Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: PC+pbQ8RUV+oqswBDPlyRmd9S++FyP5c5k9X1NHKvoE=
Subject key identifier: 19:A8:2C:B3:57:D1:03:7D:FB:C3:23:2E:32:8A:54:F2:BC:CE:6D:90
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 01975BA4F1C13770572AF385388F4D439071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 11AA
Signing time: Tue 10 Jun 2025 21:00:25 +0000
Manifest this update: Tue 10 Jun 2025 21:00:25 +0000
Manifest next update: Wed 11 Jun 2025 21:00:25 +0000
Files and hashes: 1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: kAAM3fTDUtIzPP6SdPW9esJ/Uf2fPEjOlf+qbBbRUsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:a4:f1:c1:37:70:57:2a:f3:85:38:8f:4d:43:90:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Jun 10 21:00:25 2025 GMT
Not After : Jun 11 21:00:25 2025 GMT
Subject: CN=19a82cb357d1037dfbc3232e328a54f2bcce6d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e1:dc:08:1f:00:00:ef:0b:d7:ee:e3:18:3b:
86:54:0d:43:a1:b3:aa:57:ac:17:23:ab:2e:12:d1:
b6:a9:52:87:44:6a:91:68:74:f2:fe:60:4c:a5:ad:
3e:6e:2b:b8:fa:b2:54:94:1d:68:ee:68:8f:51:b9:
78:33:d1:1e:e2:ee:3f:b9:08:b5:73:89:a3:ac:5b:
9a:ca:b1:b7:d0:c4:ee:ed:be:2d:5a:21:66:e8:47:
5b:16:b3:ef:58:68:d1:33:ef:c7:af:5a:e2:46:e9:
75:38:50:b3:c8:94:0a:fc:77:82:b4:9c:cf:db:09:
0e:ad:bc:43:de:fa:28:06:25:9f:74:61:26:39:be:
35:c6:fe:80:cd:c2:e0:fa:48:85:99:89:8d:50:e6:
86:59:24:db:0c:d8:49:f4:9e:50:03:b9:1d:8d:7b:
68:ed:4c:c3:49:a7:ff:04:ef:1b:01:8f:09:0e:a0:
16:c8:b4:bd:14:33:b5:eb:33:47:a0:47:0d:40:5d:
73:e2:c6:02:7c:10:f1:97:67:31:fa:5c:c9:07:6c:
51:9c:b7:04:cf:f5:53:fb:49:cd:5a:df:4e:7d:68:
af:8c:ef:b3:0a:9c:e8:25:65:20:59:67:79:43:a2:
c6:35:9d:ba:64:cb:7a:f8:1d:19:4e:d7:4c:99:eb:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A8:2C:B3:57:D1:03:7D:FB:C3:23:2E:32:8A:54:F2:BC:CE:6D:90
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7e:04:ec:70:9d:83:98:5a:38:ed:63:78:a3:5b:45:ed:76:
ec:07:d5:d3:3a:ef:19:3d:b8:15:70:12:51:35:13:3f:6c:19:
d5:ea:8d:d4:7f:bd:b0:8e:ce:d7:43:6f:2c:55:3b:5a:e2:7e:
f6:3c:dc:51:ad:5a:de:f1:cd:3b:c8:e6:3a:0a:86:cf:2a:f4:
cb:ce:27:d7:b5:40:c4:66:05:c4:a3:fd:7f:59:8f:15:77:62:
d4:f0:5f:61:2a:15:9d:c2:d1:c6:5f:98:72:73:ee:7a:16:3a:
01:fe:83:8c:4d:f3:42:88:51:31:83:e4:4a:c5:50:29:14:88:
d2:92:4a:bf:4e:d6:e4:23:0d:a6:68:3c:ca:12:13:5a:87:94:
9b:02:09:86:91:5d:45:71:48:ba:66:9d:3c:2d:9c:0c:38:a9:
e3:4c:fb:0e:5f:77:03:a5:fc:80:c6:8f:7c:5b:94:36:60:87:
a1:40:23:63:33:82:46:bf:47:3f:4b:a0:da:26:9e:d5:17:38:
96:78:a0:fd:86:11:e1:2b:bf:7c:10:2e:86:67:ce:a5:c5:89:
8f:7d:08:b8:0c:a2:e8:0a:dd:c1:ea:32:b9:01:91:bb:43:db:
83:6f:dc:fa:16:f5:23:7f:01:e5:55:ee:2b:8e:b6:53:74:11:
ae:eb:0c:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdbpPHBN3BXKvOFOI9NQ5BxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYzc4NjI3Nzk0ZTg3ZmY5NzE4ZGIxYjBkZjdlZWUyZWRi
MzM1OTUwHhcNMjUwNjEwMjEwMDI1WhcNMjUwNjExMjEwMDI1WjAzMTEwLwYDVQQD
EygxOWE4MmNiMzU3ZDEwMzdkZmJjMzIzMmUzMjhhNTRmMmJjY2U2ZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uHcCB8AAO8L1+7jGDuGVA1DobOq
V6wXI6suEtG2qVKHRGqRaHTy/mBMpa0+biu4+rJUlB1o7miPUbl4M9Ee4u4/uQi1
c4mjrFuayrG30MTu7b4tWiFm6EdbFrPvWGjRM+/Hr1riRul1OFCzyJQK/HeCtJzP
2wkOrbxD3vooBiWfdGEmOb41xv6AzcLg+kiFmYmNUOaGWSTbDNhJ9J5QA7kdjXto
7UzDSaf/BO8bAY8JDqAWyLS9FDO16zNHoEcNQF1z4sYCfBDxl2cx+lzJB2xRnLcE
z/VT+0nNWt9OfWivjO+zCpzoJWUgWWd5Q6LGNZ26ZMt6+B0ZTtdMmevg0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmoLLNX0QN9+8MjLjKKVPK8zm2QMB8GA1UdIwQY
MBaAFILHhid5Tof/lxjbGw337uLtszWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMt
NjI2ZmMwNDAzYWM5LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMtNjI2ZmMwNDAzYWM5
LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH34E7HCd
g5haOO1jeKNbRe127AfV0zrvGT24FXASUTUTP2wZ1eqN1H+9sI7O10NvLFU7WuJ+
9jzcUa1a3vHNO8jmOgqGzyr0y84n17VAxGYFxKP9f1mPFXdi1PBfYSoVncLRxl+Y
cnPuehY6Af6DjE3zQohRMYPkSsVQKRSI0pJKv07W5CMNpmg8yhITWoeUmwIJhpFd
RXFIumadPC2cDDip40z7Dl93A6X8gMaPfFuUNmCHoUAjYzOCRr9HP0ug2iae1Rc4
lnig/YYR4Su/fBAuhmfOpcWJj30IuAyi6ArdweoyuQGRu0Pbg2/c+hb1I38B5VXu
K462U3QRrusM8w==
-----END CERTIFICATE-----
Generated at Wed Jun 11 04:47:56 2025 by rpki-client