Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
File: G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft (raw, json)
Hash identifier: VuZHbNG0OKLemdMe3uH5EyHvVmthbaEMHREMGWPIVCs=
Subject key identifier: 58:66:E8:47:0D:12:DA:12:98:58:A3:06:65:1B:CB:E6:85:31:BF:4D
Authority key identifier: 1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
Certificate issuer: /CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Certificate serial: 019922FAA93C8A9054556C86842908D66DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
Manifest number: 0FA8
Signing time: Sun 07 Sep 2025 07:01:16 +0000
Manifest this update: Sun 07 Sep 2025 07:01:16 +0000
Manifest next update: Mon 08 Sep 2025 07:01:16 +0000
Files and hashes: 1: G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl (hash: LQVvkQ1W/1ejszriKFaQbuwtYHBTxcpxByPrNv76lZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a9:3c:8a:90:54:55:6c:86:84:29:08:d6:6d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Validity
Not Before: Sep 7 07:01:16 2025 GMT
Not After : Sep 8 07:01:16 2025 GMT
Subject: CN=5866e8470d12da129858a306651bcbe68531bf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:32:0f:f8:23:c7:f9:2b:37:e4:8a:10:c6:
dc:89:2e:00:3e:c7:13:94:5a:82:c1:db:17:18:3f:
c6:2e:55:b4:a0:03:1f:4f:df:7f:96:a6:d9:66:08:
8d:10:58:a0:30:85:48:62:d0:0f:ac:0b:6c:0f:b1:
8f:ec:6e:90:2f:7b:9f:0a:27:08:f1:33:d1:c7:04:
ee:a6:75:2c:85:48:81:d9:4d:7f:03:51:0a:64:2b:
68:d1:6b:a7:fc:f8:c0:46:e3:e5:92:b0:20:6a:39:
f7:89:8e:b3:b1:9b:87:ba:cd:8a:4f:31:a2:38:1d:
44:77:0c:e2:b3:47:e9:94:80:b9:96:a3:2c:a6:2a:
ec:67:7c:44:62:58:a5:10:8c:0e:bd:7f:55:c0:29:
c0:2f:aa:cb:c8:7c:d7:ac:ac:b8:39:43:15:18:17:
8c:7f:93:c3:f2:21:0c:ce:eb:a7:d2:1f:5f:70:1f:
3d:9e:f8:a8:27:a9:73:ba:b6:93:48:9f:81:86:79:
e5:b8:ad:cd:63:ad:0f:70:b6:be:df:dc:93:93:b5:
be:e3:80:3f:cd:1f:5d:68:76:71:69:cd:6c:bb:e8:
22:c0:aa:1c:69:f4:e7:46:c8:84:e9:46:e2:98:33:
c8:67:1d:52:9d:34:49:c8:e6:52:20:a6:b1:63:68:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:66:E8:47:0D:12:DA:12:98:58:A3:06:65:1B:CB:E6:85:31:BF:4D
X509v3 Authority Key Identifier:
keyid:1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bf:92:01:01:77:ed:f7:22:97:b6:92:aa:48:57:e4:4d:f9:
d6:4b:07:5e:9e:0b:c9:ee:ab:8d:8c:19:b5:0b:6a:d5:62:ed:
82:a6:73:3d:d8:cb:9d:24:5f:80:6c:27:44:f9:76:ab:58:4e:
14:db:82:c0:b3:58:77:d2:ca:9e:2b:b8:f9:77:44:af:fc:02:
6e:95:0b:b3:18:2b:eb:cc:50:b8:2d:1d:3e:b1:69:87:56:b8:
1a:e3:cb:f6:84:a5:3e:ae:07:92:89:08:15:af:b8:0b:5d:a3:
cc:17:6b:bc:47:eb:f4:2f:e2:6b:2b:b5:e1:60:72:74:e0:99:
5d:89:7b:e7:95:56:10:71:ad:e6:59:4b:98:f8:38:2c:12:4b:
28:e2:cd:1d:f3:d5:ed:f1:62:b5:25:2f:5b:de:3f:97:d6:19:
7d:63:1a:97:80:49:93:f5:9d:b9:44:13:b4:4b:7f:cf:e9:22:
4b:5b:b3:f8:02:d4:52:3b:74:90:3a:c4:ad:c1:e8:47:a3:cf:
00:46:32:94:5e:8d:b0:b2:91:4f:07:47:d4:f5:37:ce:80:1d:
9d:bb:b4:4f:33:fc:df:cc:5e:4a:34:b0:ae:2a:5e:e6:06:7e:
2a:3c:9a:8a:38:f4:32:b7:9e:ee:aa:a9:62:b9:fb:f4:3b:6d:
a4:c2:50:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+qk8ipBUVWyGhCkI1m3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZTMzY2Y3YTZkMGYxOTM2M2JmZmQyYTZmMmU5ZmM0NzI3
OTAxZmMwHhcNMjUwOTA3MDcwMTE2WhcNMjUwOTA4MDcwMTE2WjAzMTEwLwYDVQQD
Eyg1ODY2ZTg0NzBkMTJkYTEyOTg1OGEzMDY2NTFiY2JlNjg1MzFiZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoAyD/gjx/krN+SKEMbciS4APscT
lFqCwdsXGD/GLlW0oAMfT99/lqbZZgiNEFigMIVIYtAPrAtsD7GP7G6QL3ufCicI
8TPRxwTupnUshUiB2U1/A1EKZCto0Wun/PjARuPlkrAgajn3iY6zsZuHus2KTzGi
OB1Edwzis0fplIC5lqMspirsZ3xEYlilEIwOvX9VwCnAL6rLyHzXrKy4OUMVGBeM
f5PD8iEMzuun0h9fcB89nvioJ6lzuraTSJ+BhnnluK3NY60PcLa+39yTk7W+44A/
zR9daHZxac1su+giwKocafTnRsiE6UbimDPIZx1SnTRJyOZSIKaxY2jBnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhm6EcNEtoSmFijBmUby+aFMb9NMB8GA1UdIwQY
MBaAFBvjPPem0PGTY7/9Km8un8RyeQH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy1NODk2YlE4Wk5qdl8wcWJ5NmZ4SEo1QWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80NzQ5YjctY2U1ZS00NjIxLTk4Nzct
MmZjYTY5ZDBmZGVjLzEvRy1NODk2YlE4Wk5qdl8wcWJ5NmZ4SEo1QWZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80NzQ5YjctY2U1ZS00NjIxLTk4NzctMmZjYTY5ZDBmZGVj
LzEvRy1NODk2YlE4Wk5qdl8wcWJ5NmZ4SEo1QWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAL+SAQF3
7fcil7aSqkhX5E351ksHXp4Lye6rjYwZtQtq1WLtgqZzPdjLnSRfgGwnRPl2q1hO
FNuCwLNYd9LKniu4+XdEr/wCbpULsxgr68xQuC0dPrFph1a4GuPL9oSlPq4HkokI
Fa+4C12jzBdrvEfr9C/iayu14WBydOCZXYl755VWEHGt5llLmPg4LBJLKOLNHfPV
7fFitSUvW94/l9YZfWMal4BJk/WduUQTtEt/z+kiS1uz+ALUUjt0kDrErcHoR6PP
AEYylF6NsLKRTwdH1PU3zoAdnbu0TzP838xeSjSwripe5gZ+Kjyaijj0Mree7qqp
Yrn79DttpMJQmQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:41 2025 by rpki-client