Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
File: gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json)
Hash identifier: uTro5Duy030iMfXdzoxMeODPZVEUWCUOUCI0OcDx5p4=
Subject key identifier: 20:6B:91:FF:6D:9B:C3:39:9E:27:FF:74:15:AE:4B:C6:E4:10:71:8C
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Certificate issuer: /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial: 0199221EF7DF5FF76BEB5B883F470788718F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
Manifest number: 0377
Signing time: Sun 07 Sep 2025 03:01:18 +0000
Manifest this update: Sun 07 Sep 2025 03:01:18 +0000
Manifest next update: Mon 08 Sep 2025 03:01:18 +0000
Files and hashes: 1: AUMiWbM4e52RdzmaQ6UG45QPmwI.roa (hash: GsuF2sv+ICThkJKWildnPjGLnNEqrWMzCEJm1Y27s1Y=)
2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: oftLbR+hM7yCb3vMyF+AjfyvqVBl6i+CO0EGZ63GLlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f7:df:5f:f7:6b:eb:5b:88:3f:47:07:88:71:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Validity
Not Before: Sep 7 03:01:18 2025 GMT
Not After : Sep 8 03:01:18 2025 GMT
Subject: CN=206b91ff6d9bc3399e27ff7415ae4bc6e410718c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:f2:cf:1f:42:7a:5a:f4:3f:1b:02:d1:02:
9c:f8:aa:1f:58:fb:e0:a6:5c:98:46:ae:23:b4:c0:
62:67:44:fb:1f:70:1f:15:2b:41:43:77:b3:b3:76:
d6:f8:4e:a2:d0:98:79:b6:78:16:34:d0:1e:50:49:
49:44:bb:76:5d:0e:73:07:aa:da:e4:53:1b:62:cf:
21:55:22:fb:91:13:93:4f:f1:5b:11:b9:d1:25:90:
e4:b8:38:af:d2:17:8b:3c:f4:99:d9:4b:05:52:ba:
a4:f2:45:6b:89:b6:af:45:61:7e:8a:12:c9:1b:d0:
3f:27:e6:15:ff:3c:03:df:e1:86:fd:13:74:0d:35:
1d:24:b7:81:09:18:4b:05:b9:1a:fa:6e:44:d0:90:
26:ec:9a:8b:dd:eb:b3:82:e4:6d:43:49:7d:6e:95:
ba:ca:6a:32:1b:06:d7:32:e6:ce:08:f3:2b:43:48:
f0:29:a5:0b:db:14:46:24:68:20:66:b2:73:4e:23:
4a:74:75:8b:27:40:11:14:3d:e7:af:d7:ae:d2:28:
7f:bf:93:f3:1e:7a:e4:a6:4e:b3:ba:92:97:92:d5:
c6:52:db:b5:de:e5:26:38:4a:7b:4f:7e:9c:de:5a:
09:e9:9b:d8:cd:26:6b:4f:09:bc:60:7a:c9:de:fd:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6B:91:FF:6D:9B:C3:39:9E:27:FF:74:15:AE:4B:C6:E4:10:71:8C
X509v3 Authority Key Identifier:
keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:46:77:a1:e5:53:00:0e:dc:30:56:4d:25:69:bf:48:fe:9d:
39:3b:c1:5c:05:b1:4a:1d:c6:cd:a7:5d:c1:e2:7d:74:11:d3:
d0:c9:6e:29:1b:31:9a:db:b4:19:8b:77:18:4a:ca:5d:7e:34:
c5:5b:4b:cd:4f:a8:77:fa:c5:4c:d5:16:88:27:a3:df:18:5b:
be:f8:68:99:05:a6:d0:fd:02:7f:09:3e:38:9d:b7:ed:da:c7:
80:bc:3f:06:6f:de:63:5b:79:1a:8f:14:5d:0d:e9:5f:28:55:
3e:84:68:02:8e:47:13:75:9e:96:0f:d4:fa:d1:bd:25:b4:c4:
23:45:f3:75:8c:f8:f5:ce:95:bc:90:8b:a7:36:6c:ca:70:6c:
ef:9a:67:0e:9d:1c:84:98:6e:5a:43:41:66:34:9e:fe:ac:cb:
83:ce:22:43:fc:11:f7:48:a7:96:da:bb:bc:2e:aa:fa:5a:cb:
62:a4:36:af:ad:08:46:a6:f2:0b:61:09:c1:92:52:1d:ef:56:
51:7f:c9:7f:c1:c4:84:db:d7:5b:d7:f1:ad:23:16:d3:3a:8f:
ac:ab:f9:a6:a1:32:06:41:69:19:5c:be:e0:54:3d:56:63:d5:
5c:f4:e5:50:a6:f8:1a:31:12:18:59:42:c6:d2:71:f0:d6:67:
cd:a9:d1:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHvffX/dr61uIP0cHiHGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2U1MzVkYjdlMWI3MTVhZTM0ZTlmMWRkYmQ4NDM2OTJm
NmZlZmEwHhcNMjUwOTA3MDMwMTE4WhcNMjUwOTA4MDMwMTE4WjAzMTEwLwYDVQQD
EygyMDZiOTFmZjZkOWJjMzM5OWUyN2ZmNzQxNWFlNGJjNmU0MTA3MThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuijyzx9Celr0PxsC0QKc+KofWPvg
plyYRq4jtMBiZ0T7H3AfFStBQ3ezs3bW+E6i0Jh5tngWNNAeUElJRLt2XQ5zB6ra
5FMbYs8hVSL7kROTT/FbEbnRJZDkuDiv0heLPPSZ2UsFUrqk8kVribavRWF+ihLJ
G9A/J+YV/zwD3+GG/RN0DTUdJLeBCRhLBbka+m5E0JAm7JqL3euzguRtQ0l9bpW6
ymoyGwbXMubOCPMrQ0jwKaUL2xRGJGggZrJzTiNKdHWLJ0ARFD3nr9eu0ih/v5Pz
Hnrkpk6zupKXktXGUtu13uUmOEp7T36c3loJ6ZvYzSZrTwm8YHrJ3v0KcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBrkf9tm8M5nif/dBWuS8bkEHGMMB8GA1UdIwQY
MBaAFIM+U1234bcVrjTp8d29hDaS9v76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o1VFhiZmh0eFd1Tk9ueDNiMkVOcEwyX3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82YmRhYzctNjJkNC00MDMzLWI5YWQt
MzEwMzRjMzU2ZmEzLzEvZ3o1VFhiZmh0eFd1Tk9ueDNiMkVOcEwyX3ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82YmRhYzctNjJkNC00MDMzLWI5YWQtMzEwMzRjMzU2ZmEz
LzEvZ3o1VFhiZmh0eFd1Tk9ueDNiMkVOcEwyX3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkZ3oeVT
AA7cMFZNJWm/SP6dOTvBXAWxSh3GzaddweJ9dBHT0MluKRsxmtu0GYt3GErKXX40
xVtLzU+od/rFTNUWiCej3xhbvvhomQWm0P0Cfwk+OJ237drHgLw/Bm/eY1t5Go8U
XQ3pXyhVPoRoAo5HE3Welg/U+tG9JbTEI0XzdYz49c6VvJCLpzZsynBs75pnDp0c
hJhuWkNBZjSe/qzLg84iQ/wR90inltq7vC6q+lrLYqQ2r60IRqbyC2EJwZJSHe9W
UX/Jf8HEhNvXW9fxrSMW0zqPrKv5pqEyBkFpGVy+4FQ9VmPVXPTlUKb4GjESGFlC
xtJx8NZnzanRnw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:39 2025 by rpki-client