Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/488a2a-5964-461c-9ffc-6e4500ea4aa8/1/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.mft
File: gL7V0Fzqr-RxMOeeZMGOuSNh_I4.mft (raw, json)
Hash identifier: Ci2ZeGPpvE0J697kXIklsGn6/BA4ZttBLL8Ut7nhOnc=
Subject key identifier: 30:A4:2D:61:18:17:ED:52:BA:0C:99:FC:22:EA:AC:EA:EA:9B:5E:AC
Authority key identifier: 80:BE:D5:D0:5C:EA:AF:E4:71:30:E7:9E:64:C1:8E:B9:23:61:FC:8E
Certificate issuer: /CN=80bed5d05ceaafe47130e79e64c18eb92361fc8e
Certificate serial: 019923310B3D65F54020ADB6572CF63F24D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/488a2a-5964-461c-9ffc-6e4500ea4aa8/1/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.mft
Manifest number: 2A
Signing time: Sun 07 Sep 2025 08:00:40 +0000
Manifest this update: Sun 07 Sep 2025 08:00:40 +0000
Manifest next update: Mon 08 Sep 2025 08:00:40 +0000
Files and hashes: 1: gL7V0Fzqr-RxMOeeZMGOuSNh_I4.crl (hash: +iI2d+lEcmyLcsj3TnYa3Nd45b6hnPRSInzkRgvHRM4=)
2: ljUmaJOEvMjFI5KpBw7OV5LTgwY.roa (hash: kdzf45jF5P72y49hy1Ud9SGswimupljyU5tNp9nAHJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/488a2a-5964-461c-9ffc-6e4500ea4aa8/1/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/488a2a-5964-461c-9ffc-6e4500ea4aa8/1/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:0b:3d:65:f5:40:20:ad:b6:57:2c:f6:3f:24:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bed5d05ceaafe47130e79e64c18eb92361fc8e
Validity
Not Before: Sep 7 08:00:40 2025 GMT
Not After : Sep 8 08:00:40 2025 GMT
Subject: CN=30a42d611817ed52ba0c99fc22eaaceaea9b5eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:b9:9a:18:c5:5d:1e:83:90:d1:75:6b:e6:
b0:fc:a3:3b:28:8b:7c:ce:1b:de:96:b9:10:9e:6f:
ac:39:4d:9e:d0:02:a9:36:14:6e:6e:36:22:4c:bd:
79:42:b4:00:1a:b8:c5:82:f5:a2:b9:e4:8b:4c:96:
4b:21:1d:37:9b:b7:8e:94:36:13:fb:48:78:2f:27:
e2:d7:76:05:c1:24:3b:04:70:01:9e:4a:84:15:a7:
e3:94:a7:a9:13:4d:c8:eb:ca:de:51:02:e2:1d:8c:
75:72:db:e1:4a:3f:c7:fb:38:f3:5f:89:08:75:29:
e0:f2:37:00:85:8e:43:2a:b2:a8:61:42:16:a4:85:
15:b6:32:a7:38:93:a2:1a:70:ad:67:c4:68:54:4d:
66:71:f4:b5:ae:e2:ff:11:9c:26:6b:b7:7b:e8:b1:
24:ca:d7:b5:3c:8c:9f:9a:69:69:06:16:da:42:01:
c5:c3:61:71:c5:49:58:fe:6a:19:a2:16:8c:a1:02:
6d:e6:a0:73:9f:88:c5:3a:b1:28:c5:44:aa:63:07:
79:39:3a:04:f7:65:c7:1a:af:b6:aa:4a:8e:05:8e:
ba:1b:fa:84:46:3c:c8:a3:a2:85:e5:74:67:38:d1:
54:be:20:c2:e6:8e:31:ce:66:b8:d1:3d:5c:a4:80:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A4:2D:61:18:17:ED:52:BA:0C:99:FC:22:EA:AC:EA:EA:9B:5E:AC
X509v3 Authority Key Identifier:
