Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier: X5aYDsOyUZdHJaMI+psfhxl+hHJ7cmdFNaii/R70jIo=
Subject key identifier: D4:B1:09:00:6B:65:E3:10:69:95:0C:B3:AE:48:D9:58:FF:F8:33:32
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 01992FA2F902DCE4F97AD04F259119B4401D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 18:00:33 +0000
Manifest this update: Tue 09 Sep 2025 18:00:33 +0000
Manifest next update: Wed 10 Sep 2025 18:00:33 +0000
Files and hashes: 1: LjTHS4WiiLbIvDv29J3ieyKf9N4.roa (hash: 0M1gHDPS8KhOTlzfhUcKPBiuX1DLKJxKwDXRimBbw2c=)
2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: lt/KtbTur30taYuonAJgM91VKbF0g+o1nDvtda59J/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a2:f9:02:dc:e4:f9:7a:d0:4f:25:91:19:b4:40:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Sep 9 18:00:33 2025 GMT
Not After : Sep 10 18:00:33 2025 GMT
Subject: CN=d4b109006b65e31069950cb3ae48d958fff83332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:de:0c:1c:ef:81:53:91:23:85:77:b4:fb:
15:28:59:b2:3e:4f:3a:f3:3b:59:0f:3c:84:fa:ed:
eb:79:2e:18:4e:42:de:88:90:af:32:79:fe:b9:58:
31:ad:98:21:44:e5:e2:b1:51:6b:72:39:08:c6:24:
5a:08:bc:86:4c:33:26:d5:ef:47:da:20:b0:a5:da:
7d:b5:e1:1e:d9:83:6e:b4:d7:7c:e4:9a:7b:09:52:
ea:c7:4b:4f:98:11:89:c7:d6:fe:e6:da:f2:4b:5e:
ff:6a:cf:1d:ad:16:39:48:b3:30:ae:fb:7c:f1:86:
28:77:32:b7:16:67:11:2c:d9:f2:db:ae:87:fc:a5:
68:24:29:9a:46:38:ca:38:00:7d:a5:0a:d8:63:3f:
09:fd:3d:bc:d2:ef:88:63:87:b9:33:0a:48:30:21:
2e:29:2c:e2:ca:30:e3:6e:03:58:c2:53:a7:c1:61:
56:75:90:02:f8:ae:4f:7e:3c:49:49:a9:e9:a3:5a:
a1:5b:f2:aa:d0:9c:51:26:65:8d:03:1a:4d:04:89:
57:9d:f1:13:01:9a:83:cf:26:ad:49:86:6e:05:ba:
86:fd:ee:0e:05:7a:d4:64:7e:68:39:fa:33:4d:57:
d0:42:5e:ae:bc:64:a6:41:00:6e:b4:c3:85:34:cc:
bd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B1:09:00:6B:65:E3:10:69:95:0C:B3:AE:48:D9:58:FF:F8:33:32
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d1:09:c6:67:07:c7:00:2d:9b:03:1f:14:7a:2c:48:35:86:
14:05:33:96:b3:56:5c:b3:ab:79:8c:3d:7f:76:90:6b:fd:f6:
87:9d:ec:28:e4:19:80:2c:a7:ba:c2:fa:95:c5:de:c6:17:85:
17:53:cc:c7:34:60:1e:0c:50:ba:81:fb:ee:cd:f6:1d:eb:22:
ac:2b:aa:11:65:5d:8c:38:c9:08:55:25:41:58:ee:d4:6a:6e:
4e:27:a0:47:f5:8f:9a:65:93:bb:6e:29:77:6c:be:15:65:3e:
1f:f7:76:61:78:41:8d:ab:a8:0c:01:80:cf:39:b6:3a:b4:45:
7d:94:92:ce:41:d9:b1:4a:01:5b:90:99:85:e4:89:b3:1b:99:
88:0c:01:6b:c2:9b:87:65:b3:d6:bb:fe:1a:c4:d6:7e:25:ce:
00:2f:09:79:46:96:cc:71:35:67:c6:41:b5:26:82:97:9f:f6:
7e:46:99:3b:f4:c0:5a:e5:f5:0d:8d:40:6d:3b:93:4f:4f:53:
d1:64:e2:32:6e:fc:0d:cc:5c:9b:5a:50:0d:b1:86:b2:94:26:
c4:64:2d:85:5e:89:6a:a4:c4:bb:83:d5:fa:5b:de:c2:1e:80:
92:ce:85:ff:b3:b5:3e:f5:91:de:36:d1:aa:bd:9d:d7:ab:9d:
1f:50:79:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkvovkC3OT5etBPJZEZtEAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMTI0ZDA0MTFhMjBmZDJiYjU0Njk3MGVhODAxMTZlZjI3
NmRiYWIwHhcNMjUwOTA5MTgwMDMzWhcNMjUwOTEwMTgwMDMzWjAzMTEwLwYDVQQD
EyhkNGIxMDkwMDZiNjVlMzEwNjk5NTBjYjNhZTQ4ZDk1OGZmZjgzMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNLeDBzvgVORI4V3tPsVKFmyPk86
8ztZDzyE+u3reS4YTkLeiJCvMnn+uVgxrZghROXisVFrcjkIxiRaCLyGTDMm1e9H
2iCwpdp9teEe2YNutNd85Jp7CVLqx0tPmBGJx9b+5tryS17/as8drRY5SLMwrvt8
8YYodzK3FmcRLNny266H/KVoJCmaRjjKOAB9pQrYYz8J/T280u+IY4e5MwpIMCEu
KSziyjDjbgNYwlOnwWFWdZAC+K5PfjxJSanpo1qhW/Kq0JxRJmWNAxpNBIlXnfET
AZqDzyatSYZuBbqG/e4OBXrUZH5oOfozTVfQQl6uvGSmQQButMOFNMy9YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSxCQBrZeMQaZUMs65I2Vj/+DMyMB8GA1UdIwQY
MBaAFIMSTQQRog/Su1RpcOqAEW7ydturMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmIt
ZmNmMGYxNTk0ZDJmLzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmItZmNmMGYxNTk0ZDJm
LzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9EJxmcH
xwAtmwMfFHosSDWGFAUzlrNWXLOreYw9f3aQa/32h53sKOQZgCynusL6lcXexheF
F1PMxzRgHgxQuoH77s32HesirCuqEWVdjDjJCFUlQVju1GpuTiegR/WPmmWTu24p
d2y+FWU+H/d2YXhBjauoDAGAzzm2OrRFfZSSzkHZsUoBW5CZheSJsxuZiAwBa8Kb
h2Wz1rv+GsTWfiXOAC8JeUaWzHE1Z8ZBtSaCl5/2fkaZO/TAWuX1DY1AbTuTT09T
0WTiMm78Dcxcm1pQDbGGspQmxGQthV6JaqTEu4PV+lvewh6Aks6F/7O1PvWR3jbR
qr2d16udH1B59Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 00:26:17 2025 by rpki-client