Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: qGTXkacrzS6tnyKI01hw+i/78xmVaTvXXVT8cBd2Jm8=
Subject key identifier: 2E:68:B6:CB:B0:CE:A0:C2:5A:CE:EA:BB:DF:CC:10:75:2B:12:99:FE
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 019931C8A154DD3247E90C63FC2CD4B9556B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 04:00:56 +0000
Manifest this update: Wed 10 Sep 2025 04:00:56 +0000
Manifest next update: Thu 11 Sep 2025 04:00:56 +0000
Files and hashes: 1: AlDLgq4a_thE-qXe6l8E_xWLXFc.roa (hash: 0ufopEuWXow9IQPbSAY5y6lUJPxjAppqenIRissIhOM=)
2: HbD_TR3_mqlACMnF4iTXIAuOjsg.roa (hash: T3tCAy3O2wLO9qO83uugLqRmkiFNSfdwlXWERB4+Mok=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: ImogExdWfkuj2R8wjnPN0F7LuyFunf3lfCE7I+gETHY=)
4: h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa (hash: /bmLdcY/7qOd0oeU6NCbdR7DKpvTkMz1r7GZ1d675P4=)
5: nId42Q0uPKxNBDzBg-GOcY-a01Q.roa (hash: 43G2ltR87FjAzlwjOiHc7NglbtaxLWslqx/bREI6WQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:a1:54:dd:32:47:e9:0c:63:fc:2c:d4:b9:55:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Sep 10 04:00:56 2025 GMT
Not After : Sep 11 04:00:56 2025 GMT
Subject: CN=2e68b6cbb0cea0c25aceeabbdfcc10752b1299fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:ba:52:58:74:8c:6d:1e:c1:a1:f9:59:50:
20:35:78:70:f3:bf:21:cb:4a:07:8e:ef:57:6e:60:
6b:f1:0b:e4:60:27:b5:18:ff:ef:0b:cc:0c:36:e0:
21:67:78:9a:42:b5:55:9c:7a:8b:b3:8a:24:09:e4:
92:75:46:0e:6c:7a:84:97:79:ff:da:72:05:d1:23:
70:1e:40:51:95:9e:df:8f:cd:5c:29:f0:78:30:f3:
28:d8:83:e2:d6:35:90:ed:3c:ed:da:06:17:7a:28:
82:1c:60:c3:0a:d8:42:3e:a0:4c:d5:e0:f2:3d:13:
da:7b:ff:ac:8c:69:77:9d:ae:16:84:cb:08:10:e3:
f6:4f:95:64:c0:5d:e5:9e:99:01:ee:7d:b8:5b:95:
71:f9:fd:7a:61:8e:dc:0a:c1:91:0d:3e:d7:e0:55:
ec:6b:e3:9c:5a:e2:91:65:8f:b6:d6:5f:90:52:0e:
c0:c7:d9:d7:45:c1:75:e2:75:36:83:50:bf:62:e7:
e4:47:c6:df:74:5c:85:d6:bf:ac:7d:02:6c:fb:43:
e4:89:8e:84:a0:d8:be:c3:ad:5c:b2:42:b8:e5:e7:
fb:e8:d9:d3:96:62:e8:36:a9:c2:b9:80:f8:99:3f:
2d:fd:8c:be:50:a9:b5:fb:27:8d:6b:6c:0f:bd:57:
04:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:68:B6:CB:B0:CE:A0:C2:5A:CE:EA:BB:DF:CC:10:75:2B:12:99:FE
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ef:b5:36:82:39:da:5c:30:cd:f5:6a:f0:61:d6:3e:1b:38:
bb:22:3e:cc:51:5d:85:f8:f8:ee:67:75:79:d6:a5:ac:4b:57:
97:db:62:23:83:b3:20:95:61:0a:63:e9:48:f0:43:9f:a7:d5:
77:3e:23:10:e5:3b:dc:f1:40:15:48:06:d5:05:77:7c:04:fa:
16:fb:35:d4:ab:f4:68:b5:93:10:fe:07:d7:29:a7:65:5e:33:
6b:f7:bc:1c:ef:dc:a1:ab:b9:be:13:db:1b:69:68:36:14:85:
6a:c8:d6:49:10:6d:81:e2:b1:7a:01:ec:e5:85:16:5c:9f:bd:
61:91:30:fb:1e:d5:a3:ff:3e:0e:30:db:64:6e:97:a0:f7:de:
92:29:22:e0:13:0c:90:89:6e:77:4d:84:c6:a1:c5:52:2e:53:
77:56:36:bb:77:e6:bb:64:c8:c6:ac:7c:63:b3:16:cd:27:b8:
2d:c5:2e:f7:17:8e:47:01:28:1f:5a:1e:ff:db:78:58:c4:f2:
5f:27:31:0a:55:2d:d3:ff:69:45:c6:d8:bc:aa:d0:a6:fa:23:
58:a2:58:76:19:50:c5:08:ec:17:49:32:a8:08:49:3a:e9:12:
3a:4a:d4:fd:67:bc:84:56:4a:4c:7a:81:26:fa:87:3b:5e:7d:
4f:75:25:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxyKFU3TJH6Qxj/CzUuVVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYWQ4YzUyMGJiOTY3NzQ2MWRkYzRlYzA5Yjc2ZDczM2I3
ZDgzNzAwHhcNMjUwOTEwMDQwMDU2WhcNMjUwOTExMDQwMDU2WjAzMTEwLwYDVQQD
EygyZTY4YjZjYmIwY2VhMGMyNWFjZWVhYmJkZmNjMTA3NTJiMTI5OWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM66Ulh0jG0ewaH5WVAgNXhw878h
y0oHju9XbmBr8QvkYCe1GP/vC8wMNuAhZ3iaQrVVnHqLs4okCeSSdUYObHqEl3n/
2nIF0SNwHkBRlZ7fj81cKfB4MPMo2IPi1jWQ7Tzt2gYXeiiCHGDDCthCPqBM1eDy
PRPae/+sjGl3na4WhMsIEOP2T5VkwF3lnpkB7n24W5Vx+f16YY7cCsGRDT7X4FXs
a+OcWuKRZY+21l+QUg7Ax9nXRcF14nU2g1C/YufkR8bfdFyF1r+sfQJs+0PkiY6E
oNi+w61cskK45ef76NnTlmLoNqnCuYD4mT8t/Yy+UKm1+yeNa2wPvVcELQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5otsuwzqDCWs7qu9/MEHUrEpn+MB8GA1UdIwQY
MBaAFICtjFILuWd0Yd3E7Am3bXM7fYNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEt
YzYxNzUxYzZiMTk1LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEtYzYxNzUxYzZiMTk1
LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAru+1NoI5
2lwwzfVq8GHWPhs4uyI+zFFdhfj47md1edalrEtXl9tiI4OzIJVhCmPpSPBDn6fV
dz4jEOU73PFAFUgG1QV3fAT6Fvs11Kv0aLWTEP4H1ymnZV4za/e8HO/coau5vhPb
G2loNhSFasjWSRBtgeKxegHs5YUWXJ+9YZEw+x7Vo/8+DjDbZG6XoPfekiki4BMM
kIlud02ExqHFUi5Td1Y2u3fmu2TIxqx8Y7MWzSe4LcUu9xeORwEoH1oe/9t4WMTy
XycxClUt0/9pRcbYvKrQpvojWKJYdhlQxQjsF0kyqAhJOukSOkrU/We8hFZKTHqB
JvqHO159T3Ulzg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 12:56:18 2025 by rpki-client