Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: 6gAMNDKGx8v+8gnxnDu+BD0OhtgTB7meJeRQ2QN7K9U=
Subject key identifier: A6:6F:42:43:97:71:49:56:6A:DD:BD:42:CE:91:9E:09:88:60:66:8E
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 0199578D0EF385FD0CE927F1D065210BEBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 16A0
Signing time: Wed 17 Sep 2025 12:01:26 +0000
Manifest this update: Wed 17 Sep 2025 12:01:26 +0000
Manifest next update: Thu 18 Sep 2025 12:01:26 +0000
Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: YOp7kODoJDlLXr/GHpDLqrHH+YobsBVvGh2oSRxi0Iw=)
2: Xh5sljusme-a5168zOA_Qoh1nqM.roa (hash: SCrnvepcA5q+v9pudE90mYTsMwfBB9I3ZOeLK/tRmkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:8d:0e:f3:85:fd:0c:e9:27:f1:d0:65:21:0b:eb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Sep 17 12:01:26 2025 GMT
Not After : Sep 18 12:01:26 2025 GMT
Subject: CN=a66f4243977149566addbd42ce919e098860668e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:22:4c:b5:36:3d:1e:3b:0c:05:13:18:65:
19:6a:61:04:22:40:9c:0c:40:52:f0:fe:ca:2f:c3:
c9:3c:ec:b3:34:64:d0:0d:72:d5:7b:b9:8c:62:99:
fb:53:c9:99:d3:ba:ec:28:a1:89:f2:0c:45:9c:21:
49:dc:dd:72:3b:8d:1e:d0:03:20:55:3c:01:91:aa:
1a:ee:37:05:d0:64:79:12:8e:ad:da:3c:1f:03:7f:
ce:db:b5:55:05:19:51:ad:66:5f:e4:14:80:a6:ed:
fa:4e:ed:f4:40:47:12:69:9a:27:44:bd:52:5b:3e:
27:f8:58:26:d8:fa:8b:d5:03:ff:2b:e8:84:0b:82:
ac:5d:f1:17:eb:b9:cd:2c:6a:bd:f0:42:77:eb:cf:
88:77:f1:b4:c8:95:bc:75:f9:51:09:0d:96:b0:9a:
4a:4b:5d:50:a8:db:7f:08:9a:3d:49:6c:15:fa:35:
a7:1b:78:04:15:5a:13:42:f9:ac:da:be:e1:04:90:
be:a7:f8:8d:d6:ec:bc:9e:fc:5c:a9:88:fd:8d:54:
22:2b:a3:e3:b5:4f:61:ba:b1:11:cf:ff:b7:f4:13:
34:bc:f3:10:1c:ce:46:fb:da:67:89:a2:fe:07:1d:
0b:9c:17:71:27:83:65:c5:07:0f:d1:ce:ed:ac:b0:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6F:42:43:97:71:49:56:6A:DD:BD:42:CE:91:9E:09:88:60:66:8E
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b5:70:6d:55:93:66:4f:0a:ec:0a:c4:d2:2c:e9:8c:3c:86:
c4:f2:30:82:a1:42:0a:16:b4:b3:7f:0f:e0:08:3d:20:f5:f6:
5f:3c:a2:bb:dc:3b:d3:42:90:e6:16:b4:bd:58:cb:9c:1a:cc:
5d:2a:84:fa:3d:a0:89:6e:3b:7c:8d:f1:22:0b:5f:df:cb:fd:
6f:f3:6b:24:02:1b:7d:fd:bc:4d:09:74:73:ea:fe:a3:09:43:
01:32:4a:59:59:4e:59:90:9a:fd:fa:89:ec:c9:f0:ff:8b:af:
ca:80:3a:70:4d:cc:ce:d4:14:c0:9d:c7:94:ad:9a:f6:67:29:
0f:34:0d:01:08:70:fa:a2:0d:d5:f1:95:ef:3a:51:de:0d:64:
84:88:0f:77:e5:ee:56:91:dd:da:d9:4e:d0:08:9c:c3:59:59:
52:89:0c:89:36:0a:3f:6f:10:60:e6:ca:2b:f2:50:2a:cf:1e:
27:bd:2f:0e:ce:9f:41:8a:ed:3e:2a:11:88:69:93:40:bf:44:
45:86:02:f5:d0:f7:a3:7a:6c:61:e9:14:cc:31:c0:12:aa:09:
98:bf:19:49:9b:e8:63:02:09:fb:e0:68:b9:f3:3e:f7:73:bb:
8a:fa:c3:da:9e:66:25:16:9e:93:90:4a:b3:98:30:55:86:52:
45:36:96:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlXjQ7zhf0M6Sfx0GUhC+v7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZmZmZjI4OWYyZGFkMGZjMDg0NTZiMGJhZDU0ZDdiYTQ0
OWE0OTIwHhcNMjUwOTE3MTIwMTI2WhcNMjUwOTE4MTIwMTI2WjAzMTEwLwYDVQQD
EyhhNjZmNDI0Mzk3NzE0OTU2NmFkZGJkNDJjZTkxOWUwOTg4NjA2NjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EkiTLU2PR47DAUTGGUZamEEIkCc
DEBS8P7KL8PJPOyzNGTQDXLVe7mMYpn7U8mZ07rsKKGJ8gxFnCFJ3N1yO40e0AMg
VTwBkaoa7jcF0GR5Eo6t2jwfA3/O27VVBRlRrWZf5BSApu36Tu30QEcSaZonRL1S
Wz4n+Fgm2PqL1QP/K+iEC4KsXfEX67nNLGq98EJ368+Id/G0yJW8dflRCQ2WsJpK
S11QqNt/CJo9SWwV+jWnG3gEFVoTQvms2r7hBJC+p/iN1uy8nvxcqYj9jVQiK6Pj
tU9hurERz/+39BM0vPMQHM5G+9pniaL+Bx0LnBdxJ4NlxQcP0c7trLDFzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZvQkOXcUlWat29Qs6RngmIYGaOMB8GA1UdIwQY
MBaAFBn//yifLa0PwIRWsLrVTXukSaSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMTFjODctZWZiYi00NWU4LTliMDMt
ZDUyNTcxOGFhNDRhLzEvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jMTFjODctZWZiYi00NWU4LTliMDMtZDUyNTcxOGFhNDRh
LzEvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvbVwbVWT
Zk8K7ArE0izpjDyGxPIwgqFCCha0s38P4Ag9IPX2Xzyiu9w700KQ5ha0vVjLnBrM
XSqE+j2giW47fI3xIgtf38v9b/NrJAIbff28TQl0c+r+owlDATJKWVlOWZCa/fqJ
7Mnw/4uvyoA6cE3MztQUwJ3HlK2a9mcpDzQNAQhw+qIN1fGV7zpR3g1khIgPd+Xu
VpHd2tlO0Aicw1lZUokMiTYKP28QYObKK/JQKs8eJ70vDs6fQYrtPioRiGmTQL9E
RYYC9dD3o3psYekUzDHAEqoJmL8ZSZvoYwIJ++BoufM+93O7ivrD2p5mJRaek5BK
s5gwVYZSRTaW3g==
-----END CERTIFICATE-----
Generated at Wed Sep 17 17:58:26 2025 by rpki-client