Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
File: gZypPRPsITWRKJWUxBdjrAcEbFQ.mft (raw, json)
Hash identifier: CeqaF9pMui7M7iNrbM14w1no7ORVZvnGWif2VN03xZ4=
Subject key identifier: 9B:1D:C6:B0:09:87:21:8E:CC:2F:D7:57:86:13:AD:0D:55:E8:30:F7
Authority key identifier: 81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
Certificate issuer: /CN=819ca93d13ec213591289594c41763ac07046c54
Certificate serial: 01992330CD99C998BC1EC0C0D84EB4FCF00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
Manifest number: 0126
Signing time: Sun 07 Sep 2025 08:00:24 +0000
Manifest this update: Sun 07 Sep 2025 08:00:24 +0000
Manifest next update: Mon 08 Sep 2025 08:00:24 +0000
Files and hashes: 1: gZypPRPsITWRKJWUxBdjrAcEbFQ.crl (hash: piAVC0VuEbvdKbggaP045khfk/DKaTrD34M5nrOnK6E=)
2: rrr9lD-1fMY09SJ_d8OflA80hiM.roa (hash: dlPtuTm7KAs7BBecLGSQ0tXT2j/4sVnjNpjS2hSNO9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:cd:99:c9:98:bc:1e:c0:c0:d8:4e:b4:fc:f0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819ca93d13ec213591289594c41763ac07046c54
Validity
Not Before: Sep 7 08:00:24 2025 GMT
Not After : Sep 8 08:00:24 2025 GMT
Subject: CN=9b1dc6b00987218ecc2fd7578613ad0d55e830f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:cb:e4:df:07:60:6e:38:cd:13:98:96:1d:
65:91:43:8d:d2:87:25:e8:53:33:f1:a1:64:80:20:
0f:e8:c1:90:e2:3b:eb:37:f3:34:85:6a:f8:d7:7e:
dd:97:b1:27:67:aa:9c:45:26:8d:09:6b:46:f8:c3:
d8:23:dc:c9:89:f0:5e:6b:bd:50:68:ba:d8:eb:72:
f2:41:33:6f:0c:a2:7d:71:2b:2d:d5:16:ac:35:6a:
1e:ef:9a:b3:2f:bb:4f:d6:89:80:75:d6:05:55:6a:
be:b6:99:43:01:e4:d5:c9:47:34:23:3e:37:1b:44:
c4:f1:e3:76:a6:b7:56:71:35:e2:39:d1:79:4b:9d:
97:57:66:9b:28:71:86:5b:0b:d7:33:4c:1f:d1:28:
ae:a6:d8:4f:d8:f2:c3:87:b9:38:22:48:b9:5b:2a:
64:93:51:cc:28:89:50:6d:0c:41:1d:dc:de:2c:b0:
8b:b2:54:04:0c:d1:a8:fc:63:d4:21:83:38:d9:7d:
f3:26:61:06:3e:56:e9:65:a9:47:38:a5:a5:b6:bf:
9b:09:09:f7:27:4a:6a:ea:42:7d:e7:bf:cd:52:6d:
f6:27:67:0c:a4:5e:e6:4b:fe:81:f5:f0:37:36:81:
61:17:37:e5:88:5b:dd:5b:0a:f5:f1:5b:41:49:f0:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1D:C6:B0:09:87:21:8E:CC:2F:D7:57:86:13:AD:0D:55:E8:30:F7
X509v3 Authority Key Identifier:
keyid:81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bd:d0:35:7c:4f:f4:49:f5:98:8f:bb:2c:10:67:d7:ef:75:
8c:32:70:5c:83:9a:dd:c6:63:17:b8:cc:ca:76:2b:a3:98:09:
