Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: Xoz5oDQlksmEQZUhc3axIxaSWMfwrFc4mvahdCt3eUM=
Subject key identifier: 48:FC:09:4E:73:24:47:9E:99:C8:30:0A:E4:0A:92:B7:FD:B1:9C:6A
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 0199326CEFAD6DD84E2BECF6AE2BAEE6EF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 153D
Signing time: Wed 10 Sep 2025 07:00:23 +0000
Manifest this update: Wed 10 Sep 2025 07:00:23 +0000
Manifest next update: Thu 11 Sep 2025 07:00:23 +0000
Files and hashes: 1: RZXIs4f4losh_NRNWSiINml7guQ.roa (hash: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: D8uLEQ5nZhV1v7oNWDShp5FMQqblLTp3m70HlcWzSto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6c:ef:ad:6d:d8:4e:2b:ec:f6:ae:2b:ae:e6:ef:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Sep 10 07:00:23 2025 GMT
Not After : Sep 11 07:00:23 2025 GMT
Subject: CN=48fc094e7324479e99c8300ae40a92b7fdb19c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:6b:4c:ff:bb:9e:dc:5c:00:17:f5:21:02:
64:9c:c1:8a:dd:37:93:44:db:90:e3:4a:9e:21:99:
94:38:de:fc:68:35:b8:53:1b:1d:c3:e8:e7:57:78:
3d:4f:a6:e1:ea:58:a3:e1:68:9f:30:0b:3b:b6:e4:
4f:f2:43:90:62:33:68:f7:54:c1:f2:42:13:65:d3:
ee:ad:10:61:f7:fc:6c:c0:b5:84:e3:68:37:93:0c:
c2:e6:2b:63:b1:aa:d9:f5:63:06:87:70:b9:8e:64:
c7:bf:96:0f:10:82:c0:f0:8e:80:8c:a7:f4:2d:83:
f8:b0:6b:64:1c:23:c1:0e:64:5e:d9:e4:52:79:c2:
74:5f:4c:24:cc:4d:be:45:52:60:54:d3:fe:d1:10:
06:8a:b3:bf:71:23:c3:c0:d2:82:c1:a9:5e:2c:06:
6c:50:11:11:32:b0:10:ff:9f:f2:c0:e7:f8:0b:1c:
87:71:80:ce:1f:d5:8d:69:79:ed:ca:59:c4:ed:b7:
00:18:b2:7d:86:e1:b1:14:39:d3:c1:02:6a:35:67:
06:be:20:c1:c5:34:7d:e2:2f:b8:9f:d2:3d:af:f4:
91:53:3d:9e:1e:81:4b:f3:9b:9e:4b:82:71:9f:58:
a7:62:f8:88:8f:ff:52:7a:c4:bd:88:29:b4:aa:0c:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FC:09:4E:73:24:47:9E:99:C8:30:0A:E4:0A:92:B7:FD:B1:9C:6A
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0f:82:aa:d7:7f:f9:cb:ae:69:64:4d:0c:fb:e8:84:bc:86:
bf:13:3b:81:63:51:46:08:88:5f:9c:37:3f:6e:79:ba:cd:67:
36:09:79:07:6b:d6:60:af:37:99:66:2f:90:5c:f1:04:93:08:
80:b9:b2:4b:d9:df:a3:e1:53:b2:68:81:b6:c0:c6:c3:cb:73:
e1:e0:66:c6:b4:d4:58:6b:9e:ac:bb:87:ee:08:9e:f9:e8:14:
f4:d7:62:81:36:d3:96:56:cb:33:d9:e0:d9:70:a0:55:ce:e2:
f9:0f:5a:bd:18:22:27:cd:cf:c4:c5:dd:71:7e:23:40:61:f4:
a7:dc:2e:4e:b5:91:19:e8:9d:03:62:b1:da:41:90:9d:aa:d2:
95:30:f3:e4:5e:11:ed:03:99:1c:9f:81:a6:51:59:84:ec:33:
7c:04:26:f6:63:19:ce:c6:53:6e:f2:73:03:f6:7a:e9:f7:16:
78:92:d6:b1:3c:85:b7:c7:b4:88:4a:de:a4:fb:ac:61:fc:65:
57:64:05:20:c7:0f:64:c7:88:a1:f5:9b:e2:f7:10:f9:87:7d:
df:51:b0:e8:f8:06:2f:c5:02:9f:ce:cb:b6:a1:ef:a0:17:b2:
e7:91:c6:f4:70:b5:08:8a:ce:22:3f:be:78:61:7e:b9:41:2c:
7e:94:d6:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkybO+tbdhOK+z2riuu5u9CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTkwMWI2NGZlMjI2NTZiOGYyZGIyNjBiNDUzZjI3OTM1
MmI3ZDAwHhcNMjUwOTEwMDcwMDIzWhcNMjUwOTExMDcwMDIzWjAzMTEwLwYDVQQD
Eyg0OGZjMDk0ZTczMjQ0NzllOTljODMwMGFlNDBhOTJiN2ZkYjE5YzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7NrTP+7ntxcABf1IQJknMGK3TeT
RNuQ40qeIZmUON78aDW4Uxsdw+jnV3g9T6bh6lij4WifMAs7tuRP8kOQYjNo91TB
8kITZdPurRBh9/xswLWE42g3kwzC5itjsarZ9WMGh3C5jmTHv5YPEILA8I6AjKf0
LYP4sGtkHCPBDmRe2eRSecJ0X0wkzE2+RVJgVNP+0RAGirO/cSPDwNKCwaleLAZs
UBERMrAQ/5/ywOf4CxyHcYDOH9WNaXntylnE7bcAGLJ9huGxFDnTwQJqNWcGviDB
xTR94i+4n9I9r/SRUz2eHoFL85ueS4Jxn1inYviIj/9SesS9iCm0qgy4QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEj8CU5zJEeemcgwCuQKkrf9sZxqMB8GA1UdIwQY
MBaAFIGZAbZP4iZWuPLbJgtFPyeTUrfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMt
NjNkZDI3NTMwMGJjLzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMtNjNkZDI3NTMwMGJj
LzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKA+Cqtd/
+cuuaWRNDPvohLyGvxM7gWNRRgiIX5w3P255us1nNgl5B2vWYK83mWYvkFzxBJMI
gLmyS9nfo+FTsmiBtsDGw8tz4eBmxrTUWGuerLuH7gie+egU9NdigTbTllbLM9ng
2XCgVc7i+Q9avRgiJ83PxMXdcX4jQGH0p9wuTrWRGeidA2Kx2kGQnarSlTDz5F4R
7QOZHJ+BplFZhOwzfAQm9mMZzsZTbvJzA/Z66fcWeJLWsTyFt8e0iErepPusYfxl
V2QFIMcPZMeIofWb4vcQ+Yd931Gw6PgGL8UCn87LtqHvoBey55HG9HC1CIrOIj++
eGF+uUEsfpTWqA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:59:48 2025 by rpki-client