Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
File: gCVbZMlsAQvaN98j2JJo6OR0jdM.mft (raw, json)
Hash identifier: HpwZM/CFD3TFIiXWn85oSmJZ7Ba8j0rYCnhh3+dvcQk=
Subject key identifier: 9D:73:9F:6B:2C:C3:BA:52:37:EE:0A:6D:6E:A4:96:F8:7F:27:00:E0
Authority key identifier: 80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
Certificate issuer: /CN=80255b64c96c010bda37df23d89268e8e4748dd3
Certificate serial: 0198CBA59C6CDBFE9613738A8B9FB1072890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
Manifest number: 082B
Signing time: Thu 21 Aug 2025 08:01:25 +0000
Manifest this update: Thu 21 Aug 2025 08:01:25 +0000
Manifest next update: Fri 22 Aug 2025 08:01:25 +0000
Files and hashes: 1: gCVbZMlsAQvaN98j2JJo6OR0jdM.crl (hash: 783OYzK2dOtgHmVthYCDNjY3UjhORj5iIi3vNCZd89Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:a5:9c:6c:db:fe:96:13:73:8a:8b:9f:b1:07:28:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80255b64c96c010bda37df23d89268e8e4748dd3
Validity
Not Before: Aug 21 08:01:25 2025 GMT
Not After : Aug 22 08:01:25 2025 GMT
Subject: CN=9d739f6b2cc3ba5237ee0a6d6ea496f87f2700e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:65:7b:c0:fd:76:b2:f5:f3:84:a1:69:9f:
22:fa:71:e0:3f:37:a2:07:86:a2:f2:57:89:8e:ff:
13:be:8d:a4:5f:60:8b:cb:d6:a0:15:e3:92:eb:40:
84:39:78:f7:e5:96:49:a2:f5:33:42:a2:65:57:87:
a4:b7:fe:ac:40:ce:63:80:f8:30:84:bf:8c:0b:af:
e0:ee:10:ab:81:40:2e:29:d0:09:1d:ff:4b:52:70:
7d:84:05:79:51:60:65:36:5e:bf:38:e5:d9:5e:91:
a8:39:a4:73:bd:de:fa:13:db:29:de:4f:f6:1b:12:
53:38:6e:11:04:11:c2:56:27:df:1b:aa:0a:6a:fb:
ed:cc:1e:fc:7b:0b:88:a5:70:cf:64:f8:63:f7:c6:
35:62:13:89:63:55:17:0f:68:27:7e:8d:1a:8c:3e:
0b:3a:01:ab:fb:28:12:ca:46:39:cc:47:48:a0:15:
9a:11:f1:16:d8:44:f9:12:ed:be:37:71:95:ea:1e:
ab:19:e2:b0:4d:3a:c4:aa:05:9c:56:55:3a:05:d2:
26:b0:e2:74:17:78:56:94:52:39:5e:7a:3f:03:6b:
7b:73:ec:19:40:38:e6:49:cd:bb:b0:06:30:2a:b1:
91:e2:5d:97:cb:32:93:40:de:c4:8a:18:ef:f8:88:
ee:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:73:9F:6B:2C:C3:BA:52:37:EE:0A:6D:6E:A4:96:F8:7F:27:00:E0
X509v3 Authority Key Identifier:
keyid:80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c2:ed:05:f8:15:71:7c:55:5b:4f:aa:95:55:e5:eb:a9:c4:
d5:ec:74:1a:8b:c0:d4:d2:7c:49:72:46:ad:4f:09:4b:ed:b8:
20:76:c2:2b:67:0c:61:8c:5c:0b:d3:2a:bc:16:53:ab:74:2e:
b9:81:1d:d2:6f:71:cd:c1:b3:ec:e8:0f:2a:03:42:a8:b4:7f:
b9:5a:f1:e1:9b:cb:97:f2:1d:63:33:5c:64:e3:31:6b:91:48:
48:28:b7:0b:4b:1b:9d:e5:7f:8b:74:38:ff:0c:a2:68:2d:88:
0c:46:81:42:05:82:53:e5:0b:91:31:25:ed:4e:66:97:9e:70:
47:d1:d7:9d:75:9a:ab:d0:0b:44:15:2a:ae:ac:f0:08:2b:be:
46:2f:6a:3f:0f:10:d0:8c:87:a8:e6:3c:be:be:96:4d:6f:4b:
3f:46:8e:c5:e2:41:17:f7:a2:9c:db:57:a2:fe:cd:38:d0:f3:
b8:5f:24:b8:e0:5f:d2:54:5c:81:66:b0:ab:c4:33:d2:c7:6e:
70:ec:8d:2c:f1:b6:24:9a:4f:14:fc:a9:69:88:9f:ca:62:21:
a4:c9:11:2e:4b:19:7d:9a:d2:51:eb:3e:53:69:f8:29:6e:55:
2a:3c:24:7b:50:c8:23:5f:20:23:40:3c:0c:32:7b:80:ce:f8:
51:14:50:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjLpZxs2/6WE3OKi5+xByiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMjU1YjY0Yzk2YzAxMGJkYTM3ZGYyM2Q4OTI2OGU4ZTQ3
NDhkZDMwHhcNMjUwODIxMDgwMTI1WhcNMjUwODIyMDgwMTI1WjAzMTEwLwYDVQQD
Eyg5ZDczOWY2YjJjYzNiYTUyMzdlZTBhNmQ2ZWE0OTZmODdmMjcwMGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBdle8D9drL184ShaZ8i+nHgPzei
B4ai8leJjv8Tvo2kX2CLy9agFeOS60CEOXj35ZZJovUzQqJlV4ekt/6sQM5jgPgw
hL+MC6/g7hCrgUAuKdAJHf9LUnB9hAV5UWBlNl6/OOXZXpGoOaRzvd76E9sp3k/2
GxJTOG4RBBHCViffG6oKavvtzB78ewuIpXDPZPhj98Y1YhOJY1UXD2gnfo0ajD4L
OgGr+ygSykY5zEdIoBWaEfEW2ET5Eu2+N3GV6h6rGeKwTTrEqgWcVlU6BdImsOJ0
F3hWlFI5Xno/A2t7c+wZQDjmSc27sAYwKrGR4l2XyzKTQN7Eihjv+IjuSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1zn2ssw7pSN+4KbW6klvh/JwDgMB8GA1UdIwQY
MBaAFIAlW2TJbAEL2jffI9iSaOjkdI3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0NWYlpNbHNBUXZhTjk4ajJKSm82T1IwamRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xODc2MWUtMjU2NC00MjBlLWFmZjUt
NjM1ZTY1YjhiOTJlLzEvZ0NWYlpNbHNBUXZhTjk4ajJKSm82T1IwamRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8xODc2MWUtMjU2NC00MjBlLWFmZjUtNjM1ZTY1YjhiOTJl
LzEvZ0NWYlpNbHNBUXZhTjk4ajJKSm82T1IwamRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsLtBfgV
cXxVW0+qlVXl66nE1ex0GovA1NJ8SXJGrU8JS+24IHbCK2cMYYxcC9MqvBZTq3Qu
uYEd0m9xzcGz7OgPKgNCqLR/uVrx4ZvLl/IdYzNcZOMxa5FISCi3C0sbneV/i3Q4
/wyiaC2IDEaBQgWCU+ULkTEl7U5ml55wR9HXnXWaq9ALRBUqrqzwCCu+Ri9qPw8Q
0IyHqOY8vr6WTW9LP0aOxeJBF/einNtXov7NONDzuF8kuOBf0lRcgWawq8Qz0sdu
cOyNLPG2JJpPFPypaYifymIhpMkRLksZfZrSUes+U2n4KW5VKjwke1DII18gI0A8
DDJ7gM74URRQBg==
-----END CERTIFICATE-----
Generated at Thu Aug 21 12:50:34 2025 by rpki-client