8b:62:b4:92:7d:d9:47:cd:3d:07:13:fb:76:fa:d1:41:14:d7:
24:9c:20:5b:7d:11:f0:94:e5:47:34:71:4e:d9:ea:c3:07:d0:
88:02:ad:77:81:35:a9:7b:57:30:1a:2b:47:1f:ab:68:c1:10:
3d:a1:a2:8f:8d:5d:db:4a:a1:39:52:e3:7c:50:e1:4f:f4:2c:
92:f7:bd:72:c5:96:0d:1c:22:5c:7c:f9:d7:9c:71:3e:fe:7b:
f4:b9:78:c5:a4:13:e6:81:50:c1:d2:56:88:ec:57:c7:8c:57:
b4:68:62:d6:f0:05:b1:77:55:7a:f9:ee:ea:9a:ec:ad:9d:16:
2c:bc:af:f7:bc:e3:85:ee:aa:9b:3b:dc:a6:00:61:ba:0e:79:
60:25:7c:6f:6f:04:4d:cd:79:66:eb:f1:01:07:c6:c1:ef:b5:
57:1b:38:68:20:b6:bd:16:c4:16:3b:f2:4c:25:54:f4:50:de:
a7:15:11:6b:24:fd:02:32:10:eb:db:17:37:a4:0c:7d:29:01:
4a:38:2d:27:f3:ee:f8:4d:b8:fd:fe:1c:a8:49:8e:f1:6f:47:
14:48:a8:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMM2ZyZi8HsDA2E60/PAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOWNhOTNkMTNlYzIxMzU5MTI4OTU5NGM0MTc2M2FjMDcw
NDZjNTQwHhcNMjUwOTA3MDgwMDI0WhcNMjUwOTA4MDgwMDI0WjAzMTEwLwYDVQQD
Eyg5YjFkYzZiMDA5ODcyMThlY2MyZmQ3NTc4NjEzYWQwZDU1ZTgzMGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvnL5N8HYG44zROYlh1lkUON0ocl
6FMz8aFkgCAP6MGQ4jvrN/M0hWr4137dl7EnZ6qcRSaNCWtG+MPYI9zJifBea71Q
aLrY63LyQTNvDKJ9cSst1RasNWoe75qzL7tP1omAddYFVWq+tplDAeTVyUc0Iz43
G0TE8eN2prdWcTXiOdF5S52XV2abKHGGWwvXM0wf0SiupthP2PLDh7k4Iki5Wypk
k1HMKIlQbQxBHdzeLLCLslQEDNGo/GPUIYM42X3zJmEGPlbpZalHOKWltr+bCQn3
J0pq6kJ957/NUm32J2cMpF7mS/6B9fA3NoFhFzfliFvdWwr18VtBSfCKSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsdxrAJhyGOzC/XV4YTrQ1V6DD3MB8GA1UdIwQY
MBaAFIGcqT0T7CE1kSiVlMQXY6wHBGxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1p5cFBSUHNJVFdSS0pXVXhCZGpyQWNFYkZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81Zjk1YmUtNjI2Ny00N2JiLTlhMjkt
YjAwZDAzZjFiN2E0LzEvZ1p5cFBSUHNJVFdSS0pXVXhCZGpyQWNFYkZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81Zjk1YmUtNjI2Ny00N2JiLTlhMjktYjAwZDAzZjFiN2E0
LzEvZ1p5cFBSUHNJVFdSS0pXVXhCZGpyQWNFYkZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGr3QNXxP
9En1mI+7LBBn1+91jDJwXIOa3cZjF7jMynYro5gJi2K0kn3ZR809BxP7dvrRQRTX
JJwgW30R8JTlRzRxTtnqwwfQiAKtd4E1qXtXMBorRx+raMEQPaGij41d20qhOVLj
fFDhT/Qskve9csWWDRwiXHz515xxPv579Ll4xaQT5oFQwdJWiOxXx4xXtGhi1vAF
sXdVevnu6prsrZ0WLLyv97zjhe6qmzvcpgBhug55YCV8b28ETc15ZuvxAQfGwe+1
Vxs4aCC2vRbEFjvyTCVU9FDepxURayT9AjIQ69sXN6QMfSkBSjgtJ/Pu+E24/f4c
qEmO8W9HFEio6A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:48 2025 by rpki-client