keyid:80:BE:D5:D0:5C:EA:AF:E4:71:30:E7:9E:64:C1:8E:B9:23:61:FC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/488a2a-5964-461c-9ffc-6e4500ea4aa8/1/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/488a2a-5964-461c-9ffc-6e4500ea4aa8/1/gL7V0Fzqr-RxMOeeZMGOuSNh_I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a3:1e:24:85:20:cc:1d:ee:42:5b:a1:6c:c7:b7:ac:a9:61:
c8:6a:ca:6a:02:ab:f1:df:a3:78:51:52:1f:8a:a9:d3:7d:d3:
2e:d0:51:a2:92:4e:b5:ed:25:92:28:94:1b:ac:e8:05:e0:a4:
72:7a:a5:bd:09:93:f2:c9:4a:31:27:39:07:11:2a:73:81:a5:
7c:fc:0a:91:45:55:95:5d:f2:48:b5:a4:e3:ab:4a:49:3b:90:
d5:1e:26:dd:b4:bc:2f:9e:be:45:d3:57:38:46:92:2c:31:ce:
3e:e5:cd:49:be:5d:92:95:98:20:2c:96:5e:e9:8d:74:92:b6:
1d:62:2c:8a:08:73:e0:d1:d6:e0:c7:16:f9:5a:6e:ea:aa:5f:
4c:32:2e:43:7c:c5:c3:dc:89:7e:0f:86:13:e1:c7:a5:d9:8e:
b2:a5:f4:59:3b:21:ff:38:97:42:0d:cc:e6:32:f9:34:63:d1:
3b:4a:72:22:29:d3:d1:35:9d:83:cf:9f:3b:e7:87:82:07:fc:
d0:76:dd:22:5b:e2:ac:4b:d5:c7:d4:19:99:29:2d:8b:55:d4:
34:21:51:4a:a3:87:b3:8f:d1:f8:04:27:f7:df:3a:a4:8d:05:
b2:1f:3d:07:9e:9e:55:4f:73:b7:e9:a0:89:f3:91:98:29:a2:
d7:50:b0:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMQs9ZfVAIK22Vyz2PyTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmVkNWQwNWNlYWFmZTQ3MTMwZTc5ZTY0YzE4ZWI5MjM2
MWZjOGUwHhcNMjUwOTA3MDgwMDQwWhcNMjUwOTA4MDgwMDQwWjAzMTEwLwYDVQQD
EygzMGE0MmQ2MTE4MTdlZDUyYmEwYzk5ZmMyMmVhYWNlYWVhOWI1ZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUK5mhjFXR6DkNF1a+aw/KM7KIt8
zhvelrkQnm+sOU2e0AKpNhRubjYiTL15QrQAGrjFgvWiueSLTJZLIR03m7eOlDYT
+0h4Lyfi13YFwSQ7BHABnkqEFafjlKepE03I68reUQLiHYx1ctvhSj/H+zjzX4kI
dSng8jcAhY5DKrKoYUIWpIUVtjKnOJOiGnCtZ8RoVE1mcfS1ruL/EZwma7d76LEk
yte1PIyfmmlpBhbaQgHFw2FxxUlY/moZohaMoQJt5qBzn4jFOrEoxUSqYwd5OToE
92XHGq+2qkqOBY66G/qERjzIo6KF5XRnONFUviDC5o4xzma40T1cpIBeoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCkLWEYF+1SugyZ/CLqrOrqm16sMB8GA1UdIwQY
MBaAFIC+1dBc6q/kcTDnnmTBjrkjYfyOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0w3VjBGenFyLVJ4TU9lZVpNR091U05oX0k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ODhhMmEtNTk2NC00NjFjLTlmZmMt
NmU0NTAwZWE0YWE4LzEvZ0w3VjBGenFyLVJ4TU9lZVpNR091U05oX0k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80ODhhMmEtNTk2NC00NjFjLTlmZmMtNmU0NTAwZWE0YWE4
LzEvZ0w3VjBGenFyLVJ4TU9lZVpNR091U05oX0k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKMeJIUg
zB3uQluhbMe3rKlhyGrKagKr8d+jeFFSH4qp033TLtBRopJOte0lkiiUG6zoBeCk
cnqlvQmT8slKMSc5BxEqc4GlfPwKkUVVlV3ySLWk46tKSTuQ1R4m3bS8L56+RdNX
OEaSLDHOPuXNSb5dkpWYICyWXumNdJK2HWIsighz4NHW4McW+Vpu6qpfTDIuQ3zF
w9yJfg+GE+HHpdmOsqX0WTsh/ziXQg3M5jL5NGPRO0pyIinT0TWdg8+fO+eHggf8
0HbdIlvirEvVx9QZmSkti1XUNCFRSqOHs4/R+AQn9986pI0Fsh89B56eVU9zt+mg
ifORmCmi11CwCw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:40 2025 by rpki-client