Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json)
Hash identifier: 2/YP9J4ymPGzfqnpg5hdnBMsZmWLiB3irnJyeUgBLEU=
Subject key identifier: 2D:F6:9C:5C:65:37:EB:A2:CE:EE:75:4F:50:EE:3B:20:8A:9B:3C:DB
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 019923310C42528B54BFAAE05B048DCE9C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 08:00:40 +0000
Manifest this update: Sun 07 Sep 2025 08:00:40 +0000
Manifest next update: Mon 08 Sep 2025 08:00:40 +0000
Files and hashes: 1: 9VHnso7HKhi305msO0E0LZUPW1k.roa (hash: 04hjZ5ZRGMkvxF1mWUhoObmyRw38T7L084gMoET9a40=)
2: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: lZOjWd76L9pnsBhSkNYQX9b/1RasgQiXNznxumukZoA=)
3: Njf2TltOZrdEvD_qof8H0kAWoWg.roa (hash: DfC/KigNnFzfWnrZ4fHRxNqUPwLlnRYcAsAhEzE9YoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:0c:42:52:8b:54:bf:aa:e0:5b:04:8d:ce:9c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Sep 7 08:00:40 2025 GMT
Not After : Sep 8 08:00:40 2025 GMT
Subject: CN=2df69c5c6537eba2ceee754f50ee3b208a9b3cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:bd:c5:c4:c5:0a:ac:31:8b:f7:54:02:af:
dc:f1:42:63:1f:88:31:02:30:87:f0:5d:31:b4:91:
bd:5c:d8:a6:60:de:86:c8:d5:c6:66:b0:19:19:f1:
fa:ad:30:06:eb:36:18:10:ae:be:5a:a5:26:fc:29:
55:2d:ee:4d:79:b5:15:ba:3a:c3:a7:2a:65:2c:45:
f3:8a:bc:b8:76:10:aa:71:55:d4:3a:80:8b:56:c1:
ea:a5:23:5e:5d:a5:ec:6e:01:1b:1d:7a:e0:c3:30:
c1:f2:56:da:69:30:b5:22:a3:2c:72:3c:b9:8c:81:
d5:fe:76:d8:6c:e1:4e:f4:06:ce:e7:8a:a5:d3:b1:
15:85:8b:0a:d1:6d:7a:df:ed:55:da:a8:21:71:fc:
99:b6:24:da:df:8a:df:b8:6a:d3:bc:d5:d8:fb:9a:
1c:e8:4a:67:2b:56:ae:b5:eb:9b:f7:87:bb:d8:54:
c5:c9:56:f7:52:72:b0:c3:37:59:67:16:68:54:25:
d2:06:d6:cf:9e:d0:1a:db:c9:0e:8d:6d:85:69:10:
c5:dc:c7:89:f8:de:c3:35:40:53:55:54:34:5a:58:
89:2e:8c:8e:ac:67:73:9e:df:39:f8:6d:3b:51:a6:
d5:22:ed:2f:f2:43:de:3e:04:60:c9:5c:77:2a:68:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F6:9C:5C:65:37:EB:A2:CE:EE:75:4F:50:EE:3B:20:8A:9B:3C:DB
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d5:ee:3d:fe:da:45:28:07:95:64:20:23:2d:0f:83:49:30:
91:db:80:7f:e6:3d:3c:70:29:fe:0a:ad:d8:79:85:da:fb:3b:
55:4d:c8:00:90:80:87:df:30:39:3e:f0:df:28:87:c5:1c:4c:
bb:93:30:9e:6c:6a:f6:b7:d8:87:a2:7d:34:bb:99:e5:d4:51:
e2:77:f2:17:ce:a5:1e:1d:51:f8:42:64:31:5f:b6:db:90:89:
1b:f6:b0:3a:6a:fa:40:42:53:5e:f0:f8:dd:d0:0c:b6:13:87:
28:99:70:a2:14:bd:52:89:85:aa:e0:2b:ac:75:ed:b7:04:d9:
ee:21:77:8d:38:e8:ed:ab:02:74:3b:ac:72:50:ab:9e:d8:05:
f3:b9:35:3d:47:5b:65:75:4d:c1:a2:8b:00:d2:57:91:12:9d:
17:c0:ef:31:2d:b7:f5:1a:2b:60:d5:b4:e6:94:db:62:31:c0:
2f:ff:49:ad:4b:d1:ac:e7:74:ec:1a:0b:a0:07:11:50:8d:b3:
97:6b:91:1d:f7:59:a0:7f:86:98:31:8d:f1:1d:07:9b:27:3a:
1e:2d:02:fa:27:9e:3f:33:01:1e:41:1f:27:52:dc:64:40:a2:
fc:92:70:00:00:a7:20:38:a5:b5:a6:d7:51:54:58:cf:8c:02:
92:a5:29:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMQxCUotUv6rgWwSNzpxcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZTlkYjI5YWE5MzA4ZTE3NTFiMDNkMGQ2OTk5YmI4Njg4
MDU4ODYwHhcNMjUwOTA3MDgwMDQwWhcNMjUwOTA4MDgwMDQwWjAzMTEwLwYDVQQD
EygyZGY2OWM1YzY1MzdlYmEyY2VlZTc1NGY1MGVlM2IyMDhhOWIzY2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNe9xcTFCqwxi/dUAq/c8UJjH4gx
AjCH8F0xtJG9XNimYN6GyNXGZrAZGfH6rTAG6zYYEK6+WqUm/ClVLe5NebUVujrD
pyplLEXziry4dhCqcVXUOoCLVsHqpSNeXaXsbgEbHXrgwzDB8lbaaTC1IqMscjy5
jIHV/nbYbOFO9AbO54ql07EVhYsK0W163+1V2qghcfyZtiTa34rfuGrTvNXY+5oc
6EpnK1auteub94e72FTFyVb3UnKwwzdZZxZoVCXSBtbPntAa28kOjW2FaRDF3MeJ
+N7DNUBTVVQ0WliJLoyOrGdznt85+G07UabVIu0v8kPePgRgyVx3KmilIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC32nFxlN+uizu51T1DuOyCKmzzbMB8GA1UdIwQY
MBaAFBrp2ymqkwjhdRsD0NaZm7hogFiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODIt
ZWQ5MjMxZmJhZWQxLzEvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lYjc4MzUtZDM2NC00ZTI4LTlhODItZWQ5MjMxZmJhZWQx
LzEvR3VuYkthcVRDT0YxR3dQUTFwbWJ1R2lBV0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9XuPf7a
RSgHlWQgIy0Pg0kwkduAf+Y9PHAp/gqt2HmF2vs7VU3IAJCAh98wOT7w3yiHxRxM
u5Mwnmxq9rfYh6J9NLuZ5dRR4nfyF86lHh1R+EJkMV+225CJG/awOmr6QEJTXvD4
3dAMthOHKJlwohS9UomFquArrHXttwTZ7iF3jTjo7asCdDusclCrntgF87k1PUdb
ZXVNwaKLANJXkRKdF8DvMS239RorYNW05pTbYjHAL/9JrUvRrOd07BoLoAcRUI2z
l2uRHfdZoH+GmDGN8R0Hmyc6Hi0C+ieePzMBHkEfJ1LcZECi/JJwAACnIDiltabX
UVRYz4wCkqUpOQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:23 2025 by rpki-client