Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: TikkrviUtRwgSy5hs1GqVAUsUL6lmxiw5whCUo/Obbw=
Subject key identifier: CC:E8:D6:DF:AB:36:2B:30:CF:33:6C:17:C5:84:37:67:C5:B0:84:A4
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 01993C156B9600EC0CB4CE57699F3918E3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 1360
Signing time: Fri 12 Sep 2025 04:01:00 +0000
Manifest this update: Fri 12 Sep 2025 04:01:00 +0000
Manifest next update: Sat 13 Sep 2025 04:01:00 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: PLT8Zv3fwtMJmvXatzE/yX3EkxRhH1gcauT/16cLiZM=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3c:15:6b:96:00:ec:0c:b4:ce:57:69:9f:39:18:e3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Sep 12 04:01:00 2025 GMT
Not After : Sep 13 04:01:00 2025 GMT
Subject: CN=cce8d6dfab362b30cf336c17c5843767c5b084a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:8e:9d:8e:6a:8e:b6:99:c1:29:46:25:93:
52:13:5a:22:21:57:66:01:10:fd:1f:ef:fb:2f:9d:
72:70:4f:33:03:03:92:02:0a:ac:02:7e:44:cf:17:
f7:39:65:b5:72:0d:f4:46:2c:f8:45:ee:33:bf:ff:
94:1f:d8:c9:54:92:c0:5d:a6:2d:d1:3a:93:61:41:
7b:1d:c1:32:b3:e4:36:6a:c7:55:28:b6:43:8e:80:
be:68:0f:d9:f2:a1:68:fa:69:61:94:22:f3:8c:76:
b7:6e:a3:f1:06:75:fc:3b:a7:dd:00:4f:84:84:1d:
bd:eb:ee:51:97:5a:86:86:c0:7e:ba:90:f8:0f:22:
0a:d7:04:ed:ea:a2:26:75:68:ce:d9:e8:61:3b:67:
58:52:89:61:b1:39:4a:50:8f:60:07:85:95:5b:c6:
ef:04:8a:88:4e:cb:d6:37:48:37:11:51:fd:fe:be:
68:b2:e6:af:39:01:f8:e2:c1:b5:57:18:6e:30:f3:
58:dd:93:86:a7:7a:e7:4b:39:08:0f:07:b4:88:62:
92:36:78:cb:b9:5d:2c:a7:c5:6d:76:61:09:03:a9:
1b:42:1a:c5:62:1e:23:74:7c:15:d4:1c:fc:5d:c5:
4c:7c:b1:26:3f:fc:75:a4:b6:23:c5:81:1f:8b:c9:
ac:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E8:D6:DF:AB:36:2B:30:CF:33:6C:17:C5:84:37:67:C5:B0:84:A4
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:71:03:07:e4:c3:80:4a:80:12:45:a1:75:d5:6c:49:61:c8:
f9:cf:12:17:65:80:1d:c3:02:15:48:fd:e3:8c:41:de:c5:cf:
1b:58:45:ca:80:af:49:32:4c:53:a7:a2:0d:3c:58:22:d3:fd:
09:3e:7e:13:b3:7c:ed:08:9b:bc:8f:be:62:ab:c1:29:c6:bb:
24:3a:fa:a5:d5:4d:33:3d:2d:2d:1b:60:ac:47:6c:39:3a:0f:
43:bc:4d:88:d2:ab:ca:5e:66:38:af:74:d7:a8:46:bf:18:a3:
52:57:a7:1f:58:98:b6:d2:f7:c9:bf:6c:2c:1a:05:70:28:9a:
57:0b:5b:1f:12:75:ee:06:cc:95:9b:b9:97:8f:04:86:db:5c:
ed:fd:6e:3e:06:3d:be:4c:0e:e0:05:9c:32:9a:13:57:41:47:
ab:ff:dd:41:8a:b5:19:74:46:72:57:b7:8a:e1:90:85:89:2a:
b4:6f:85:d3:d2:ad:08:a8:f1:10:1c:34:81:9b:ce:26:fb:82:
98:58:7d:86:7d:95:9c:03:57:8b:5f:ca:de:f5:27:c3:ae:b5:
53:26:13:4e:be:c1:bc:94:7f:4b:a1:2e:41:5c:2c:b4:18:ee:
2a:b2:c2:1c:0a:19:f6:57:43:1e:cd:cd:39:1b:ed:bc:2c:6e:
1e:52:10:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk8FWuWAOwMtM5XaZ85GOOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjgwMGMzOTEyNmRiM2NhNGUwZDU2OTEwZjBhZDM3OTI1
N2U0YTAwHhcNMjUwOTEyMDQwMTAwWhcNMjUwOTEzMDQwMTAwWjAzMTEwLwYDVQQD
EyhjY2U4ZDZkZmFiMzYyYjMwY2YzMzZjMTdjNTg0Mzc2N2M1YjA4NGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0smOnY5qjraZwSlGJZNSE1oiIVdm
ARD9H+/7L51ycE8zAwOSAgqsAn5Ezxf3OWW1cg30Riz4Re4zv/+UH9jJVJLAXaYt
0TqTYUF7HcEys+Q2asdVKLZDjoC+aA/Z8qFo+mlhlCLzjHa3bqPxBnX8O6fdAE+E
hB296+5Rl1qGhsB+upD4DyIK1wTt6qImdWjO2ehhO2dYUolhsTlKUI9gB4WVW8bv
BIqITsvWN0g3EVH9/r5osuavOQH44sG1VxhuMPNY3ZOGp3rnSzkIDwe0iGKSNnjL
uV0sp8VtdmEJA6kbQhrFYh4jdHwV1Bz8XcVMfLEmP/x1pLYjxYEfi8msawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzo1t+rNiswzzNsF8WEN2fFsISkMB8GA1UdIwQY
MBaAFBm4AMORJts8pODVaRDwrTeSV+SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEt
ZjE4YWQ5ZjRjYzM0LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEtZjE4YWQ5ZjRjYzM0
LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXEDB+TD
gEqAEkWhddVsSWHI+c8SF2WAHcMCFUj944xB3sXPG1hFyoCvSTJMU6eiDTxYItP9
CT5+E7N87QibvI++YqvBKca7JDr6pdVNMz0tLRtgrEdsOToPQ7xNiNKryl5mOK90
16hGvxijUlenH1iYttL3yb9sLBoFcCiaVwtbHxJ17gbMlZu5l48Ehttc7f1uPgY9
vkwO4AWcMpoTV0FHq//dQYq1GXRGcle3iuGQhYkqtG+F09KtCKjxEBw0gZvOJvuC
mFh9hn2VnANXi1/K3vUnw661UyYTTr7BvJR/S6EuQVwstBjuKrLCHAoZ9ldDHs3N
ORvtvCxuHlIQyg==
-----END CERTIFICATE-----
Generated at Fri Sep 12 08:22:04 2025 by rpki-client