Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft
File: gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft (raw, json)
Hash identifier: ReV8R9oCuOHfe5qa4PUMbpXuhIACfSR1X3OLTUngx1I=
Subject key identifier: 00:05:F0:3E:3D:4D:43:9F:C0:2A:41:AE:E2:5D:11:6E:40:72:96:53
Authority key identifier: 83:03:A4:CB:23:84:C2:07:DD:37:37:F0:92:4F:A0:8E:93:28:2D:06
Certificate issuer: /CN=8303a4cb2384c207dd3737f0924fa08e93282d06
Certificate serial: 019922C39F77D34BF2329E60F8A1D8B02188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft
Manifest number: 1C
Signing time: Sun 07 Sep 2025 06:01:09 +0000
Manifest this update: Sun 07 Sep 2025 06:01:09 +0000
Manifest next update: Mon 08 Sep 2025 06:01:09 +0000
Files and hashes: 1: 2iWfeMriZFi-G_hS_QOYTqRzYCk.roa (hash: 03ngKG8f9ygpR1m9XSjIdbVbs0jTiLlbaTIDCyi4ZJU=)
2: gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl (hash: j0xOy5FHyUUK44z+VOh7z2zsNxgy/hsZQRl6d56yPeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:9f:77:d3:4b:f2:32:9e:60:f8:a1:d8:b0:21:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8303a4cb2384c207dd3737f0924fa08e93282d06
Validity
Not Before: Sep 7 06:01:09 2025 GMT
Not After : Sep 8 06:01:09 2025 GMT
Subject: CN=0005f03e3d4d439fc02a41aee25d116e40729653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:dd:9d:fc:2b:b1:c9:dc:fa:da:a5:8e:aa:
64:b3:5f:82:b4:b4:37:e3:e0:9f:df:43:e4:44:04:
1a:1f:3d:7a:5f:a3:e3:73:0d:1a:42:b8:53:b1:f6:
78:a1:92:8d:f7:27:35:0f:cf:82:48:ae:87:ba:24:
30:64:e9:f5:97:6e:75:52:4a:75:17:9e:c4:c9:1e:
ad:ea:62:0e:a1:85:5c:f5:ad:f2:8a:32:47:aa:4b:
bd:76:d2:0e:d4:07:1e:ea:b5:4d:88:f4:5c:19:ae:
76:27:ab:83:5c:f8:26:66:00:75:58:8e:3e:ac:e6:
82:7b:5d:2f:c4:86:38:a2:3b:e2:b0:99:a6:55:2b:
a9:d5:0f:80:d6:9c:8a:58:47:77:98:e0:16:9e:e6:
23:34:dd:7e:73:60:b4:9d:c2:17:8e:7d:24:6b:31:
e5:58:5a:70:66:08:e9:70:14:4d:3c:41:76:10:27:
b8:aa:54:cc:d0:f1:80:c5:01:93:66:02:ac:e4:d2:
ed:59:96:aa:a6:fc:8f:52:3d:8b:15:94:d9:78:08:
2b:eb:bb:13:4f:5a:3d:52:2f:01:22:3f:80:97:fd:
e6:5c:cd:a7:ae:0a:8e:3b:e2:14:31:78:40:c6:61:
21:17:a7:19:43:05:3b:be:4d:76:f0:31:41:96:bb:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:05:F0:3E:3D:4D:43:9F:C0:2A:41:AE:E2:5D:11:6E:40:72:96:53
X509v3 Authority Key Identifier:
keyid:83:03:A4:CB:23:84:C2:07:DD:37:37:F0:92:4F:A0:8E:93:28:2D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2f:82:e4:1e:37:83:2a:dd:36:30:3b:af:07:ed:0e:53:e1:
