Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File: GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier: Xy4SV/+PGmtlP2IUT8QECMRBzOndzEulMdH1RaLC9hI=
Subject key identifier: B5:F6:C4:38:70:FF:98:B9:23:EB:5C:E1:6A:C7:3E:10:4D:41:6D:94
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial: 01992FDA522F1A2F6EABD1EA34A1EA6A78D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number: 13C3
Signing time: Tue 09 Sep 2025 19:01:00 +0000
Manifest this update: Tue 09 Sep 2025 19:01:00 +0000
Manifest next update: Wed 10 Sep 2025 19:01:00 +0000
Files and hashes: 1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=)
2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: bXTd2Bxqri6F1mnjse7DramxLjohTjtqiMGS6KZj5y8=)
3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:da:52:2f:1a:2f:6e:ab:d1:ea:34:a1:ea:6a:78:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Validity
Not Before: Sep 9 19:01:00 2025 GMT
Not After : Sep 10 19:01:00 2025 GMT
Subject: CN=b5f6c43870ff98b923eb5ce16ac73e104d416d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:65:9c:e8:e4:5d:cd:7c:9b:21:be:17:5b:
75:fb:28:93:e2:5c:4f:2a:fd:e0:88:fc:1f:58:78:
15:5d:e3:66:86:f3:f9:0e:e4:b4:b6:fb:98:00:bd:
fc:f8:a8:38:7c:cf:b1:f4:77:38:11:4d:97:e3:b7:
6f:de:0f:2f:3e:eb:53:ec:a9:14:94:3b:14:62:c7:
91:5c:f2:57:59:c5:ed:9c:ac:18:7c:48:3d:f0:18:
53:df:e5:d7:76:c0:cd:d1:c4:e7:8c:cd:f5:d4:af:
b9:42:d3:04:ea:0f:6d:5c:78:0f:81:72:21:8e:f7:
47:f6:35:67:3f:cf:7e:71:75:19:63:b4:d9:41:72:
c4:71:b6:25:95:13:e1:aa:22:63:13:18:35:26:b9:
46:41:36:f7:13:07:d3:0f:c4:44:9b:98:8a:34:f5:
df:0e:ab:7d:cf:e5:de:48:52:f0:b9:e9:f6:40:67:
ac:2e:f9:eb:af:7b:b1:9a:8e:ff:54:8c:9d:17:b0:
99:b9:e3:68:01:f7:8d:0f:af:42:e4:5d:b3:91:d6:
73:2b:c4:7c:23:35:7b:96:a5:92:42:1d:5c:48:a0:
5b:9f:1c:76:3c:fd:6e:a5:45:c0:bd:d4:3e:29:76:
85:36:0a:6d:07:33:54:dd:1e:d5:53:29:2c:e0:dc:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F6:C4:38:70:FF:98:B9:23:EB:5C:E1:6A:C7:3E:10:4D:41:6D:94
X509v3 Authority Key Identifier:
keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7e:94:2c:39:d1:b6:be:46:77:fa:81:8d:51:c7:7b:5e:d9:
8b:76:ce:b3:52:99:01:71:93:98:c4:a5:d6:b8:2f:5b:63:bb:
28:2b:1a:fd:e0:7e:b2:df:d5:3b:4f:e7:fa:60:ea:9a:d4:e0:
6e:a2:76:61:e6:80:a1:99:b3:21:d5:01:07:88:0c:d4:73:fe:
87:73:22:13:ff:0b:dc:94:77:a9:9f:c6:a7:21:20:55:01:7c:
f5:19:f6:af:82:c5:91:7c:07:58:0a:a6:8b:66:64:7c:c6:36:
39:cc:5f:a0:01:66:21:e3:6f:90:4f:9c:fe:e2:5f:cf:93:b9:
4e:da:9d:30:78:bb:e6:0e:da:58:c7:77:a1:46:72:e9:62:a9:
91:a9:82:46:ea:0a:87:8b:12:9c:65:19:24:1e:c1:7e:19:1b:
fa:7e:c5:f7:d3:b3:04:bc:a8:a0:46:1f:03:2d:a0:fc:cc:a1:
7d:6d:02:7d:54:e7:ac:82:c1:d8:4e:ee:7d:d0:1a:2b:af:99:
4d:d9:02:87:d9:f2:51:3f:0d:8f:4c:ad:31:b5:2e:d0:c5:d0:
11:46:2d:9a:bf:9e:01:a2:46:0c:ec:23:ba:98:26:23:d9:eb:
c2:02:cd:7a:8f:fa:c5:32:8a:b8:7f:42:02:0b:28:92:ab:c4:
45:4e:a0:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkv2lIvGi9uq9HqNKHqanjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTE3MzJmMmM4MGUzZWE0ZDcyNzlkMjUyYjg3NGE2MTY0
YzM1YjQwHhcNMjUwOTA5MTkwMTAwWhcNMjUwOTEwMTkwMTAwWjAzMTEwLwYDVQQD
EyhiNWY2YzQzODcwZmY5OGI5MjNlYjVjZTE2YWM3M2UxMDRkNDE2ZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gllnOjkXc18myG+F1t1+yiT4lxP
Kv3giPwfWHgVXeNmhvP5DuS0tvuYAL38+Kg4fM+x9Hc4EU2X47dv3g8vPutT7KkU
lDsUYseRXPJXWcXtnKwYfEg98BhT3+XXdsDN0cTnjM311K+5QtME6g9tXHgPgXIh
jvdH9jVnP89+cXUZY7TZQXLEcbYllRPhqiJjExg1JrlGQTb3EwfTD8REm5iKNPXf
Dqt9z+XeSFLwuen2QGesLvnrr3uxmo7/VIydF7CZueNoAfeND69C5F2zkdZzK8R8
IzV7lqWSQh1cSKBbnxx2PP1upUXAvdQ+KXaFNgptBzNU3R7VUyks4NycSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX2xDhw/5i5I+tc4WrHPhBNQW2UMB8GA1UdIwQY
MBaAFBjhcy8sgOPqTXJ50lK4dKYWTDW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQt
ZTQwOTI2MDAxNWVmLzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQtZTQwOTI2MDAxNWVm
LzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT36ULDnR
tr5Gd/qBjVHHe17Zi3bOs1KZAXGTmMSl1rgvW2O7KCsa/eB+st/VO0/n+mDqmtTg
bqJ2YeaAoZmzIdUBB4gM1HP+h3MiE/8L3JR3qZ/GpyEgVQF89Rn2r4LFkXwHWAqm
i2ZkfMY2OcxfoAFmIeNvkE+c/uJfz5O5TtqdMHi75g7aWMd3oUZy6WKpkamCRuoK
h4sSnGUZJB7Bfhkb+n7F99OzBLyooEYfAy2g/MyhfW0CfVTnrILB2E7ufdAaK6+Z
TdkCh9nyUT8Nj0ytMbUu0MXQEUYtmr+eAaJGDOwjupgmI9nrwgLNeo/6xTKKuH9C
AgsokqvERU6gnA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 22:57:33 2025 by rpki-client