Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
File: gViH9Fq7wIGqRpplwXmN5hENnIk.mft (raw, json)
Hash identifier: r6P+nG9RvCqTAnrMKw9trtBS3CRz4cRcmtr4kX0lgFA=
Subject key identifier: 74:D4:71:CE:E0:DA:C0:13:F7:A5:98:10:6E:58:8A:9B:E3:93:C1:CB
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial: 019935017C1C02EF8F2BEA151CC695EFB08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
Manifest number: 0D5C
Signing time: Wed 10 Sep 2025 19:01:53 +0000
Manifest this update: Wed 10 Sep 2025 19:01:53 +0000
Manifest next update: Thu 11 Sep 2025 19:01:53 +0000
Files and hashes: 1: a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa (hash: FJxd7UG3Dpf9Q0TJKoxdhkygKRFy48iyIOOg3rogNwA=)
2: gViH9Fq7wIGqRpplwXmN5hENnIk.crl (hash: kL5h3yaXZif+MOM5wqkMbm/nk/UfO14pXOp4EkR6894=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:7c:1c:02:ef:8f:2b:ea:15:1c:c6:95:ef:b0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
Validity
Not Before: Sep 10 19:01:53 2025 GMT
Not After : Sep 11 19:01:53 2025 GMT
Subject: CN=74d471cee0dac013f7a598106e588a9be393c1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:74:41:3a:1d:18:6e:e7:fb:a1:e9:96:a9:
49:96:df:6b:ca:55:cd:1f:cf:65:1e:c6:83:69:0f:
d4:9a:e8:3b:f9:e2:32:77:d3:d0:30:12:86:a3:21:
08:49:35:ef:7b:3f:78:94:47:53:5f:5e:88:b8:c9:
66:5a:48:32:99:fb:d4:51:97:ce:fd:a3:e0:04:02:
2a:ba:47:6e:8b:83:c2:6a:a0:17:52:91:1b:e5:d7:
af:f0:dd:03:af:6d:34:7f:a9:41:2e:e5:54:6d:84:
09:89:69:28:e7:4d:92:c3:06:31:21:c8:71:95:13:
22:5d:c3:30:6f:35:40:7a:b6:03:88:a7:7f:a3:b7:
c3:a5:ef:26:8b:2c:de:f7:10:65:8c:7a:1f:7e:a1:
d8:d9:b7:d4:47:55:bc:58:90:6b:3b:0f:2e:2d:78:
e6:6d:2b:29:7f:98:ab:0b:fb:e2:b8:aa:2a:42:0e:
71:0b:de:f6:20:08:3d:45:8a:81:35:98:61:54:b1:
a0:19:8e:20:da:d7:05:19:31:97:c9:27:f2:fd:04:
aa:79:2c:df:ea:0a:dd:31:41:92:cc:09:ca:fb:66:
18:0f:e3:23:72:6b:c0:3f:19:ba:d6:1d:7f:b9:5b:
e6:61:98:cb:2d:e8:dc:4a:c3:8a:20:29:6e:bf:47:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D4:71:CE:E0:DA:C0:13:F7:A5:98:10:6E:58:8A:9B:E3:93:C1:CB
X509v3 Authority Key Identifier:
keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:46:d4:44:6b:2e:f0:28:bf:38:f6:13:8c:54:50:93:82:ed:
ed:89:b3:4d:f9:cc:58:c2:50:71:6d:a6:40:6f:2a:cc:88:a4:
7b:a3:d0:9b:c0:d7:31:61:b6:64:7e:5e:5e:e0:59:6e:e3:0e:
ea:c5:94:16:c2:10:35:e5:9d:74:01:19:ad:ef:d5:74:3c:73:
c8:6d:87:7d:ec:27:ce:ac:b1:71:fc:ad:66:5b:fd:1c:c2:7a:
ce:53:ed:8c:b5:6c:34:ba:e1:44:0a:da:89:42:2a:d9:a9:88:
29:9f:12:fe:39:61:d1:78:48:35:bf:36:10:79:67:d9:1a:13:
72:42:f7:6b:3e:33:69:df:05:56:a6:50:b2:5f:ce:e0:cd:eb:
f4:45:6d:ac:cd:93:d1:ed:fb:65:59:96:b7:f0:ed:f5:db:44:
01:be:ba:98:6e:ac:50:af:22:4a:a5:3c:38:ae:9f:f6:ec:9b:
1d:9e:ae:b9:5a:03:8a:d8:53:f6:a1:c8:5c:bc:80:83:57:a6:
44:d7:61:ef:3e:57:4f:ba:7e:7c:87:67:d2:88:6f:05:65:e2:
bc:72:cc:80:95:77:c3:c1:b3:7e:4c:59:06:1b:e1:50:b0:3f:
1d:a2:1a:78:33:cf:86:06:be:f3:70:c2:5e:50:cf:a6:d0:7f:
88:d4:d4:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1AXwcAu+PK+oVHMaV77CLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNTg4N2Y0NWFiYmMwODFhYTQ2OWE2NWMxNzk4ZGU2MTEw
ZDljODkwHhcNMjUwOTEwMTkwMTUzWhcNMjUwOTExMTkwMTUzWjAzMTEwLwYDVQQD
Eyg3NGQ0NzFjZWUwZGFjMDEzZjdhNTk4MTA2ZTU4OGE5YmUzOTNjMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojt0QTodGG7n+6HplqlJlt9rylXN
H89lHsaDaQ/Umug7+eIyd9PQMBKGoyEISTXvez94lEdTX16IuMlmWkgymfvUUZfO
/aPgBAIqukdui4PCaqAXUpEb5dev8N0Dr200f6lBLuVUbYQJiWko502SwwYxIchx
lRMiXcMwbzVAerYDiKd/o7fDpe8miyze9xBljHoffqHY2bfUR1W8WJBrOw8uLXjm
bSspf5irC/viuKoqQg5xC972IAg9RYqBNZhhVLGgGY4g2tcFGTGXySfy/QSqeSzf
6grdMUGSzAnK+2YYD+MjcmvAPxm61h1/uVvmYZjLLejcSsOKICluv0eLMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTUcc7g2sAT96WYEG5Yipvjk8HLMB8GA1UdIwQY
MBaAFIFYh/Rau8CBqkaaZcF5jeYRDZyJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjIt
MzE4YjBlOTk2YWQxLzEvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjItMzE4YjBlOTk2YWQx
LzEvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEbURGsu
8Ci/OPYTjFRQk4Lt7YmzTfnMWMJQcW2mQG8qzIike6PQm8DXMWG2ZH5eXuBZbuMO
6sWUFsIQNeWddAEZre/VdDxzyG2HfewnzqyxcfytZlv9HMJ6zlPtjLVsNLrhRAra
iUIq2amIKZ8S/jlh0XhINb82EHln2RoTckL3az4zad8FVqZQsl/O4M3r9EVtrM2T
0e37ZVmWt/Dt9dtEAb66mG6sUK8iSqU8OK6f9uybHZ6uuVoDithT9qHIXLyAg1em
RNdh7z5XT7p+fIdn0ohvBWXivHLMgJV3w8GzfkxZBhvhULA/HaIaeDPPhga+83DC
XlDPptB/iNTUkw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 04:28:08 2025 by rpki-client