Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: a7g3STn0suvkCFlqhpaK8ygJ+XKQz5kdeUNY3gC2cRs=
Subject key identifier: 0F:D6:EF:C7:49:3B:31:79:C6:09:EA:FF:C7:18:58:4B:B9:8E:2E:D4
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 019931251231BC5BB16A9F8DB167938803BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 12C4
Signing time: Wed 10 Sep 2025 01:02:17 +0000
Manifest this update: Wed 10 Sep 2025 01:02:17 +0000
Manifest next update: Thu 11 Sep 2025 01:02:17 +0000
Files and hashes: 1: S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa (hash: dO0JekyTej4OeFDJ56mfA43cKJlW68IvyEqWkG9TsF0=)
2: dMX9QwbYl-FTlUJ1R8o2dHt-Q3w.roa (hash: e2o3TSPgT1QYuW3l4VAbr/3mKHvbyIxxzpTJ+Xkb62A=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: NpdiFE7sMpnXSAH+Ow8NYEU1nZxXcb2EGyC0DB5c8yA=)
4: oICpP-Q_PLyVnvdAV2VhmetD0KU.roa (hash: m1kg9eS0Gm6DACbj0bQUXbsWOvls/kNIhGkM6VQRNuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:25:12:31:bc:5b:b1:6a:9f:8d:b1:67:93:88:03:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Sep 10 01:02:17 2025 GMT
Not After : Sep 11 01:02:17 2025 GMT
Subject: CN=0fd6efc7493b3179c609eaffc718584bb98e2ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:76:e3:40:c4:22:12:7b:58:b2:4e:c7:b1:
83:13:a3:5c:7c:b8:55:8e:d9:e1:c3:f5:fb:52:7c:
f7:28:e2:07:63:fd:dd:00:f4:7c:6b:af:25:ac:2c:
b1:2d:02:5c:2e:6f:4b:53:9f:25:e4:da:89:78:3d:
71:d5:55:03:7d:42:b2:a1:ad:b1:0d:fc:45:57:12:
1b:87:47:e1:24:93:53:4b:f2:a1:13:e3:43:61:de:
ad:a9:22:80:ac:0c:cb:7e:94:e9:12:77:58:09:d2:
93:7a:23:8e:cd:83:57:cd:48:c8:2c:8e:93:c3:c4:
b3:13:5d:ed:30:bb:67:8e:f1:31:94:8a:a2:57:83:
fb:6d:5a:20:85:9f:34:62:73:3e:dc:f6:0c:3a:25:
27:ea:91:d1:2e:f7:dd:e3:f3:9d:75:a8:c9:51:c3:
7f:54:92:4a:04:98:be:70:66:8f:04:d6:74:2d:48:
8d:e2:61:d9:2e:d0:56:34:f3:96:ea:d7:89:8e:25:
ae:1e:8b:49:66:32:82:65:25:3d:26:b1:14:6c:d4:
07:67:09:e2:47:23:aa:fe:46:fb:98:48:63:3f:a1:
83:42:23:5a:d5:a9:3e:6e:6d:39:40:89:42:f2:60:
57:1c:d5:6e:3e:fc:89:a8:59:bd:5d:ff:97:25:de:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D6:EF:C7:49:3B:31:79:C6:09:EA:FF:C7:18:58:4B:B9:8E:2E:D4
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:44:cd:a4:3d:a5:0a:1e:83:ac:0a:0d:60:a1:26:96:2d:f0:
e0:f4:a1:18:93:99:72:4f:d8:f8:2a:4c:ef:53:e4:ce:fb:c4:
7f:14:cf:fb:7d:39:e1:46:03:e0:a8:b4:e9:83:7d:2d:8c:28:
7f:72:37:c9:9a:4f:75:9a:e4:4d:68:85:38:16:ef:da:a5:30:
91:1d:6d:6c:c8:85:c3:33:c6:bb:d1:b3:42:16:fc:59:c0:94:
8d:03:3a:9f:e2:86:99:5f:28:ab:ff:69:89:41:55:02:4b:05:
3b:e6:16:9a:c7:31:c9:5f:47:15:c9:1d:e3:fc:bb:32:9a:b3:
07:99:85:a1:a3:32:88:96:7a:04:25:7a:87:f6:7d:41:2d:0e:
57:00:6a:48:19:5f:2d:68:82:2f:b5:88:1d:24:92:5b:61:9a:
52:56:f2:8e:0f:e8:93:01:ff:df:f3:06:22:bb:36:15:93:37:
f6:fe:6c:60:fa:d7:de:bc:11:fb:72:35:8f:d9:88:91:21:48:
d0:5f:a6:25:ec:5a:e5:33:68:af:aa:6c:07:e5:a2:1b:e1:ca:
6c:5f:9c:d0:1d:40:32:ae:84:78:7e:e4:a3:a6:f3:f4:b5:3b:
8e:6a:a2:41:72:aa:cd:f4:c1:04:7d:cf:4c:c4:fe:8d:b2:69:
7c:64:e2:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxJRIxvFuxap+NsWeTiAO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2RjMTdkYWQwM2JjYjliYzM0YTllMzc3YWIyMDcwODUy
ZGNhNjUwHhcNMjUwOTEwMDEwMjE3WhcNMjUwOTExMDEwMjE3WjAzMTEwLwYDVQQD
EygwZmQ2ZWZjNzQ5M2IzMTc5YzYwOWVhZmZjNzE4NTg0YmI5OGUyZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunZ240DEIhJ7WLJOx7GDE6NcfLhV
jtnhw/X7Unz3KOIHY/3dAPR8a68lrCyxLQJcLm9LU58l5NqJeD1x1VUDfUKyoa2x
DfxFVxIbh0fhJJNTS/KhE+NDYd6tqSKArAzLfpTpEndYCdKTeiOOzYNXzUjILI6T
w8SzE13tMLtnjvExlIqiV4P7bVoghZ80YnM+3PYMOiUn6pHRLvfd4/OddajJUcN/
VJJKBJi+cGaPBNZ0LUiN4mHZLtBWNPOW6teJjiWuHotJZjKCZSU9JrEUbNQHZwni
RyOq/kb7mEhjP6GDQiNa1ak+bm05QIlC8mBXHNVuPvyJqFm9Xf+XJd6qEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/W78dJOzF5xgnq/8cYWEu5ji7UMB8GA1UdIwQY
MBaAFIHNwX2tA7y5vDSp43erIHCFLcplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAt
MDE4NGU4MWFlYWQ5LzEvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lZmM5ZjEtYmVjMy00NzcxLWI0ODAtMDE4NGU4MWFlYWQ5
LzEvZ2MzQmZhMER2TG04TktuamQ2c2djSVV0eW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPETNpD2l
Ch6DrAoNYKEmli3w4PShGJOZck/Y+CpM71PkzvvEfxTP+3054UYD4Ki06YN9LYwo
f3I3yZpPdZrkTWiFOBbv2qUwkR1tbMiFwzPGu9GzQhb8WcCUjQM6n+KGmV8oq/9p
iUFVAksFO+YWmscxyV9HFckd4/y7MpqzB5mFoaMyiJZ6BCV6h/Z9QS0OVwBqSBlf
LWiCL7WIHSSSW2GaUlbyjg/okwH/3/MGIrs2FZM39v5sYPrX3rwR+3I1j9mIkSFI
0F+mJexa5TNor6psB+WiG+HKbF+c0B1AMq6EeH7ko6bz9LU7jmqiQXKqzfTBBH3P
TMT+jbJpfGTi5Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 11:59:26 2025 by rpki-client