Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
File: GgEAlDqHCAKL5A1PpPKcmtnMVos.mft (raw, json)
Hash identifier: 1vwF0kzLiS9oFn654btrYweSAI4i2EKT1egTeSZGoio=
Subject key identifier: A2:D2:16:70:B6:1C:07:EE:4A:64:AB:E2:86:02:3E:09:CB:32:71:FE
Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
Certificate issuer: /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Certificate serial: 019923318B6969DB59BE4A767B3440246B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
Manifest number: 06B5
Signing time: Sun 07 Sep 2025 08:01:13 +0000
Manifest this update: Sun 07 Sep 2025 08:01:13 +0000
Manifest next update: Mon 08 Sep 2025 08:01:13 +0000
Files and hashes: 1: FpuhTfwOdSf21755rrSFTL20Tbk.roa (hash: X6w/yqAHbg5XsmgEDpJrMUNkNSsz78dV/DwakO4C27U=)
2: GgEAlDqHCAKL5A1PpPKcmtnMVos.crl (hash: fQEaxfwyDCA6pS46UUakczaJfX4ki1PyHAoiKMPg+6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:8b:69:69:db:59:be:4a:76:7b:34:40:24:6b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Validity
Not Before: Sep 7 08:01:13 2025 GMT
Not After : Sep 8 08:01:13 2025 GMT
Subject: CN=a2d21670b61c07ee4a64abe286023e09cb3271fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:d0:ab:d9:2f:d5:34:60:f3:f2:9c:4c:01:
94:38:f9:47:a5:96:08:59:da:7c:85:fe:17:11:3d:
bd:e0:b0:7d:42:95:ba:95:db:8b:5d:93:d6:dc:83:
01:5c:22:15:da:6b:73:eb:2b:11:16:ae:b9:60:ba:
96:78:71:ca:95:1f:01:18:8f:56:91:77:62:ef:17:
84:2d:ce:d7:8a:c4:1e:c3:37:c2:3d:1a:ce:85:17:
97:25:04:6b:3e:b8:a4:cc:0a:37:36:3f:7b:ad:1f:
9b:1c:13:8e:0a:83:74:33:d0:ac:e9:98:1b:ee:f6:
12:86:2a:81:9e:7e:e6:8d:37:61:3b:b5:ae:ae:b1:
cd:78:6c:0e:96:58:67:d1:72:64:b3:71:a9:ba:bb:
ea:8f:cb:49:5d:48:d1:10:1d:30:e3:1b:52:8f:6d:
dd:67:1f:b3:aa:c4:c2:aa:c9:fa:30:96:60:c4:bf:
15:6f:5a:f4:b7:19:23:24:be:6d:56:80:f8:41:3a:
13:73:d9:50:d5:03:f8:05:7d:02:b7:63:3f:f9:9b:
af:ff:65:40:15:f8:db:44:aa:8b:09:02:83:28:0a:
ca:2f:4a:5a:00:2d:7e:12:65:8e:f1:8b:1e:59:69:
94:66:fe:c3:9c:11:e4:08:e2:b7:b5:09:ea:86:c1:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D2:16:70:B6:1C:07:EE:4A:64:AB:E2:86:02:3E:09:CB:32:71:FE
X509v3 Authority Key Identifier:
keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cb:43:f6:3a:c9:4e:72:4b:32:47:a8:61:62:e5:dd:66:46:
f6:88:61:b8:05:c4:69:c8:61:5b:3f:1d:42:c5:e7:86:78:58:
54:d8:27:29:1e:74:5c:51:e0:14:51:00:9a:93:97:10:31:69:
