ac:2e:80:b7:56:1a:6d:3b:0d:aa:
57:96:24:36:95:c6:26:a6:1a:0c:52:a6:81:62:be:
ee:a8:61:61:4a:bd:13:22:93:8d:62:a0:cd:82:ca:
4e:65:6f:02:6f:d7:fc:76:18:19:13:7c:8e:f0:a3:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A4:88:CD:6A:EB:F0:43:F0:24:E5:9C:51:46:77:02:C4:0E:28:BC
X509v3 Authority Key Identifier:
keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f8:d9:b2:9f:49:1e:9d:9e:16:3e:21:06:a6:94:e8:75:f4:
2b:9a:3d:6d:1b:92:b4:ad:38:9b:13:33:ca:12:7d:3f:2f:03:
03:76:f9:85:c1:e9:24:f5:ba:7c:0c:5e:5d:e6:8f:2b:ac:9c:
38:1a:7a:e0:30:82:62:82:c9:c4:fd:db:7c:c6:25:27:ef:9f:
b9:b7:64:83:9d:cc:3a:18:70:e8:64:aa:87:7e:0a:dd:0b:d4:
94:40:36:3d:5d:a7:d6:65:10:63:3e:6b:fa:91:b5:56:2a:72:
3e:5c:5b:7f:be:25:94:ab:e4:7f:1b:4e:b8:0d:e7:74:d0:5f:
d8:d0:75:c2:39:47:86:2c:f0:bf:c8:d6:fa:93:b6:24:76:5d:
74:4d:58:60:73:7e:a2:dc:b6:c6:e2:bf:42:08:98:73:a9:67:
ab:79:29:d5:da:ca:17:22:5e:4f:15:ea:7a:79:8a:42:19:e3:
66:72:ff:5f:55:d0:7b:4c:45:6c:0b:4c:e7:bf:21:98:b1:86:
ed:8f:6d:71:26:37:3b:ed:9b:74:a4:16:3a:47:a7:95:78:63:
42:cf:7d:45:d4:f3:9b:a6:26:a2:a8:81:80:bd:a1:fe:88:46:
52:63:37:10:da:05:44:c7:26:28:41:a8:2e:b3:9b:6a:fd:59:
e0:61:dc:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxWrEYGuUQSezsPojSpnFQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNDZlMzM4NjAxNzFlZjZlYzYwZWJjZmM1ZWM1YWM5MWMy
NTc1N2MwHhcNMjUwOTEwMDIwMDUwWhcNMjUwOTExMDIwMDUwWjAzMTEwLwYDVQQD
Eyg3OWE0ODhjZDZhZWJmMDQzZjAyNGU1OWM1MTQ2NzcwMmM0MGUyOGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XS1r9HwekdQO/1MRF51gXFa2/6z
+HnAoEWJvyI/DstbGGUrf+iJ2tcuZczKBsM/Tne+gYo6XcYo9s1mgBLLYCNHgKH4
/VFwdQoN3a+RpIzUfzGhpUUeXoXPTkOGRZlUkswpzCnSWPqWPCDr33AJFJgW0lMf
lbKeMLgtzx/2udPV2/XtzVMWld1in7+1UY5/ycioc4hXVMQ2+QGuAIZYOXXYB+wH
hAQjwHcop0nP68UBMdUwQ6Q1ub1zEn3KjUxZ63QGgAyUTKwugLdWGm07DapXliQ2
lcYmphoMUqaBYr7uqGFhSr0TIpONYqDNgspOZW8Cb9f8dhgZE3yO8KPmVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmkiM1q6/BD8CTlnFFGdwLEDii8MB8GA1UdIwQY
MBaAFIBG4zhgFx727GDrz8XsWskcJXV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83ODhkMTAtZThkZi00ZGFjLWFhOGYt
ZDM5ZmZjMTZlZjg5LzEvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83ODhkMTAtZThkZi00ZGFjLWFhOGYtZDM5ZmZjMTZlZjg5
LzEvZ0Viak9HQVhIdmJzWU92UHhleGF5UndsZFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPjZsp9J
Hp2eFj4hBqaU6HX0K5o9bRuStK04mxMzyhJ9Py8DA3b5hcHpJPW6fAxeXeaPK6yc
OBp64DCCYoLJxP3bfMYlJ++fubdkg53MOhhw6GSqh34K3QvUlEA2PV2n1mUQYz5r
+pG1VipyPlxbf74llKvkfxtOuA3ndNBf2NB1wjlHhizwv8jW+pO2JHZddE1YYHN+
oty2xuK/QgiYc6lnq3kp1drKFyJeTxXqenmKQhnjZnL/X1XQe0xFbAtM578hmLGG
7Y9tcSY3O+2bdKQWOkenlXhjQs99RdTzm6YmoqiBgL2h/ohGUmM3ENoFRMcmKEGo
LrObav1Z4GHc7g==
-----END CERTIFICATE-----
Generated at Wed Sep 10 11:23:06 2025 by rpki-client