Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: WoMS9zK42QThMr0j8tJmAVQN2FDcHWdY3m+GMMY2i8k=
Subject key identifier: 75:0C:B2:02:88:5F:85:17:19:13:CB:63:DB:54:86:D7:97:76:3C:F5
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 019932A3C1BC024E13753B1583286CF69B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 0120
Signing time: Wed 10 Sep 2025 08:00:16 +0000
Manifest this update: Wed 10 Sep 2025 08:00:16 +0000
Manifest next update: Thu 11 Sep 2025 08:00:16 +0000
Files and hashes: 1: 9PkegdPcOVaHYch8whuUGhkGOzc.roa (hash: nTpt8kDLjSLrMGR0C/m0j9Ftj77WGzhvL7KxFH3u7Z8=)
2: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: iOJo5Le5aE8hbcZMhYujr+ZZCSxxltO5eOXe8/66It0=)
3: mo525hECNfAEonllRKyyBVCuVuY.roa (hash: a5b0LUZ9waSvhihXnwQQ6mCuKjGwIDzPkvhonuJ3oDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:c1:bc:02:4e:13:75:3b:15:83:28:6c:f6:9b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Sep 10 08:00:16 2025 GMT
Not After : Sep 11 08:00:16 2025 GMT
Subject: CN=750cb202885f85171913cb63db5486d797763cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:12:aa:c9:e4:32:ed:08:49:6f:ca:24:17:
ba:57:60:1b:53:5e:56:13:c0:35:68:b3:63:2f:12:
35:d1:b4:08:17:da:cb:73:4a:d3:12:3a:54:a3:52:
0c:26:5e:95:3f:a2:0f:fb:09:2e:c1:86:4a:36:ac:
f7:61:c1:76:18:37:d2:a3:39:29:75:6d:0c:30:a1:
c2:ad:44:0d:06:ce:e8:02:1e:c2:c2:68:e2:92:e9:
f9:64:6e:5b:39:41:c3:8a:e6:38:3e:39:59:ff:a1:
e8:14:ef:7b:cd:80:98:81:6d:d9:ab:0d:f0:5d:9f:
4c:10:e1:e9:77:d5:a7:d4:d2:52:f8:79:b2:d9:7f:
db:8b:ba:b5:ba:25:49:42:8f:bc:78:0d:bf:27:c6:
11:2a:88:c5:0b:85:2a:38:0a:43:f9:59:8b:e6:f4:
bf:72:78:68:65:63:2d:c9:5e:37:35:b1:f4:66:d4:
35:58:ef:9d:90:6b:29:b8:03:01:8a:54:c3:20:59:
90:b6:56:67:5d:c5:31:d3:e5:6e:92:94:08:69:42:
e5:71:b4:29:5e:20:4e:7f:07:b9:7e:ef:3f:a3:4e:
fc:85:b9:6e:9d:da:ea:61:89:0c:46:8c:0e:7b:f9:
47:cf:a2:12:73:fd:e9:9e:19:0d:5e:65:6e:12:53:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0C:B2:02:88:5F:85:17:19:13:CB:63:DB:54:86:D7:97:76:3C:F5
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8e:fc:a9:0a:bd:81:b7:b7:4b:01:5e:43:da:9c:f2:7f:37:
aa:6a:c2:b0:fe:00:5f:93:37:14:34:70:9c:30:06:a5:a7:86:
b0:f5:cc:f3:29:42:5f:0b:00:e3:c5:a9:8d:b9:63:e0:c3:1c:
01:b4:dc:9a:6a:15:8b:0b:55:17:7c:0a:6f:3d:fc:a5:3e:b0:
94:15:d2:9c:d8:00:f3:91:92:89:8f:de:e3:e3:dc:9a:03:3f:
ab:d2:2a:32:65:e5:f4:dd:14:ad:8b:22:2d:8b:ad:15:ee:20:
38:07:78:ec:b1:ef:84:0c:53:8d:ca:9c:a2:2d:a0:e4:62:da:
59:75:7f:ac:3c:5e:63:b1:fd:55:3d:ab:23:1f:0e:e9:92:d1:
df:61:22:ed:e6:ae:0d:d2:e1:9b:03:4f:53:b2:75:c2:1e:0f:
df:82:b4:fc:50:78:dc:ff:79:e8:9a:fe:ba:71:83:56:89:82:
90:b3:71:8b:b4:04:41:81:2a:b3:b2:30:2d:36:26:68:c1:a0:
4c:10:20:67:e5:02:98:18:cd:00:11:c6:28:85:ca:91:df:7e:
a8:ed:df:34:e1:3c:8b:78:c5:ef:de:1b:e3:af:89:6b:d9:11:
a2:5b:61:1a:82:67:3c:19:a4:28:48:a8:0f:9a:36:c5:2b:83:
aa:81:e6:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkyo8G8Ak4TdTsVgyhs9ptBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGUxMGE5NTZmYTUyNTE2ZThmZDNiOTMxOGU4NGE1NTM4
M2Q2MmIwHhcNMjUwOTEwMDgwMDE2WhcNMjUwOTExMDgwMDE2WjAzMTEwLwYDVQQD
Eyg3NTBjYjIwMjg4NWY4NTE3MTkxM2NiNjNkYjU0ODZkNzk3NzYzY2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovoSqsnkMu0ISW/KJBe6V2AbU15W
E8A1aLNjLxI10bQIF9rLc0rTEjpUo1IMJl6VP6IP+wkuwYZKNqz3YcF2GDfSozkp
dW0MMKHCrUQNBs7oAh7Cwmjikun5ZG5bOUHDiuY4PjlZ/6HoFO97zYCYgW3Zqw3w
XZ9MEOHpd9Wn1NJS+Hmy2X/bi7q1uiVJQo+8eA2/J8YRKojFC4UqOApD+VmL5vS/
cnhoZWMtyV43NbH0ZtQ1WO+dkGspuAMBilTDIFmQtlZnXcUx0+VukpQIaULlcbQp
XiBOfwe5fu8/o078hblundrqYYkMRowOe/lHz6ISc/3pnhkNXmVuElO53QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUMsgKIX4UXGRPLY9tUhteXdjz1MB8GA1UdIwQY
MBaAFBlOEKlW+lJRbo/TuTGOhKVTg9YrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDct
NTFmMDc3ZjMwZDNmLzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDctNTFmMDc3ZjMwZDNm
LzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARY78qQq9
gbe3SwFeQ9qc8n83qmrCsP4AX5M3FDRwnDAGpaeGsPXM8ylCXwsA48Wpjblj4MMc
AbTcmmoViwtVF3wKbz38pT6wlBXSnNgA85GSiY/e4+PcmgM/q9IqMmXl9N0UrYsi
LYutFe4gOAd47LHvhAxTjcqcoi2g5GLaWXV/rDxeY7H9VT2rIx8O6ZLR32Ei7eau
DdLhmwNPU7J1wh4P34K0/FB43P956Jr+unGDVomCkLNxi7QEQYEqs7IwLTYmaMGg
TBAgZ+UCmBjNABHGKIXKkd9+qO3fNOE8i3jF794b46+Ja9kRolthGoJnPBmkKEio
D5o2xSuDqoHmhg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:30:18 2025 by rpki-client