Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier: vJTagBzYLMGyEulsdhOxpnlgxDOjlBg0+OhIPzKhXyk=
Subject key identifier: 81:A4:FF:60:FA:EC:7E:E2:67:33:52:38:88:FD:0E:10:F8:5C:46:6B
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 019921E79D991BCB4301C8944C64979D4F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number: 07E1
Signing time: Sun 07 Sep 2025 02:00:51 +0000
Manifest this update: Sun 07 Sep 2025 02:00:51 +0000
Manifest next update: Mon 08 Sep 2025 02:00:51 +0000
Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: X5qRo8ocVoR9xWSmioCOk5EUoe7CAEp353jubdqbZAo=)
2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:9d:99:1b:cb:43:01:c8:94:4c:64:97:9d:4f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: Sep 7 02:00:51 2025 GMT
Not After : Sep 8 02:00:51 2025 GMT
Subject: CN=81a4ff60faec7ee26733523888fd0e10f85c466b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:8e:6c:d4:50:21:64:84:9d:82:5d:fd:42:
ed:3b:2c:9b:8f:f9:52:3f:e9:74:a7:43:a3:bf:7a:
92:09:64:7e:73:71:7d:54:c7:65:9b:f0:1b:85:3a:
c9:42:c6:48:7f:81:fb:f0:6b:c0:26:6e:f2:52:c1:
20:d5:61:dc:8c:4b:7e:26:36:0f:d0:cd:a3:e7:8e:
ee:f9:f3:be:75:7b:b7:fd:69:b5:f3:f3:97:68:46:
ad:c2:70:81:8a:e1:b0:75:84:dc:02:c3:d3:88:b4:
80:18:15:1f:0a:fa:8e:5f:47:63:86:44:9a:07:5a:
5c:56:bc:ba:41:9e:b7:c3:d3:f7:20:76:68:b2:ee:
9d:d6:31:4f:e9:fa:f7:e2:98:be:71:fb:54:3c:44:
f9:65:d3:ff:c8:fc:70:ff:eb:7e:e4:f4:7f:60:c6:
49:7a:a2:ee:71:70:de:f6:57:2d:18:c4:20:24:ba:
b2:33:d1:b4:58:0f:f2:e4:7f:ee:d8:74:b0:36:7a:
82:36:4b:63:22:d4:d8:01:93:df:fa:9b:69:0a:a9:
05:c0:96:13:44:41:f3:e5:83:c7:af:19:84:c3:43:
ba:2a:57:2a:a0:32:4d:59:7c:99:2c:e0:89:60:19:
a2:0b:9a:2c:02:23:88:6d:57:11:c3:d6:7a:cd:7d:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A4:FF:60:FA:EC:7E:E2:67:33:52:38:88:FD:0E:10:F8:5C:46:6B
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:46:15:2e:41:68:3d:7c:bb:3e:0b:2b:56:a5:b3:ba:49:93:
73:3a:47:44:7e:f1:3c:4b:6f:11:b4:34:4f:c4:57:db:37:86:
1e:82:94:44:78:56:7f:f7:93:7e:0f:67:e7:3e:24:9e:2e:ca:
b7:b5:e5:74:a7:b8:20:0f:5b:6b:24:b8:c8:47:39:eb:2c:7a:
62:63:01:69:7b:15:6c:10:37:29:7d:b4:c1:f6:2c:20:e7:9c:
2a:43:9d:d5:96:b8:12:20:39:7a:5c:f8:c5:5a:47:11:72:54:
6b:6c:91:05:d0:57:72:61:33:29:5e:b9:73:79:97:ad:81:96:
be:ae:da:ea:cf:a6:ab:b9:20:d4:91:3c:b6:69:83:05:b8:92:
ce:94:9e:9a:8d:9f:99:5b:aa:44:13:7c:0a:13:40:f9:cc:4a:
24:f5:eb:e5:46:ed:25:0d:c3:9f:55:6a:7d:93:fb:b3:40:85:
01:e8:57:6a:2f:10:62:8f:f5:a0:0c:c6:ce:4b:c0:ca:77:99:
bc:a6:f6:db:7d:86:6e:07:0a:9d:bc:a3:9b:ae:4b:d3:9c:6e:
67:e7:24:c7:5d:1d:09:b4:25:a0:47:ff:0c:97:e9:8d:c2:f6:
e4:ca:00:fb:ea:24:29:e6:2c:26:79:cb:9e:a5:90:79:63:d7:
9b:e9:70:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh552ZG8tDAciUTGSXnU8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2JkMGE0MTM2Mjk0MjE1YjFjMjQzYjBmMDIxOGNmZGQ1
NjVkNTcwHhcNMjUwOTA3MDIwMDUxWhcNMjUwOTA4MDIwMDUxWjAzMTEwLwYDVQQD
Eyg4MWE0ZmY2MGZhZWM3ZWUyNjczMzUyMzg4OGZkMGUxMGY4NWM0NjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfqObNRQIWSEnYJd/ULtOyybj/lS
P+l0p0Ojv3qSCWR+c3F9VMdlm/AbhTrJQsZIf4H78GvAJm7yUsEg1WHcjEt+JjYP
0M2j547u+fO+dXu3/Wm18/OXaEatwnCBiuGwdYTcAsPTiLSAGBUfCvqOX0djhkSa
B1pcVry6QZ63w9P3IHZosu6d1jFP6fr34pi+cftUPET5ZdP/yPxw/+t+5PR/YMZJ
eqLucXDe9lctGMQgJLqyM9G0WA/y5H/u2HSwNnqCNktjItTYAZPf+ptpCqkFwJYT
REHz5YPHrxmEw0O6KlcqoDJNWXyZLOCJYBmiC5osAiOIbVcRw9Z6zX2uZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGk/2D67H7iZzNSOIj9DhD4XEZrMB8GA1UdIwQY
MBaAFBnL0KQTYpQhWxwkOw8CGM/dVl1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYt
ZWNlNzgyNjc4N2I0LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYtZWNlNzgyNjc4N2I0
LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEYVLkFo
PXy7PgsrVqWzukmTczpHRH7xPEtvEbQ0T8RX2zeGHoKURHhWf/eTfg9n5z4kni7K
t7XldKe4IA9bayS4yEc56yx6YmMBaXsVbBA3KX20wfYsIOecKkOd1Za4EiA5elz4
xVpHEXJUa2yRBdBXcmEzKV65c3mXrYGWvq7a6s+mq7kg1JE8tmmDBbiSzpSemo2f
mVuqRBN8ChNA+cxKJPXr5UbtJQ3Dn1VqfZP7s0CFAehXai8QYo/1oAzGzkvAyneZ
vKb2232GbgcKnbyjm65L05xuZ+ckx10dCbQloEf/DJfpjcL25MoA++okKeYsJnnL
nqWQeWPXm+lwjQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:36 2025 by rpki-client