Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json)
Hash identifier: 266VjAba9/hkbraI9aYkotg4TyvS9XMjPJ3ubc+op20=
Subject key identifier: D2:96:EC:3A:9C:47:47:7B:6A:DF:ED:99:25:23:DB:6C:CA:A3:C0:CE
Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
Certificate issuer: /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Certificate serial: 0199221ED3ADF94F515CD46F3C8A8F49B98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
Manifest number: 0629
Signing time: Sun 07 Sep 2025 03:01:09 +0000
Manifest this update: Sun 07 Sep 2025 03:01:09 +0000
Manifest next update: Mon 08 Sep 2025 03:01:09 +0000
Files and hashes: 1: FS82XW-k77zMqGngn5r7_Yo2ofY.roa (hash: HKhziiZ0vfYbPizRPboCVEcmyagdxZmch8FNJ52Iiys=)
2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: 5umQJAMdgSMLW5yaU0w16rKvRDc+pv7CouXoN9bEvko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:d3:ad:f9:4f:51:5c:d4:6f:3c:8a:8f:49:b9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Validity
Not Before: Sep 7 03:01:09 2025 GMT
Not After : Sep 8 03:01:09 2025 GMT
Subject: CN=d296ec3a9c47477b6adfed992523db6ccaa3c0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:53:20:13:e9:9e:31:49:a3:85:9a:16:bc:
dd:02:e7:2f:f1:d4:d4:38:5a:92:9e:be:12:03:38:
7c:6d:e9:19:ad:7d:a5:c6:3b:6e:96:9f:24:c9:b9:
a4:a7:eb:18:65:e9:25:15:2b:83:04:c9:63:d7:02:
17:f5:91:8d:60:82:30:8e:0c:89:2f:1f:b0:3a:25:
25:bd:63:b5:62:85:de:be:5d:ff:82:a4:db:de:15:
c9:0e:e1:19:bf:97:8e:83:b4:6b:80:17:8e:0a:4a:
cc:66:67:21:89:19:ba:fa:34:5c:22:c3:32:8e:81:
8c:07:65:75:fb:f5:25:81:e1:5e:39:14:e4:2f:51:
90:5f:a4:ee:af:49:d7:0b:08:62:ff:72:d6:e3:04:
7f:9f:91:66:af:53:37:c8:62:2e:51:07:8e:3f:99:
33:0e:8d:14:d1:8b:62:5e:6a:64:5e:bf:dd:98:cf:
9d:08:a1:0b:0c:c3:57:b1:e9:e7:ce:c4:fa:b4:a4:
09:f0:27:e3:94:c8:2b:d5:58:69:5c:91:49:df:85:
13:dc:3b:e8:8f:de:f8:41:59:e3:55:9d:c3:db:ae:
1d:95:12:ff:c5:a3:a1:ee:f7:18:4f:b3:d0:db:05:
87:36:09:a8:9d:14:3d:55:8c:81:80:a3:fc:7e:56:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:96:EC:3A:9C:47:47:7B:6A:DF:ED:99:25:23:DB:6C:CA:A3:C0:CE
X509v3 Authority Key Identifier:
keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d1:85:37:ab:b8:5f:14:7f:04:3e:31:48:5c:04:0b:f9:b4:
e4:2f:ed:27:ab:a3:95:8b:7f:fa:4c:97:4f:5b:79:00:b1:55:
b0:ff:2b:cb:d1:c4:38:be:c8:52:b0:34:61:3f:82:33:47:9d:
85:6b:2f:bb:61:66:9c:04:2c:30:ed:f3:a5:f4:9e:09:e6:89:
46:29:8c:22:37:e5:29:98:c9:af:50:db:79:e3:a6:52:01:f6:
ee:73:b9:d2:39:ce:fe:81:13:c3:bd:df:37:d9:e0:6f:b2:e9:
17:52:ec:b6:a4:ae:26:44:fa:b9:f4:3b:70:f5:7e:a7:98:9c:
e1:71:87:29:86:08:b4:62:97:70:dd:1b:1a:7d:32:c9:b0:cf:
9f:4c:95:4b:ce:16:e7:d1:53:e9:cf:5c:80:ef:74:82:32:b9:
98:a1:54:8b:16:10:88:38:f5:f8:6f:7f:ad:d4:63:8d:6a:4c:
b3:0e:1b:5a:e3:54:32:62:dd:cf:c6:08:c9:bb:f8:5e:ff:bd:
45:0c:cc:db:d4:89:9e:f2:55:95:25:48:be:94:96:b5:80:a2:
fe:dc:68:c9:c9:77:5f:11:16:34:8d:64:0e:2b:1d:cc:9a:82:
e8:63:67:92:42:a8:5a:12:ec:ac:fd:a7:20:17:58:42:70:a8:
e6:98:d9:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHtOt+U9RXNRvPIqPSbmMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDdkYzAzNmQ5ZDZjMjhmMWQ4N2FiNjRlNzhlZTQ4NWE5
NmZkODEwHhcNMjUwOTA3MDMwMTA5WhcNMjUwOTA4MDMwMTA5WjAzMTEwLwYDVQQD
EyhkMjk2ZWMzYTljNDc0NzdiNmFkZmVkOTkyNTIzZGI2Y2NhYTNjMGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjdTIBPpnjFJo4WaFrzdAucv8dTU
OFqSnr4SAzh8bekZrX2lxjtulp8kybmkp+sYZeklFSuDBMlj1wIX9ZGNYIIwjgyJ
Lx+wOiUlvWO1YoXevl3/gqTb3hXJDuEZv5eOg7RrgBeOCkrMZmchiRm6+jRcIsMy
joGMB2V1+/UlgeFeORTkL1GQX6Tur0nXCwhi/3LW4wR/n5Fmr1M3yGIuUQeOP5kz
Do0U0YtiXmpkXr/dmM+dCKELDMNXsennzsT6tKQJ8CfjlMgr1VhpXJFJ34UT3Dvo
j974QVnjVZ3D264dlRL/xaOh7vcYT7PQ2wWHNgmonRQ9VYyBgKP8flYZ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKW7DqcR0d7at/tmSUj22zKo8DOMB8GA1UdIwQY
MBaAFIEH3ANtnWwo8dh6tk547khalv2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xNTk4NjAtZjgzMi00MzhhLTllNmYt
NzZhMTQxY2RkNDFmLzEvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xNTk4NjAtZjgzMi00MzhhLTllNmYtNzZhMTQxY2RkNDFm
LzEvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtGFN6u4
XxR/BD4xSFwEC/m05C/tJ6ujlYt/+kyXT1t5ALFVsP8ry9HEOL7IUrA0YT+CM0ed
hWsvu2FmnAQsMO3zpfSeCeaJRimMIjflKZjJr1DbeeOmUgH27nO50jnO/oETw73f
N9ngb7LpF1LstqSuJkT6ufQ7cPV+p5ic4XGHKYYItGKXcN0bGn0yybDPn0yVS84W
59FT6c9cgO90gjK5mKFUixYQiDj1+G9/rdRjjWpMsw4bWuNUMmLdz8YIybv4Xv+9
RQzM29SJnvJVlSVIvpSWtYCi/txoycl3XxEWNI1kDisdzJqC6GNnkkKoWhLsrP2n
IBdYQnCo5pjZDg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:57:03 2025 by rpki-client