Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: vrjMx1McG6Bt6IzPPLFd8gz5djsFQmWPdVCJYYj7F90=
Subject key identifier: CB:8C:67:5F:75:01:91:C3:B4:C1:E4:F0:CA:3A:06:B4:DA:89:55:74
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 01991D65B95DBF03ED5177135D77E8564FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0FA8
Signing time: Sat 06 Sep 2025 05:00:29 +0000
Manifest this update: Sat 06 Sep 2025 05:00:29 +0000
Manifest next update: Sun 07 Sep 2025 05:00:29 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: YHmUmtBKWiBQdP0lw9/GaGxeow0dzZbqrXu1myDY2ww=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:65:b9:5d:bf:03:ed:51:77:13:5d:77:e8:56:4f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Sep 6 05:00:29 2025 GMT
Not After : Sep 7 05:00:29 2025 GMT
Subject: CN=cb8c675f750191c3b4c1e4f0ca3a06b4da895574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:cc:ec:37:9a:9f:ea:d0:51:4f:dd:83:18:
6f:fa:76:c8:db:96:72:ac:b9:60:82:3d:4f:43:d6:
35:eb:fe:3c:af:f6:6b:48:fa:c3:6b:62:0f:1e:aa:
2b:2d:62:7a:a3:3e:07:4f:76:eb:82:b8:80:7c:bd:
55:7c:04:c2:80:d5:5c:02:46:70:19:f5:82:f5:6b:
45:7f:a5:b5:4d:b1:7a:06:36:94:81:84:ad:ad:27:
15:5e:5e:da:b8:8e:04:da:57:44:65:a7:14:8f:b6:
64:a9:fc:ab:c7:ae:05:54:8e:c2:61:19:c7:3a:3f:
2d:1b:82:12:16:01:69:85:65:55:4e:06:7c:2d:6b:
e2:e9:dd:88:ba:97:70:c8:a6:ec:a9:f5:2b:c4:82:
95:b8:aa:b8:74:4f:9d:3c:41:59:57:6f:0a:b7:10:
e9:2d:5f:af:c5:d2:3d:ca:14:f7:c7:af:ba:6d:5f:
8c:45:bb:b9:0d:6c:b6:16:33:9a:6d:e2:86:5c:0b:
31:85:43:3f:b4:4e:08:b1:03:a1:38:15:57:23:16:
4d:da:7b:9c:46:25:16:fb:d6:73:e7:5b:4f:78:5e:
f3:28:a8:f1:51:fc:32:e2:c7:b2:34:83:9b:fd:d5:
69:3b:be:09:14:24:14:7e:aa:76:f9:a4:b4:a2:67:
d4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8C:67:5F:75:01:91:C3:B4:C1:E4:F0:CA:3A:06:B4:DA:89:55:74
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:84:37:ae:a7:70:c5:75:80:dd:26:4d:95:b1:7d:f7:3e:c1:
98:ff:72:77:e1:75:e3:7c:d7:93:29:79:b8:25:5a:7e:9d:0c:
16:84:bc:d7:7b:d6:41:8c:29:95:b8:80:8a:10:9d:90:8b:fb:
bd:e1:44:98:1d:a3:b1:99:64:de:09:d4:24:4b:42:18:3c:40:
e8:11:81:68:71:16:46:3f:d8:8c:7d:82:04:72:40:78:b4:ac:
0d:18:23:be:2c:8f:e6:67:df:09:35:92:05:6e:c1:13:e4:b3:
7f:10:d6:15:4a:76:f5:36:04:f2:99:ce:b7:c2:c8:6d:fd:ab:
f0:41:17:86:08:d2:88:eb:b8:2c:13:e8:8d:38:5b:b2:91:c8:
63:99:7b:88:d7:31:15:bc:fe:6f:0f:3e:3b:75:4a:45:29:8e:
7f:1d:37:9e:21:9e:12:2a:a4:c2:9e:41:f5:e6:02:af:d5:82:
7a:8c:19:cd:62:7d:ed:3d:d6:b7:f5:72:6a:91:1c:96:1f:4f:
2a:45:e7:4c:b7:05:b9:32:0e:bd:d9:16:a4:b1:35:df:42:b9:
de:05:70:02:3f:f7:8e:7a:98:3c:56:9c:c8:3b:d7:8f:09:06:
71:6a:2b:a2:d4:65:9c:ca:62:bc:d8:5f:64:8e:7c:15:db:e1:
31:57:21:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkdZbldvwPtUXcTXXfoVk/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMWFlNWU0OWE0NGFiZGRjMjJiMGFkYmRhZWI2NDEzNmYy
NWQ0NjcwHhcNMjUwOTA2MDUwMDI5WhcNMjUwOTA3MDUwMDI5WjAzMTEwLwYDVQQD
EyhjYjhjNjc1Zjc1MDE5MWMzYjRjMWU0ZjBjYTNhMDZiNGRhODk1NTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLDM7Dean+rQUU/dgxhv+nbI25Zy
rLlggj1PQ9Y16/48r/ZrSPrDa2IPHqorLWJ6oz4HT3brgriAfL1VfATCgNVcAkZw
GfWC9WtFf6W1TbF6BjaUgYStrScVXl7auI4E2ldEZacUj7Zkqfyrx64FVI7CYRnH
Oj8tG4ISFgFphWVVTgZ8LWvi6d2IupdwyKbsqfUrxIKVuKq4dE+dPEFZV28KtxDp
LV+vxdI9yhT3x6+6bV+MRbu5DWy2FjOabeKGXAsxhUM/tE4IsQOhOBVXIxZN2nuc
RiUW+9Zz51tPeF7zKKjxUfwy4seyNIOb/dVpO74JFCQUfqp2+aS0omfU+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuMZ191AZHDtMHk8Mo6BrTaiVV0MB8GA1UdIwQY
MBaAFBoa5eSaRKvdwisK29rrZBNvJdRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYt
YTExNjlhMjg5YzU0LzEvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYtYTExNjlhMjg5YzU0
LzEvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoQ3rqdw
xXWA3SZNlbF99z7BmP9yd+F143zXkyl5uCVafp0MFoS813vWQYwplbiAihCdkIv7
veFEmB2jsZlk3gnUJEtCGDxA6BGBaHEWRj/YjH2CBHJAeLSsDRgjviyP5mffCTWS
BW7BE+SzfxDWFUp29TYE8pnOt8LIbf2r8EEXhgjSiOu4LBPojThbspHIY5l7iNcx
Fbz+bw8+O3VKRSmOfx03niGeEiqkwp5B9eYCr9WCeowZzWJ97T3Wt/VyapEclh9P
KkXnTLcFuTIOvdkWpLE130K53gVwAj/3jnqYPFacyDvXjwkGcWorotRlnMpivNhf
ZI58FdvhMVchow==
-----END CERTIFICATE-----
Generated at Sat Sep 6 08:15:01 2025 by rpki-client