Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File: g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier: zuEZFcBsMV6edfxX1Gk/AeU7irCzjZ/JZO+kFgfCGrE=
Subject key identifier: A4:01:A6:93:7E:4D:FC:89:00:D2:7E:04:6B:97:3C:13:AB:20:2E:D6
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer: /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial: 0197B7B2FECA4586483369F625E9C4FFA450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number: 0650
Signing time: Sat 28 Jun 2025 18:00:50 +0000
Manifest this update: Sat 28 Jun 2025 18:00:50 +0000
Manifest next update: Sun 29 Jun 2025 18:00:50 +0000
Files and hashes: 1: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: W3fxdTi2JhlDkmow8m3ouiygRzD/BXdSOZIip7xmWD0=)
2: r0PvjEpnlWFsFe9mhlu-x7uuqW4.roa (hash: v9Sjd6VL0RkK073Ql08i5EoR8baGeigT54elfTpIto4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:fe:ca:45:86:48:33:69:f6:25:e9:c4:ff:a4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Validity
Not Before: Jun 28 18:00:50 2025 GMT
Not After : Jun 29 18:00:50 2025 GMT
Subject: CN=a401a6937e4dfc8900d27e046b973c13ab202ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:75:9c:ff:5e:32:f0:d1:8c:bd:1f:ea:83:99:
a8:c4:51:df:8f:b9:e3:e8:bb:a7:41:f4:c3:ac:9f:
9d:bb:55:79:49:06:73:ad:f0:5a:76:fa:33:2d:04:
ab:95:ab:fd:d5:f8:09:ab:f4:1a:ac:fb:28:24:f5:
8d:86:aa:83:d4:38:5c:07:cb:3e:91:15:99:10:d8:
89:83:78:bb:93:92:bb:1c:41:d2:da:7a:10:00:db:
e0:d2:ed:64:a0:44:06:38:e5:0c:1c:7a:09:f4:c7:
a4:b4:d9:46:3f:b8:c7:c6:57:87:2c:85:40:f6:24:
50:ea:f8:22:06:e7:a1:4e:fc:00:03:ee:38:9c:ad:
d5:ae:a5:c2:5a:14:85:72:ce:ef:27:6e:cd:da:98:
98:32:61:90:cf:54:36:b4:ee:22:82:f8:6c:16:e7:
86:fd:78:8a:d2:81:94:d2:ca:f1:4d:d7:c0:05:4b:
53:41:f8:d8:79:d5:f2:44:41:b3:d4:fa:83:92:0c:
6d:48:46:7a:d0:06:c6:49:09:25:68:ec:ad:49:93:
51:fc:bc:63:65:7a:2c:b4:59:a5:96:b9:03:72:db:
70:81:68:64:e4:43:e0:81:f3:a6:eb:09:a4:06:01:
c4:4f:f1:bb:ca:e9:ff:ed:41:4c:bb:70:88:7a:98:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:01:A6:93:7E:4D:FC:89:00:D2:7E:04:6B:97:3C:13:AB:20:2E:D6
X509v3 Authority Key Identifier:
keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b1:89:44:1d:ec:9e:dc:14:35:6c:87:3a:12:d8:95:25:b0:
bd:27:da:62:9c:61:e4:29:cd:21:bc:64:18:ae:55:68:de:bd:
f4:52:68:d9:ba:fe:6a:e3:a4:90:9d:b2:9f:96:28:92:92:53:
04:16:e4:ed:b1:16:c1:21:16:ee:5d:1e:bd:b3:fd:ec:4f:75:
4a:0b:41:88:18:0f:56:22:2c:28:75:a3:c2:73:a3:00:ff:be:
0f:40:4c:52:83:df:e6:7b:43:2f:aa:c9:0f:4f:2b:22:2e:b1:
fe:16:e0:e5:c0:e4:35:15:d7:cd:21:1f:fa:1a:35:fe:b6:d1:
f7:8a:5c:ad:5e:0a:34:0d:c5:09:de:18:62:cd:0c:22:ed:76:
5e:d8:ab:c8:cb:77:84:45:d4:96:c8:01:1f:a3:d4:37:35:77:
ac:16:36:d5:b2:39:31:74:5c:5c:60:43:8b:ec:06:22:c9:10:
b6:40:a3:1c:01:55:f5:08:c1:ef:c0:88:74:33:12:44:35:22:
6c:83:31:9e:40:64:79:98:38:ec:dd:95:89:96:8c:88:8d:84:
bb:49:97:88:05:e2:de:73:10:71:53:b5:e6:4c:89:36:97:ef:
ca:9e:2a:b5:c2:c9:ea:18:3d:83:78:ff:a5:57:27:ba:76:a2:
68:d9:6f:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sv7KRYZIM2n2JenE/6RQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOWI3ZTE2MTVhMDAxYTViY2I5NmUxNTRhNzFhZjlhMGI0
NWI1ZDcwHhcNMjUwNjI4MTgwMDUwWhcNMjUwNjI5MTgwMDUwWjAzMTEwLwYDVQQD
EyhhNDAxYTY5MzdlNGRmYzg5MDBkMjdlMDQ2Yjk3M2MxM2FiMjAyZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+nWc/14y8NGMvR/qg5moxFHfj7nj
6LunQfTDrJ+du1V5SQZzrfBadvozLQSrlav91fgJq/QarPsoJPWNhqqD1DhcB8s+
kRWZENiJg3i7k5K7HEHS2noQANvg0u1koEQGOOUMHHoJ9MektNlGP7jHxleHLIVA
9iRQ6vgiBuehTvwAA+44nK3VrqXCWhSFcs7vJ27N2piYMmGQz1Q2tO4igvhsFueG
/XiK0oGU0srxTdfABUtTQfjYedXyREGz1PqDkgxtSEZ60AbGSQklaOytSZNR/Lxj
ZXostFmllrkDcttwgWhk5EPggfOm6wmkBgHET/G7yun/7UFMu3CIepjVjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQBppN+TfyJANJ+BGuXPBOrIC7WMB8GA1UdIwQY
MBaAFIObfhYVoAGlvLluFUpxr5oLRbXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzV0LUZoV2dBYVc4dVc0VlNuR3ZtZ3RGdGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80MmYyNzUtNjhiNy00NDhkLWI5NTYt
MzViYjJlNmQwNjA2LzEvZzV0LUZoV2dBYVc4dVc0VlNuR3ZtZ3RGdGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi80MmYyNzUtNjhiNy00NDhkLWI5NTYtMzViYjJlNmQwNjA2
LzEvZzV0LUZoV2dBYVc4dVc0VlNuR3ZtZ3RGdGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLGJRB3s
ntwUNWyHOhLYlSWwvSfaYpxh5CnNIbxkGK5VaN699FJo2br+auOkkJ2yn5YokpJT
BBbk7bEWwSEW7l0evbP97E91SgtBiBgPViIsKHWjwnOjAP++D0BMUoPf5ntDL6rJ
D08rIi6x/hbg5cDkNRXXzSEf+ho1/rbR94pcrV4KNA3FCd4YYs0MIu12XtiryMt3
hEXUlsgBH6PUNzV3rBY21bI5MXRcXGBDi+wGIskQtkCjHAFV9QjB78CIdDMSRDUi
bIMxnkBkeZg47N2ViZaMiI2Eu0mXiAXi3nMQcVO15kyJNpfvyp4qtcLJ6hg9g3j/
pVcnunaiaNlvQA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:10 2025 by rpki-client