Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: y7efmGBp0V766KpKpziyndn9sBwesJFlowckPNjhNio=
Subject key identifier: A3:21:AC:A6:4F:B7:55:E7:F3:89:8E:BB:70:63:F7:1C:31:B8:2D:4B
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 0199375CAEBF77680618061FB144599ADF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 131A
Signing time: Thu 11 Sep 2025 06:00:44 +0000
Manifest this update: Thu 11 Sep 2025 06:00:44 +0000
Manifest next update: Fri 12 Sep 2025 06:00:44 +0000
Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: 19Rfo3zfkFBo5RKjMZqFHstR0+YidXwKAD8GfwpHh9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:ae:bf:77:68:06:18:06:1f:b1:44:59:9a:df:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Sep 11 06:00:44 2025 GMT
Not After : Sep 12 06:00:44 2025 GMT
Subject: CN=a321aca64fb755e7f3898ebb7063f71c31b82d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:78:2e:da:8f:74:13:76:32:b9:fc:7b:19:
00:d5:aa:2d:2d:b0:9d:27:ff:e4:91:a1:81:26:9f:
54:50:37:99:ca:6c:71:89:6b:80:44:5a:ad:07:2a:
e7:01:1c:42:f7:e5:d3:bd:5f:f1:8c:db:11:0b:cc:
ba:fa:68:a2:28:2e:84:68:cf:27:87:f4:6a:6f:a9:
1c:e5:f3:88:26:19:fa:7e:86:fb:c9:09:a7:22:4c:
68:86:17:58:b2:e9:a9:61:74:83:d5:91:69:5b:c1:
97:2c:3f:d0:80:53:99:b0:d0:6a:ec:18:e1:3c:af:
fa:4e:ca:35:64:be:7d:31:ab:50:f9:39:79:15:9a:
48:90:03:a0:cd:f8:6d:30:2b:f5:ad:e8:e4:de:5c:
a5:9f:9e:4d:64:43:9c:ee:c2:7b:89:80:d8:b5:29:
59:e8:52:e4:b4:7d:e5:43:76:7c:e5:8b:55:12:42:
ac:9d:d5:5c:86:df:bb:d2:0f:8a:19:15:9d:ad:fb:
57:d1:ec:e4:38:e7:d2:e6:c9:67:79:9b:7e:f7:da:
93:ab:10:8b:a7:c5:29:72:f8:ba:64:88:c1:a9:13:
6c:ae:11:17:4f:c5:a9:97:93:79:88:fa:8c:05:ff:
1c:21:b6:82:71:98:92:49:99:69:48:f8:e1:b9:e3:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:21:AC:A6:4F:B7:55:E7:F3:89:8E:BB:70:63:F7:1C:31:B8:2D:4B
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:16:fa:9b:f4:d6:96:58:08:90:b8:20:fc:33:68:4f:35:06:
0a:19:72:70:84:0b:bc:28:0f:bd:16:8d:c5:ca:75:07:45:63:
d0:69:71:72:cb:9a:2c:93:a5:99:7c:7a:31:77:74:09:0a:c3:
48:e7:52:c2:48:a7:6f:36:f0:ae:1a:a9:fe:74:62:a9:04:80:
be:1b:27:f0:c2:b1:b9:9b:43:dc:d8:12:5a:e1:ce:e7:4f:84:
b6:19:89:cf:b7:9e:27:64:49:09:05:88:a3:72:89:51:7b:9b:
8e:53:0c:0b:d4:2a:cd:95:60:ff:b2:21:19:8e:5c:4d:a4:2e:
13:2b:52:bc:c3:24:da:ef:05:a6:1e:69:d8:97:85:f3:9d:85:
8c:d3:6a:d0:17:79:f3:c1:9e:77:bb:ec:b2:d2:4c:94:49:81:
b0:9e:4f:40:b2:ee:3a:ff:74:38:86:98:9e:43:5f:bc:c8:69:
07:5f:4e:c0:fc:09:b2:ce:3e:98:0a:8d:e7:1f:13:72:c2:54:
13:32:5c:c6:a9:05:d1:57:38:59:56:35:c5:93:81:32:87:50:
61:a7:84:66:26:fa:6a:fe:ad:7f:85:79:6e:89:f2:83:f0:e4:
fb:37:79:07:00:46:52:0f:d5:d2:73:d7:02:c1:2d:68:72:22:
08:bc:d5:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3XK6/d2gGGAYfsURZmt9KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNWRiNTY3ODEzOWUyZWVhY2U4OWI1ZWU5OTgyYzM1NDQ5
YzBiM2IwHhcNMjUwOTExMDYwMDQ0WhcNMjUwOTEyMDYwMDQ0WjAzMTEwLwYDVQQD
EyhhMzIxYWNhNjRmYjc1NWU3ZjM4OThlYmI3MDYzZjcxYzMxYjgyZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1554LtqPdBN2Mrn8exkA1aotLbCd
J//kkaGBJp9UUDeZymxxiWuARFqtByrnARxC9+XTvV/xjNsRC8y6+miiKC6EaM8n
h/Rqb6kc5fOIJhn6fob7yQmnIkxohhdYsumpYXSD1ZFpW8GXLD/QgFOZsNBq7Bjh
PK/6Tso1ZL59MatQ+Tl5FZpIkAOgzfhtMCv1rejk3lyln55NZEOc7sJ7iYDYtSlZ
6FLktH3lQ3Z85YtVEkKsndVcht+70g+KGRWdrftX0ezkOOfS5slneZt+99qTqxCL
p8Upcvi6ZIjBqRNsrhEXT8Wpl5N5iPqMBf8cIbaCcZiSSZlpSPjhueMgowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMhrKZPt1Xn84mOu3Bj9xwxuC1LMB8GA1UdIwQY
MBaAFIBdtWeBOeLurOibXumYLDVEnAs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDct
OTIyOTIzZTg5OGU2LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDctOTIyOTIzZTg5OGU2
LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRb6m/TW
llgIkLgg/DNoTzUGChlycIQLvCgPvRaNxcp1B0Vj0GlxcsuaLJOlmXx6MXd0CQrD
SOdSwkinbzbwrhqp/nRiqQSAvhsn8MKxuZtD3NgSWuHO50+EthmJz7eeJ2RJCQWI
o3KJUXubjlMMC9QqzZVg/7IhGY5cTaQuEytSvMMk2u8Fph5p2JeF852FjNNq0Bd5
88Ged7vsstJMlEmBsJ5PQLLuOv90OIaYnkNfvMhpB19OwPwJss4+mAqN5x8TcsJU
EzJcxqkF0Vc4WVY1xZOBModQYaeEZib6av6tf4V5bonyg/Dk+zd5BwBGUg/V0nPX
AsEtaHIiCLzV4g==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:26:06 2025 by rpki-client