Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: d763Iqhmig1iRmAbBmMAEKpEPfkFC7Z19J7HzDDZ8sc=
Subject key identifier: C5:37:02:CF:62:35:3F:D0:52:56:AB:8B:F9:4B:C8:7E:DF:E1:5E:8B
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 01993123D71732F32EAA62C480CF82801FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 01:00:56 +0000
Manifest this update: Wed 10 Sep 2025 01:00:56 +0000
Manifest next update: Thu 11 Sep 2025 01:00:56 +0000
Files and hashes: 1: I9UcyFkxclyQfZHhVQikKNPSVgY.roa (hash: xTi80oKD/t5UjogmPH/rk43vPfKlVZ63gwaMGRnVoxM=)
2: KUeSunFIk48S0xFjDtY2TFss-TE.roa (hash: J/IARmd2LJ7EVJ23zEUrZq3QktpdZue4SY7AhlJReKQ=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: 8V/ZNVRwBh6pF+ix0mOJ69JlVP4KzqbWfJ9V49in4lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:d7:17:32:f3:2e:aa:62:c4:80:cf:82:80:1f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Sep 10 01:00:56 2025 GMT
Not After : Sep 11 01:00:56 2025 GMT
Subject: CN=c53702cf62353fd05256ab8bf94bc87edfe15e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:b1:7b:78:76:3e:19:52:5c:05:fa:c7:90:
75:0f:32:ff:8c:69:6f:d4:8a:37:ba:56:1f:50:a2:
36:fd:6e:45:7d:db:68:4d:80:97:97:6c:21:82:d7:
38:f2:53:90:5a:27:90:e3:c9:83:85:82:0b:a5:f0:
2f:5a:71:79:14:9d:06:ec:f2:ec:d0:88:ff:33:36:
14:ea:ac:8f:a5:4a:a3:f8:ff:c0:c9:e7:37:75:52:
3a:0f:6f:a4:32:72:fd:6e:9a:92:35:72:33:0b:4f:
2d:1d:eb:7a:47:44:ac:d6:73:9b:06:f8:0c:52:86:
5c:37:e5:65:96:09:14:d1:29:c2:2b:20:91:12:70:
90:6b:e6:38:0b:96:f4:04:99:e7:40:19:ae:b1:74:
50:11:8b:be:2f:e2:61:9e:ee:75:a1:ec:1f:9f:5c:
56:fe:2c:98:49:09:e8:95:c2:19:13:43:0e:38:46:
6c:cc:68:5d:6b:10:17:a7:97:b9:23:b3:63:73:69:
62:3b:a2:0e:2d:8f:d3:f6:2d:68:bb:57:7c:57:f3:
7b:64:6b:93:9f:13:14:91:3f:52:12:b2:19:3d:0d:
f5:21:9e:8f:b5:a6:27:70:1b:a0:98:cb:d4:ee:2e:
a6:d8:7b:d9:ac:da:93:7a:93:be:c9:43:44:ae:58:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:37:02:CF:62:35:3F:D0:52:56:AB:8B:F9:4B:C8:7E:DF:E1:5E:8B
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:27:95:ac:c1:fd:a6:08:35:0e:e2:37:22:1d:0d:01:bf:ad:
c6:3e:4d:67:de:93:ef:4b:c9:de:ad:a6:41:34:ec:6e:4b:fb:
8e:2c:88:37:c9:65:a9:c6:30:ef:3e:55:43:fc:df:d2:aa:e3:
7f:55:9b:f4:d8:e1:ae:c3:e0:06:15:e9:fa:52:9e:94:26:43:
df:bc:26:5a:20:54:d3:5c:b9:ba:96:82:98:76:d2:ff:9c:9c:
38:a6:fe:cd:a0:37:db:fe:eb:fb:a0:42:5a:6e:4d:7e:ba:68:
64:6f:fc:a1:51:1f:b3:d5:00:2a:6e:8a:ff:55:2b:fc:d5:38:
2c:3f:fb:a1:12:dc:b3:f6:89:1e:97:b2:1a:8b:6a:0c:f9:c4:
44:b5:1b:5b:98:6e:09:34:86:0f:74:87:cd:46:c2:80:c8:97:
40:50:67:86:44:df:7b:cc:31:c0:76:86:a6:64:0a:31:b3:fc:
9b:13:52:78:16:b4:32:47:5c:35:2f:4d:4d:70:53:df:6f:1c:
89:c3:84:0b:3d:0f:2b:03:43:e1:24:41:23:db:13:42:79:ae:
ad:13:46:96:c6:86:82:f7:08:e0:1b:69:09:5c:84:ec:df:64:
92:b9:28:f9:87:c5:c4:7c:9f:af:d9:15:f7:b8:ee:ac:0a:6a:
5f:77:ca:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxI9cXMvMuqmLEgM+CgB/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDYwOGExNDExOGIxYThkY2RkZWJiYjQwZjk2ZWNkNDhm
ODVjNzEwHhcNMjUwOTEwMDEwMDU2WhcNMjUwOTExMDEwMDU2WjAzMTEwLwYDVQQD
EyhjNTM3MDJjZjYyMzUzZmQwNTI1NmFiOGJmOTRiYzg3ZWRmZTE1ZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1+xe3h2PhlSXAX6x5B1DzL/jGlv
1Io3ulYfUKI2/W5FfdtoTYCXl2whgtc48lOQWieQ48mDhYILpfAvWnF5FJ0G7PLs
0Ij/MzYU6qyPpUqj+P/Ayec3dVI6D2+kMnL9bpqSNXIzC08tHet6R0Ss1nObBvgM
UoZcN+VllgkU0SnCKyCREnCQa+Y4C5b0BJnnQBmusXRQEYu+L+Jhnu51oewfn1xW
/iyYSQnolcIZE0MOOEZszGhdaxAXp5e5I7Njc2liO6IOLY/T9i1ou1d8V/N7ZGuT
nxMUkT9SErIZPQ31IZ6PtaYncBugmMvU7i6m2HvZrNqTepO+yUNErljj7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMU3As9iNT/QUlari/lLyH7f4V6LMB8GA1UdIwQY
MBaAFIDWCKFBGLGo3N3ru0D5bs1I+FxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEt
OTkyOGRkM2YyZjgyLzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEtOTkyOGRkM2YyZjgy
LzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyeVrMH9
pgg1DuI3Ih0NAb+txj5NZ96T70vJ3q2mQTTsbkv7jiyIN8llqcYw7z5VQ/zf0qrj
f1Wb9NjhrsPgBhXp+lKelCZD37wmWiBU01y5upaCmHbS/5ycOKb+zaA32/7r+6BC
Wm5NfrpoZG/8oVEfs9UAKm6K/1Ur/NU4LD/7oRLcs/aJHpeyGotqDPnERLUbW5hu
CTSGD3SHzUbCgMiXQFBnhkTfe8wxwHaGpmQKMbP8mxNSeBa0MkdcNS9NTXBT328c
icOECz0PKwND4SRBI9sTQnmurRNGlsaGgvcI4BtpCVyE7N9kkrko+YfFxHyfr9kV
97jurApqX3fKdQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 07:35:53 2025 by rpki-client