e2:9e:38:54:1b:58:48:d4:74:6a:c1:d8:93:3a:e3:83:67:c2:
0f:1d:4f:fa:b2:a9:8d:d6:50:7b:06:c4:86:39:bb:5c:e5:23:
aa:a8:8b:ff:be:40:d7:4e:41:5d:df:65:47:bf:da:fe:81:45:
d6:3f:7c:f2:06:cc:ea:d6:02:d1:34:79:60:bd:a4:94:08:78:
73:07:c3:44:6f:96:0e:a6:fd:45:97:aa:f6:3f:16:79:6b:26:
e2:a8:ba:c2:ba:ca:cf:cd:47:65:88:77:51:d5:60:04:93:2d:
63:a7:14:55:6c:85:b6:61:93:3d:3c:da:fe:6d:bc:76:34:d4:
58:d2:bd:1b:8b:78:13:35:c6:10:96:20:4e:98:3e:e2:dc:8b:
41:9d:76:41:ce:16:99:0c:42:e3:65:cd:d0:c6:aa:b0:f8:61:
c8:48:98:1b:a7:90:3e:73:e0:3c:c1:6a:ea:7f:b5:1b:fd:f2:
31:74:ee:51:d9:1a:ce:08:6f:63:73:16:28:d6:41:17:27:a4:
10:35:cd:e7:68:6f:7c:2e:f6:96:68:f6:a9:8b:c1:77:40:ad:
30:40:6f:96:7d:47:38:5e:dc:84:a0:94:2a:bc:6e:87:65:de:
71:5c:f8:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw59300vyMp5g+KHYsCGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDNhNGNiMjM4NGMyMDdkZDM3MzdmMDkyNGZhMDhlOTMy
ODJkMDYwHhcNMjUwOTA3MDYwMTA5WhcNMjUwOTA4MDYwMTA5WjAzMTEwLwYDVQQD
EygwMDA1ZjAzZTNkNGQ0MzlmYzAyYTQxYWVlMjVkMTE2ZTQwNzI5NjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMzdnfwrscnc+tqljqpks1+CtLQ3
4+Cf30PkRAQaHz16X6Pjcw0aQrhTsfZ4oZKN9yc1D8+CSK6HuiQwZOn1l251Ukp1
F57EyR6t6mIOoYVc9a3yijJHqku9dtIO1Ace6rVNiPRcGa52J6uDXPgmZgB1WI4+
rOaCe10vxIY4ojvisJmmVSup1Q+A1pyKWEd3mOAWnuYjNN1+c2C0ncIXjn0kazHl
WFpwZgjpcBRNPEF2ECe4qlTM0PGAxQGTZgKs5NLtWZaqpvyPUj2LFZTZeAgr67sT
T1o9Ui8BIj+Al/3mXM2nrgqOO+IUMXhAxmEhF6cZQwU7vk128DFBlrvmdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAF8D49TUOfwCpBruJdEW5AcpZTMB8GA1UdIwQY
MBaAFIMDpMsjhMIH3Tc38JJPoI6TKC0GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dPa3l5T0V3Z2ZkTnpmd2trLWdqcE1vTFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81NzdlYWUtM2YzZC00ZDNmLTljMDct
ZjAxOWRiMmFjY2E4LzEvZ3dPa3l5T0V3Z2ZkTnpmd2trLWdqcE1vTFFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy81NzdlYWUtM2YzZC00ZDNmLTljMDctZjAxOWRiMmFjY2E4
LzEvZ3dPa3l5T0V3Z2ZkTnpmd2trLWdqcE1vTFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlS+C5B43
gyrdNjA7rwftDlPh4p44VBtYSNR0asHYkzrjg2fCDx1P+rKpjdZQewbEhjm7XOUj
qqiL/75A105BXd9lR7/a/oFF1j988gbM6tYC0TR5YL2klAh4cwfDRG+WDqb9RZeq
9j8WeWsm4qi6wrrKz81HZYh3UdVgBJMtY6cUVWyFtmGTPTza/m28djTUWNK9G4t4
EzXGEJYgTpg+4tyLQZ12Qc4WmQxC42XN0MaqsPhhyEiYG6eQPnPgPMFq6n+1G/3y
MXTuUdkazghvY3MWKNZBFyekEDXN52hvfC72lmj2qYvBd0CtMEBvln1HOF7chKCU
Krxuh2XecVz4UQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:36 2025 by rpki-client