Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
File: gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft (raw, json)
Hash identifier: LrL8cTqFSs1Xzz7bfErYlC3/z3AhGvbJT0nNnPTqMwk=
Subject key identifier: A3:D0:50:1C:61:A8:8F:86:06:80:17:EF:CB:6F:22:4E:1C:5A:96:4C
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Certificate issuer: /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial: 01991764A488C4250BAECAADF4BFE6EB485C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
Manifest number: 166A
Signing time: Fri 05 Sep 2025 01:01:35 +0000
Manifest this update: Fri 05 Sep 2025 01:01:35 +0000
Manifest next update: Sat 06 Sep 2025 01:01:35 +0000
Files and hashes: 1: X8y17pVc211N8MGfVTBzz81iEoA.roa (hash: Hl59xAoHLIR2ve7ZY+IGK+whUrubuEhh7gzRr94EmJM=)
2: gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl (hash: ocMolmFnM8mrt+TyZ7TxhThrnGQtpmjLyJbxnDCozco=)
3: xYBkOkdRt8PDKOH8dzQ2NTMqI8M.roa (hash: ITHwZydQPAzKvryYx9N44bQeMeKILW1oaBs72ARfdxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:a4:88:c4:25:0b:ae:ca:ad:f4:bf:e6:eb:48:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
Validity
Not Before: Sep 5 01:01:35 2025 GMT
Not After : Sep 6 01:01:35 2025 GMT
Subject: CN=a3d0501c61a88f86068017efcb6f224e1c5a964c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e8:5d:85:54:af:9b:17:a3:1e:c2:fe:57:21:
83:44:d7:03:0f:40:6a:87:90:b3:50:1c:4c:7d:7f:
d5:41:6f:5a:9f:89:49:c8:64:b5:b4:b9:d8:5b:48:
8c:3d:14:f3:45:9e:a5:2e:d1:07:6b:e4:bc:a0:6c:
b7:d6:89:bd:1e:28:83:b1:6a:76:00:73:5a:4a:a6:
3b:fc:cd:9c:16:06:7d:e5:89:1d:a9:26:f4:74:54:
e2:08:0a:52:a6:1e:b2:ce:c5:ac:4a:cc:00:db:c7:
d1:84:8b:3a:da:45:a7:62:d7:8d:bd:12:2e:70:ba:
c2:1c:32:ef:ec:32:c4:04:5a:50:35:99:f4:6f:dd:
92:6a:7d:26:14:d4:d7:0d:dc:c6:cc:3f:5e:a6:e7:
bc:c9:2c:b0:ed:d4:d2:3c:b7:d6:bf:ca:7b:d9:cd:
2c:93:ff:67:8a:5f:c3:9f:82:46:7f:70:6c:f8:07:
13:3d:ed:92:76:5b:cb:38:c0:80:9a:23:b1:93:26:
78:9c:3e:0f:d9:d9:0a:df:50:e1:9c:3e:24:6b:16:
d3:5a:e3:56:09:88:f6:91:28:bc:fa:4e:24:39:1c:
67:ba:7d:cd:43:ed:48:5e:e2:ff:46:1c:b8:6a:2a:
5a:36:9d:84:98:2a:1a:fe:34:b0:b4:bd:6c:25:86:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D0:50:1C:61:A8:8F:86:06:80:17:EF:CB:6F:22:4E:1C:5A:96:4C
X509v3 Authority Key Identifier:
keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:27:77:0f:91:79:86:b8:14:6e:50:40:2c:bf:cd:b3:96:b0:
9e:61:8f:59:80:01:fc:02:a3:a0:5c:44:01:9f:b4:f0:3c:94:
cd:5f:91:2c:a0:aa:a7:bc:e7:0c:30:e9:c3:f9:6e:ac:a3:3d:
e2:8d:f6:84:90:e0:fb:fe:12:4c:6a:31:6b:34:df:2c:54:72:
bb:e3:33:93:ba:ea:ba:41:ed:03:10:08:18:0b:1f:d7:dc:10:
d9:61:51:29:6d:e1:dc:25:60:7e:26:a5:fe:45:51:87:9f:73:
f9:7c:37:ee:7c:8b:74:59:64:a0:ed:3a:b5:b3:16:12:ee:4b:
e4:a4:6f:e4:05:a0:c3:da:fa:81:70:90:23:b1:be:6d:b0:a0:
57:90:70:dd:82:08:ac:27:50:09:91:42:5a:92:59:9e:ec:da:
0c:e9:38:5d:26:fd:ee:20:d6:bf:82:8a:0d:db:29:81:2e:79:
7b:20:9c:91:4e:8a:0d:40:62:ad:43:a3:bb:2e:b6:13:45:de:
5e:50:3f:10:c7:50:b2:06:1c:fe:e5:f3:f2:f7:ee:e6:68:9b:
ae:c6:ef:83:e4:18:0b:f5:f3:7e:da:08:06:5f:b4:8f:8f:8a:
cf:ac:b0:5d:1c:31:83:c3:54:d3:e6:ed:f8:42:e8:60:2d:b7:
e4:53:11:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXZKSIxCULrsqt9L/m60hcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDU1NWYwMTFiZTVlMjQxZWIwYjQyNWRlNWZkODZjYzY4
MzRhNTQwHhcNMjUwOTA1MDEwMTM1WhcNMjUwOTA2MDEwMTM1WjAzMTEwLwYDVQQD
EyhhM2QwNTAxYzYxYTg4Zjg2MDY4MDE3ZWZjYjZmMjI0ZTFjNWE5NjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+OhdhVSvmxejHsL+VyGDRNcDD0Bq
h5CzUBxMfX/VQW9an4lJyGS1tLnYW0iMPRTzRZ6lLtEHa+S8oGy31om9HiiDsWp2
AHNaSqY7/M2cFgZ95YkdqSb0dFTiCApSph6yzsWsSswA28fRhIs62kWnYteNvRIu
cLrCHDLv7DLEBFpQNZn0b92San0mFNTXDdzGzD9epue8ySyw7dTSPLfWv8p72c0s
k/9nil/Dn4JGf3Bs+AcTPe2SdlvLOMCAmiOxkyZ4nD4P2dkK31DhnD4kaxbTWuNW
CYj2kSi8+k4kORxnun3NQ+1IXuL/Rhy4aipaNp2EmCoa/jSwtL1sJYbPIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPQUBxhqI+GBoAX78tvIk4cWpZMMB8GA1UdIwQY
MBaAFIMFVfARvl4kHrC0Jd5f2GzGg0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEt
ZDY5OWRkYzlkMDljLzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEtZDY5OWRkYzlkMDlj
LzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlid3D5F5
hrgUblBALL/Ns5awnmGPWYAB/AKjoFxEAZ+08DyUzV+RLKCqp7znDDDpw/lurKM9
4o32hJDg+/4STGoxazTfLFRyu+Mzk7rqukHtAxAIGAsf19wQ2WFRKW3h3CVgfial
/kVRh59z+Xw37nyLdFlkoO06tbMWEu5L5KRv5AWgw9r6gXCQI7G+bbCgV5Bw3YII
rCdQCZFCWpJZnuzaDOk4XSb97iDWv4KKDdspgS55eyCckU6KDUBirUOjuy62E0Xe
XlA/EMdQsgYc/uXz8vfu5mibrsbvg+QYC/XzftoIBl+0j4+Kz6ywXRwxg8NU0+bt
+ELoYC235FMRvg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:12 2025 by rpki-client