Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: ZhivCq0C0J+7yadyh7kCJcoNN8+4N0lOF9N6aQxyoZM=
Subject key identifier: 92:0B:D9:C8:8F:AB:6E:84:B6:5C:40:6D:36:EC:C3:DC:22:31:07:B8
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 0197B70EC6505E21A3792DB7208EF469C8E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 0DC3
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: V6KVY7G6GgYfsN-YsqV35GGJJzk.roa (hash: eItdy8LiVFAx1foSIby+xCbrZCjTXV9gcCfQg6telps=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: uHPtiioureXpxEXUtyCT+P+Jfhwmk4g4fm6HTD9L9LE=)
3: va7G1Etlo6KFOzv3RXEcOofD7SM.roa (hash: rBy+ju7usynwUPKEj3xmeZHIvCFI48Q0Gca4wzYHCUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c6:50:5e:21:a3:79:2d:b7:20:8e:f4:69:c8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=920bd9c88fab6e84b65c406d36ecc3dc223107b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:85:d6:51:55:bd:8b:a5:b4:10:2e:a5:eb:
9c:91:f4:e1:b0:39:59:16:aa:c6:7a:3c:59:1f:6b:
d8:fc:45:85:b7:84:36:44:a5:e1:68:b8:6d:2e:4f:
3b:4a:e6:e0:7e:bd:c0:3a:f0:22:6d:27:81:13:47:
67:7f:bb:fc:f8:8c:a0:fe:1c:96:65:ce:60:09:7e:
45:42:73:53:54:d0:3e:bf:4e:d6:5a:8b:5b:d8:7a:
89:7f:07:e6:49:04:f2:29:18:56:b0:43:6a:82:c9:
1a:c8:80:b2:16:9d:02:d8:cb:87:18:9a:62:8c:90:
a7:81:3d:51:2d:79:6a:28:80:58:33:63:75:7a:99:
c5:0f:ab:8d:a2:fc:62:5f:d1:78:ab:7a:08:08:a6:
cd:35:14:e7:6c:64:af:f9:38:15:59:86:a2:f8:76:
d8:2b:ee:01:c3:34:34:41:78:c9:f7:6b:80:88:2a:
ec:52:4e:12:19:19:7c:c3:b7:c2:fa:a4:0e:c1:95:
72:b2:ff:ce:20:3c:96:d5:26:31:85:c8:80:36:22:
d3:e6:1f:56:f5:08:9e:d6:b1:d1:bf:81:81:b6:c0:
14:65:c6:f2:a6:6c:0c:cd:c6:e5:23:3a:e9:71:51:
03:8a:be:b3:e1:72:f5:3b:0d:6a:69:88:63:b3:a5:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0B:D9:C8:8F:AB:6E:84:B6:5C:40:6D:36:EC:C3:DC:22:31:07:B8
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fd:aa:3e:68:1f:66:8b:43:e4:e9:65:6f:8f:5a:36:91:1c:
ff:de:23:d1:c8:d8:06:e5:bd:08:bb:d1:c6:4b:67:5d:6b:9c:
62:80:68:7d:7f:97:4e:92:33:3a:b0:db:71:c7:5b:25:35:f5:
0d:46:61:b8:82:5f:e0:2c:b4:8a:0e:03:22:4d:fb:f8:06:46:
be:ea:f1:b8:d2:ac:3b:3c:54:99:04:09:b8:28:59:d2:d4:36:
fb:e0:80:e6:f0:fa:06:5d:e7:d3:63:8a:d8:b8:f8:6c:e3:4e:
68:da:bd:ad:4a:19:e4:07:e5:e8:9b:3d:b4:05:a7:9e:bb:1f:
66:92:5f:06:34:22:d7:4a:6a:d6:c3:0e:e8:c2:e8:dc:76:0a:
5c:ea:31:a3:18:e3:6d:e3:5e:d9:06:c4:1c:4b:80:f9:a3:61:
4c:99:a7:44:e7:12:7b:38:6a:eb:34:71:c6:8e:41:6e:e9:40:
a7:7f:fa:d5:f7:00:cc:ca:b7:f1:70:cb:08:bb:99:c5:db:21:
b7:41:dc:36:68:47:1d:7a:3d:6a:ff:28:fc:4f:d5:00:36:38:
19:01:ba:92:81:96:82:8b:f0:b0:e6:65:d9:09:19:c5:68:37:
e3:b5:f2:86:91:08:79:2f:46:41:0e:62:ad:3d:6d:65:15:36:
4b:38:5e:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DsZQXiGjeS23II70acjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl
NGU0NjEwHhcNMjUwNjI4MTUwMTI4WhcNMjUwNjI5MTUwMTI4WjAzMTEwLwYDVQQD
Eyg5MjBiZDljODhmYWI2ZTg0YjY1YzQwNmQzNmVjYzNkYzIyMzEwN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS+F1lFVvYultBAupeuckfThsDlZ
FqrGejxZH2vY/EWFt4Q2RKXhaLhtLk87Subgfr3AOvAibSeBE0dnf7v8+Iyg/hyW
Zc5gCX5FQnNTVNA+v07WWotb2HqJfwfmSQTyKRhWsENqgskayICyFp0C2MuHGJpi
jJCngT1RLXlqKIBYM2N1epnFD6uNovxiX9F4q3oICKbNNRTnbGSv+TgVWYai+HbY
K+4BwzQ0QXjJ92uAiCrsUk4SGRl8w7fC+qQOwZVysv/OIDyW1SYxhciANiLT5h9W
9Qie1rHRv4GBtsAUZcbypmwMzcblIzrpcVEDir6z4XL1Ow1qaYhjs6VvjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIL2ciPq26EtlxAbTbsw9wiMQe4MB8GA1UdIwQY
MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt
YmM5MWMwNjcwZDAzLzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz
LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAv2qPmgf
ZotD5Ollb49aNpEc/94j0cjYBuW9CLvRxktnXWucYoBofX+XTpIzOrDbccdbJTX1
DUZhuIJf4Cy0ig4DIk37+AZGvurxuNKsOzxUmQQJuChZ0tQ2++CA5vD6Bl3n02OK
2Lj4bONOaNq9rUoZ5Afl6Js9tAWnnrsfZpJfBjQi10pq1sMO6MLo3HYKXOoxoxjj
beNe2QbEHEuA+aNhTJmnROcSezhq6zRxxo5BbulAp3/61fcAzMq38XDLCLuZxdsh
t0HcNmhHHXo9av8o/E/VADY4GQG6koGWgovwsOZl2QkZxWg347XyhpEIeS9GQQ5i
rT1tZRU2SzheJw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:30 2025 by rpki-client