Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
File: gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json)
Hash identifier: EG5umYXt7eialTXY6ACG59f4jJVbD9NikBq/mlpBijQ=
Subject key identifier: D3:42:36:4E:11:74:67:A6:D5:81:A9:97:AD:1F:49:D1:65:D7:3A:19
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 0199315ACD4BE69BD0C0A6C0DC4008AE09B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
Manifest number: 0D5F
Signing time: Wed 10 Sep 2025 02:00:58 +0000
Manifest this update: Wed 10 Sep 2025 02:00:58 +0000
Manifest next update: Thu 11 Sep 2025 02:00:58 +0000
Files and hashes: 1: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: MBEfxc4xwR6E4hmQprQBnPhsQQ1X7nJqpMDNJoGZ5Ic=)
2: tejhqyIYcfJnZD52AowM2BpZATQ.roa (hash: oI2/9MVukstCSiurn/ztv7Ci6tJsVocDaOvri7bb8FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:cd:4b:e6:9b:d0:c0:a6:c0:dc:40:08:ae:09:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: Sep 10 02:00:58 2025 GMT
Not After : Sep 11 02:00:58 2025 GMT
Subject: CN=d342364e117467a6d581a997ad1f49d165d73a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:4e:6d:28:91:44:0e:d1:07:7e:51:c7:a4:
82:c5:62:d4:6d:f1:61:f4:13:9d:84:4b:94:93:c7:
58:16:b5:28:d6:d0:02:cd:32:83:8f:db:91:fe:22:
c5:87:54:8a:0b:9a:30:43:ee:c9:a3:49:b7:2d:91:
85:5f:78:bc:25:06:c4:2d:6b:12:e4:36:c2:41:95:
26:c7:58:12:e1:32:d3:3b:ab:e5:c5:c0:f4:12:e9:
80:2c:0e:7e:cb:9f:f1:fd:aa:15:bb:fa:32:ad:ef:
8c:bc:6c:dc:1f:4f:67:43:c6:e3:29:f9:d2:0f:b5:
76:38:8c:53:4b:ac:de:ed:84:1c:c5:bf:e0:57:10:
2a:22:11:08:54:c3:6b:38:09:d0:e3:00:59:87:62:
7a:ad:cb:22:97:fe:68:6d:b6:5e:f0:61:2b:dc:36:
ac:db:b1:1b:a2:83:b3:26:0f:5c:e2:98:90:1f:26:
f0:43:b8:ad:87:26:4d:23:ef:9a:40:c7:b6:55:19:
a8:13:76:62:cd:d5:38:4b:e0:7f:2f:ae:fd:0e:59:
7e:79:24:e9:5e:f6:89:69:26:5c:d4:48:b4:58:da:
4c:46:a5:d7:5b:01:56:da:1a:52:d4:7e:5d:64:d7:
f2:62:64:20:c9:4c:db:56:d5:4f:fc:68:fd:e1:84:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:42:36:4E:11:74:67:A6:D5:81:A9:97:AD:1F:49:D1:65:D7:3A:19
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7f:d0:f5:9c:30:28:4b:c4:85:36:fe:17:d3:84:72:ca:dd:
c6:9a:77:27:4a:82:67:31:0f:4b:98:46:16:8a:1d:db:e3:7a:
47:a5:f2:d6:e8:25:43:ab:63:f5:a3:fe:af:f6:dd:40:07:bf:
e7:d0:7e:ae:55:26:ba:bb:27:a3:67:0c:a1:27:a5:ad:9a:41:
01:9c:6e:84:0d:1d:18:85:6e:df:83:9a:80:e7:9a:a6:4a:56:
03:1b:50:b5:d5:74:40:c7:7e:c7:d9:27:6b:54:19:77:fb:e7:
0f:49:3a:6d:ea:ba:54:94:a6:77:bb:d4:2b:94:db:e9:a6:f1:
fd:f3:d8:21:3c:ea:66:48:26:32:62:f8:50:60:55:4b:a0:5f:
d0:b6:a9:3c:ae:d4:4c:46:cd:61:28:a9:5b:06:76:9e:b6:37:
6c:f3:09:c5:28:74:93:99:0b:5d:92:52:7d:3b:73:9c:03:b8:
a1:f2:d7:c7:9b:d0:d2:58:69:54:53:7d:b4:2c:90:7e:e4:d6:
29:2f:69:48:1c:02:6b:0b:62:01:9f:84:9b:27:ad:c8:f1:aa:
f3:89:25:5f:4e:8d:b9:1b:fa:70:3d:11:24:9c:c0:5b:66:d9:
b9:d5:74:a9:7c:0a:b8:0a:f5:a8:fc:77:61:99:25:64:02:9f:
ab:0f:aa:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxWs1L5pvQwKbA3EAIrgm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMjA1ZWYzOWIwZDNmNWQ3MmZhMWQ5NzFkNDE5MWUwYmEy
Njg2YmYwHhcNMjUwOTEwMDIwMDU4WhcNMjUwOTExMDIwMDU4WjAzMTEwLwYDVQQD
EyhkMzQyMzY0ZTExNzQ2N2E2ZDU4MWE5OTdhZDFmNDlkMTY1ZDczYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4tObSiRRA7RB35Rx6SCxWLUbfFh
9BOdhEuUk8dYFrUo1tACzTKDj9uR/iLFh1SKC5owQ+7Jo0m3LZGFX3i8JQbELWsS
5DbCQZUmx1gS4TLTO6vlxcD0EumALA5+y5/x/aoVu/oyre+MvGzcH09nQ8bjKfnS
D7V2OIxTS6ze7YQcxb/gVxAqIhEIVMNrOAnQ4wBZh2J6rcsil/5obbZe8GEr3Das
27EbooOzJg9c4piQHybwQ7ithyZNI++aQMe2VRmoE3ZizdU4S+B/L679Dll+eSTp
XvaJaSZc1Ei0WNpMRqXXWwFW2hpS1H5dZNfyYmQgyUzbVtVP/Gj94YT9+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNCNk4RdGem1YGpl60fSdFl1zoZMB8GA1UdIwQY
MBaAFIEgXvObDT9dcvodlx1BkeC6Joa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMt
ODlhOTAyMzI2MWYxLzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMtODlhOTAyMzI2MWYx
LzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiH/Q9Zww
KEvEhTb+F9OEcsrdxpp3J0qCZzEPS5hGFood2+N6R6Xy1uglQ6tj9aP+r/bdQAe/
59B+rlUmursno2cMoSelrZpBAZxuhA0dGIVu34OagOeapkpWAxtQtdV0QMd+x9kn
a1QZd/vnD0k6beq6VJSmd7vUK5Tb6abx/fPYITzqZkgmMmL4UGBVS6Bf0LapPK7U
TEbNYSipWwZ2nrY3bPMJxSh0k5kLXZJSfTtznAO4ofLXx5vQ0lhpVFN9tCyQfuTW
KS9pSBwCawtiAZ+EmyetyPGq84klX06NuRv6cD0RJJzAW2bZudV0qXwKuAr1qPx3
YZklZAKfqw+qIA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:08:13 2025 by rpki-client