Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File: 8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier: uZEvLezlTOV9cYo7RKfuPxU8E/wstGfYIU7mKE4vp6I=
Subject key identifier: 35:04:F0:41:FE:1D:CC:5D:9D:3E:F8:E3:16:28:FC:F7:95:64:24:AA
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial: 0197B7EAE6127740D55F45FAE1EE694F8F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number: 054D
Signing time: Sat 28 Jun 2025 19:01:54 +0000
Manifest this update: Sat 28 Jun 2025 19:01:54 +0000
Manifest next update: Sun 29 Jun 2025 19:01:54 +0000
Files and hashes: 1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: ZWGtcLS8ushzn7YaTji0SPHxMNs9fpCcd9lz59bYAps=)
2: ZD2S6baBTMbxPOLjQxmOZb9ReoU.roa (hash: iIrhMwDo93l/J/AT32VhLXHCXDQvEKjJ60z+mXLZ3rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:e6:12:77:40:d5:5f:45:fa:e1:ee:69:4f:8f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Validity
Not Before: Jun 28 19:01:54 2025 GMT
Not After : Jun 29 19:01:54 2025 GMT
Subject: CN=3504f041fe1dcc5d9d3ef8e31628fcf7956424aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:5c:a7:a1:a5:55:7e:85:8e:bf:2b:c6:54:
ba:6f:f4:59:51:b2:22:12:88:86:a6:7b:cb:58:a5:
ab:54:34:99:7a:8a:78:f3:71:53:18:a7:23:34:cc:
4f:d1:99:47:a2:c4:bb:c7:fd:f2:14:2c:55:36:20:
72:33:52:fa:4f:84:32:d7:8a:30:29:0d:66:4e:2d:
c4:56:fb:78:9a:77:8e:5e:d7:cc:54:4c:72:18:53:
ef:55:eb:a1:54:95:96:70:de:b8:b9:ac:c0:6b:00:
c2:cb:61:a9:f5:76:c1:6f:74:be:34:2a:0d:6d:62:
36:14:91:a6:40:bb:67:0c:5b:b6:a0:43:32:3d:5d:
5c:24:84:39:7e:dc:d5:de:0b:d3:ae:a1:c4:8e:ef:
10:e5:44:5f:67:bc:58:c6:4f:5b:dd:c5:9f:29:eb:
d7:6a:66:36:2f:3a:e7:d0:81:8f:aa:46:9d:ba:34:
16:26:cb:3d:36:9f:de:e9:89:5a:c6:88:23:e6:e3:
e5:6b:8c:00:f5:4b:8c:c0:07:e1:e0:2a:c0:ae:6c:
7b:bb:fa:11:97:8d:3c:e1:43:36:92:d7:7e:37:d5:
e9:85:a5:d8:6e:be:08:b7:2f:12:e9:f8:75:22:53:
7e:c9:3a:16:89:f4:32:04:7d:e5:d0:c1:51:ea:ad:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:F0:41:FE:1D:CC:5D:9D:3E:F8:E3:16:28:FC:F7:95:64:24:AA
X509v3 Authority Key Identifier:
keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:23:2b:d9:f9:e7:32:c6:01:5f:bc:8e:45:1c:8a:81:2f:2f:
f7:a5:65:e9:89:65:e3:ea:72:21:90:33:d8:40:2d:1c:ef:f9:
37:74:10:1c:a4:c1:73:31:f2:51:e5:4d:77:bd:e8:44:42:01:
b4:c2:0a:94:a1:d3:7d:fe:1f:7d:a9:d9:b4:62:c1:23:51:ce:
29:76:cf:63:35:cf:f3:c2:93:27:84:11:88:f6:cd:b2:86:9e:
5f:3c:21:e7:74:20:f9:75:ee:7e:d4:14:1d:8a:8e:12:f3:9a:
a1:c7:c8:ee:0c:cf:71:d3:12:48:1f:cd:2e:3b:24:ea:cc:ee:
2c:ce:37:f3:5f:ea:e7:f1:3e:b6:4e:bc:05:62:a9:5b:6f:c0:
43:ad:c3:36:a8:a5:7b:87:c4:b5:e5:63:9a:dd:06:15:0f:83:
6b:72:d5:48:e5:b7:2c:43:c8:39:b7:2b:8b:9e:2e:57:70:64:
30:2d:a8:61:7b:9f:2d:50:72:96:16:49:66:0d:37:bc:b9:54:
72:5e:54:99:50:f6:dc:bb:8c:b3:78:48:7c:b1:38:b9:5e:0b:
2d:9c:76:35:41:02:a8:dd:fd:16:f5:1e:64:54:a6:e1:fb:83:
37:4a:2d:69:57:bd:0b:0a:f8:a9:4c:1c:87:ab:c3:ca:c0:07:
6c:e3:fd:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36uYSd0DVX0X64e5pT48sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNjFhNWZhMzdlNWNkMTAxNTA4NTI2M2VjMDI5ZTFhZmY3
OTM4ZDcwHhcNMjUwNjI4MTkwMTU0WhcNMjUwNjI5MTkwMTU0WjAzMTEwLwYDVQQD
EygzNTA0ZjA0MWZlMWRjYzVkOWQzZWY4ZTMxNjI4ZmNmNzk1NjQyNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJRcp6GlVX6Fjr8rxlS6b/RZUbIi
EoiGpnvLWKWrVDSZeop483FTGKcjNMxP0ZlHosS7x/3yFCxVNiByM1L6T4Qy14ow
KQ1mTi3EVvt4mneOXtfMVExyGFPvVeuhVJWWcN64uazAawDCy2Gp9XbBb3S+NCoN
bWI2FJGmQLtnDFu2oEMyPV1cJIQ5ftzV3gvTrqHEju8Q5URfZ7xYxk9b3cWfKevX
amY2Lzrn0IGPqkadujQWJss9Np/e6Ylaxogj5uPla4wA9UuMwAfh4CrArmx7u/oR
l4084UM2ktd+N9XphaXYbr4Ity8S6fh1IlN+yToWifQyBH3l0MFR6q2DgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUE8EH+HcxdnT744xYo/PeVZCSqMB8GA1UdIwQY
MBaAFPBhpfo35c0QFQhSY+wCnhr/eTjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYt
MThiMTI4YzhiNDg2LzEvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYtMThiMTI4YzhiNDg2
LzEvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSMr2fnn
MsYBX7yORRyKgS8v96Vl6Yll4+pyIZAz2EAtHO/5N3QQHKTBczHyUeVNd73oREIB
tMIKlKHTff4ffanZtGLBI1HOKXbPYzXP88KTJ4QRiPbNsoaeXzwh53Qg+XXuftQU
HYqOEvOaocfI7gzPcdMSSB/NLjsk6szuLM4381/q5/E+tk68BWKpW2/AQ63DNqil
e4fEteVjmt0GFQ+Da3LVSOW3LEPIObcri54uV3BkMC2oYXufLVBylhZJZg03vLlU
cl5UmVD23LuMs3hIfLE4uV4LLZx2NUECqN39FvUeZFSm4fuDN0otaVe9Cwr4qUwc
h6vDysAHbOP9hQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:36 2025 by rpki-client