ad:8a:81:e3:b8:86:03:cf:88:60:a0:6c:f2:63:cc:67:39:98:
ea:d7:19:1f:60:65:38:e5:f3:05:34:8b:68:d3:93:e0:91:af:
c4:80:2a:d7:58:6e:1e:0d:10:60:c1:88:75:d5:92:78:8b:00:
2e:e8:d3:1c:23:68:d8:2b:f8:c9:bb:38:7e:5e:72:1e:07:5c:
b9:90:8e:b9:bb:4c:f0:a4:6b:3e:2d:e8:ca:3a:7f:7a:2e:73:
67:9e:7f:e2:0a:41:eb:c3:5c:b3:2b:eb:7e:97:12:84:44:14:
d2:ae:51:10:23:e7:34:66:bb:01:93:09:21:51:87:f3:f8:60:
12:1d:3a:4a:4b:0e:88:cb:5b:d3:88:10:68:b6:ea:7c:88:20:
67:0e:bc:e3:f9:7f:0a:99:42:8d:e3:62:02:43:fe:a1:97:a8:
e2:4b:84:74:43:e5:a9:3c:06:4f:4e:83:9f:38:21:3f:dd:91:
b3:7c:63:42:4e:17:64:a5:f9:1e:32:3f:fe:32:2d:d7:c0:31:
83:77:a1:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMYtpadtZvkp2ezRAJGtpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDEwMDk0M2E4NzA4MDI4YmU0MGQ0ZmE0ZjI5YzlhZDlj
YzU2OGIwHhcNMjUwOTA3MDgwMTEzWhcNMjUwOTA4MDgwMTEzWjAzMTEwLwYDVQQD
EyhhMmQyMTY3MGI2MWMwN2VlNGE2NGFiZTI4NjAyM2UwOWNiMzI3MWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs/Qq9kv1TRg8/KcTAGUOPlHpZYI
Wdp8hf4XET294LB9QpW6lduLXZPW3IMBXCIV2mtz6ysRFq65YLqWeHHKlR8BGI9W
kXdi7xeELc7XisQewzfCPRrOhReXJQRrPrikzAo3Nj97rR+bHBOOCoN0M9Cs6Zgb
7vYShiqBnn7mjTdhO7WurrHNeGwOllhn0XJks3Gpurvqj8tJXUjREB0w4xtSj23d
Zx+zqsTCqsn6MJZgxL8Vb1r0txkjJL5tVoD4QToTc9lQ1QP4BX0Ct2M/+Zuv/2VA
FfjbRKqLCQKDKArKL0paAC1+EmWO8YseWWmUZv7DnBHkCOK3tQnqhsHCMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLSFnC2HAfuSmSr4oYCPgnLMnH+MB8GA1UdIwQY
MBaAFBoBAJQ6hwgCi+QNT6TynJrZzFaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2dFQWxEcUhDQUtMNUExUHBQS2NtdG5NVm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8xMjAxYmYtZTZkZS00ODNhLWJjMjMt
ZDZiY2U3YzgzMWNlLzEvR2dFQWxEcUhDQUtMNUExUHBQS2NtdG5NVm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8xMjAxYmYtZTZkZS00ODNhLWJjMjMtZDZiY2U3YzgzMWNl
LzEvR2dFQWxEcUhDQUtMNUExUHBQS2NtdG5NVm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8tD9jrJ
TnJLMkeoYWLl3WZG9ohhuAXEachhWz8dQsXnhnhYVNgnKR50XFHgFFEAmpOXEDFp
rYqB47iGA8+IYKBs8mPMZzmY6tcZH2BlOOXzBTSLaNOT4JGvxIAq11huHg0QYMGI
ddWSeIsALujTHCNo2Cv4ybs4fl5yHgdcuZCOubtM8KRrPi3oyjp/ei5zZ55/4gpB
68NcsyvrfpcShEQU0q5RECPnNGa7AZMJIVGH8/hgEh06SksOiMtb04gQaLbqfIgg
Zw684/l/CplCjeNiAkP+oZeo4kuEdEPlqTwGT06DnzghP92Rs3xjQk4XZKX5HjI/
/jIt18Axg3ehyQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:21 2025 by rpki-client