Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
File: GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft (raw, json)
Hash identifier: ltVKg+VEW5TZBMWAnxcIiM6yKU6O3mjdLQae+etYUps=
Subject key identifier: F8:6E:F2:2F:30:B7:6A:43:98:FD:6A:69:4C:68:CD:C4:92:66:1B:F8
Authority key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
Certificate issuer: /CN=1925e6387b33e94069a89a5d1be68904e4090613
Certificate serial: 019921B1BCDA37D48144A4CF8B8387FF8455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
Manifest number: 034A
Signing time: Sun 07 Sep 2025 01:02:00 +0000
Manifest this update: Sun 07 Sep 2025 01:02:00 +0000
Manifest next update: Mon 08 Sep 2025 01:02:00 +0000
Files and hashes: 1: GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl (hash: x/2nPsQRhY+OT/xYsLdgqF511JMmsDmahAvr+7OYcV8=)
2: KKovPP5k_vOQvmKc7t5x14I_gos.roa (hash: xTSJVhmS95WWwOtUsvBgdC5iNk4sqmcitObjOn9r3l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:bc:da:37:d4:81:44:a4:cf:8b:83:87:ff:84:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1925e6387b33e94069a89a5d1be68904e4090613
Validity
Not Before: Sep 7 01:02:00 2025 GMT
Not After : Sep 8 01:02:00 2025 GMT
Subject: CN=f86ef22f30b76a4398fd6a694c68cdc492661bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:ba:66:c4:e3:db:12:87:52:76:70:9e:dc:
b0:87:e8:a9:54:7a:15:4f:a8:ba:05:2e:36:f2:a4:
e7:7b:3d:40:19:81:8c:41:c0:0b:ca:ce:fa:d8:5d:
02:be:33:e9:db:b6:00:78:d7:3f:dc:24:78:15:d1:
77:7a:17:e1:e6:2d:6c:9a:6b:24:8d:c9:7c:ea:0d:
ee:2e:29:7f:cb:44:7f:be:71:84:1e:cc:cd:d5:f4:
99:4e:13:f7:39:4a:53:93:fb:aa:fd:ed:b9:4b:e8:
0e:26:70:6d:ef:67:00:de:f8:98:ed:c9:ce:74:b7:
39:ee:6c:37:8a:74:42:4a:26:37:89:2c:e7:ec:0c:
f2:5a:f5:c9:84:3b:3f:cb:aa:f4:8c:5d:46:24:0f:
ab:d3:47:71:b3:c7:2d:7e:e8:11:bb:28:e8:03:3e:
e0:ba:58:e3:90:38:84:07:4c:8b:63:54:9d:94:57:
2d:1d:a4:d1:98:83:79:51:5c:81:03:99:9d:80:69:
84:b3:3b:42:e6:77:1f:67:23:fa:69:ef:e1:56:00:
e4:5f:26:48:b8:70:d3:ff:77:b9:48:d1:38:f2:b2:
dc:bb:71:3c:d7:eb:ed:2e:87:28:73:5d:ac:3c:34:
0e:f0:e3:b8:54:f3:6e:46:de:31:5b:20:7c:aa:cd:
52:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6E:F2:2F:30:B7:6A:43:98:FD:6A:69:4C:68:CD:C4:92:66:1B:F8
X509v3 Authority Key Identifier:
keyid:19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:05:ef:de:f8:b6:1b:96:98:65:92:e0:3b:01:9b:52:3e:f1:
09:99:41:6e:1b:d9:3c:7a:30:d3:ab:a6:a4:c6:c2:da:e8:5c:
1e:5f:91:f0:1b:7e:ff:18:c9:ec:cf:c4:1e:38:85:5d:b4:51:
66:b3:11:b8:94:59:22:7a:1d:cc:7b:97:27:31:fb:62:53:f5:
44:b1:03:01:3e:27:15:ba:70:62:44:8f:a6:f4:cb:29:29:07:
0e:fb:f4:72:ff:2d:d3:de:19:1f:87:0d:fb:cb:b4:6f:83:5b:
ff:f9:9b:25:71:2d:d5:b3:dc:42:1a:10:fe:20:42:9e:47:9a:
c6:7e:0c:51:28:46:d9:b0:6e:5e:58:22:b3:59:18:cd:62:fa:
75:0b:60:b3:d5:55:db:96:a7:5b:9a:28:26:7d:2c:9f:03:d8:
64:99:88:86:16:29:91:2d:15:0b:69:b5:68:90:37:1a:2f:46:
28:a1:38:a0:0e:19:2e:99:07:f0:71:1f:8f:28:93:d5:22:89:
6c:e2:23:65:6c:96:67:33:47:1c:e9:58:18:cc:af:0f:9f:f7:
b3:94:68:82:d5:21:e6:e7:70:7d:ca:f4:56:0a:69:ae:43:52:
00:3b:21:16:40:1a:b5:00:44:8c:2b:e5:65:a8:c7:59:72:1a:
b7:fa:81:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsbzaN9SBRKTPi4OH/4RVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MjVlNjM4N2IzM2U5NDA2OWE4OWE1ZDFiZTY4OTA0ZTQw
OTA2MTMwHhcNMjUwOTA3MDEwMjAwWhcNMjUwOTA4MDEwMjAwWjAzMTEwLwYDVQQD
EyhmODZlZjIyZjMwYjc2YTQzOThmZDZhNjk0YzY4Y2RjNDkyNjYxYmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTm6ZsTj2xKHUnZwntywh+ipVHoV
T6i6BS428qTnez1AGYGMQcALys762F0CvjPp27YAeNc/3CR4FdF3ehfh5i1smmsk
jcl86g3uLil/y0R/vnGEHszN1fSZThP3OUpTk/uq/e25S+gOJnBt72cA3viY7cnO
dLc57mw3inRCSiY3iSzn7AzyWvXJhDs/y6r0jF1GJA+r00dxs8ctfugRuyjoAz7g
uljjkDiEB0yLY1SdlFctHaTRmIN5UVyBA5mdgGmEsztC5ncfZyP6ae/hVgDkXyZI
uHDT/3e5SNE48rLcu3E81+vtLococ12sPDQO8OO4VPNuRt4xWyB8qs1SwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhu8i8wt2pDmP1qaUxozcSSZhv4MB8GA1UdIwQY
MBaAFBkl5jh7M+lAaaiaXRvmiQTkCQYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMt
OTY2Njg1ZWE0MGY5LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMtOTY2Njg1ZWE0MGY5
LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgXv3vi2
G5aYZZLgOwGbUj7xCZlBbhvZPHow06umpMbC2uhcHl+R8Bt+/xjJ7M/EHjiFXbRR
ZrMRuJRZInodzHuXJzH7YlP1RLEDAT4nFbpwYkSPpvTLKSkHDvv0cv8t094ZH4cN
+8u0b4Nb//mbJXEt1bPcQhoQ/iBCnkeaxn4MUShG2bBuXlgis1kYzWL6dQtgs9VV
25anW5ooJn0snwPYZJmIhhYpkS0VC2m1aJA3Gi9GKKE4oA4ZLpkH8HEfjyiT1SKJ
bOIjZWyWZzNHHOlYGMyvD5/3s5RogtUh5udwfcr0VgpprkNSADshFkAatQBEjCvl
ZajHWXIat/qBpQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:05 2025 by rpki-client