Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: tL76hp5RT7gMB0AdKFdw3yBhSAD1zyq7hysZdJrSBjc=
Subject key identifier: 54:64:BF:B3:52:3F:97:2B:E6:1C:33:CD:96:B3:5F:E0:75:DD:06:DC
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 0198D4A78AD7625B154F6BEC06820206C80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 05F4
Signing time: Sat 23 Aug 2025 02:00:06 +0000
Manifest this update: Sat 23 Aug 2025 02:00:06 +0000
Manifest next update: Sun 24 Aug 2025 02:00:06 +0000
Files and hashes: 1: 9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa (hash: NvC05zdhztqBgGL0x7IrDtfQb3ZiSTjs+SHJkAWRFb8=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: vpdeTll5ON9PWvtm4b8ghE9WD0tt/pew5K0ZVQ7jOAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:8a:d7:62:5b:15:4f:6b:ec:06:82:02:06:c8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Aug 23 02:00:06 2025 GMT
Not After : Aug 24 02:00:06 2025 GMT
Subject: CN=5464bfb3523f972be61c33cd96b35fe075dd06dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:94:91:76:9e:e9:04:99:c7:7b:2e:7f:7f:
54:12:3f:03:c5:79:b4:98:26:3b:62:ed:de:f7:2a:
c3:75:ec:b6:b4:99:3f:b0:59:65:90:6d:36:c6:ae:
28:ef:56:29:e1:6b:ea:1f:82:55:6e:59:af:19:a5:
95:44:1d:a3:c0:c5:c9:87:7a:f0:52:f7:a9:06:f0:
0c:ed:67:da:16:a7:11:4d:2c:7f:aa:ae:b1:b2:04:
ac:6c:35:12:d9:83:e9:8b:32:f4:62:a5:21:dd:e7:
e1:48:79:58:4f:50:14:40:e6:0d:bc:35:53:d3:c8:
d2:22:e6:9b:0f:b5:e0:b7:f1:91:f8:df:0a:69:ad:
b7:dc:13:ac:39:b0:0c:b6:4a:e4:6b:f8:59:52:d3:
39:4c:d6:d1:d3:6b:fd:14:36:05:00:56:0b:d9:83:
e7:80:ce:52:67:63:bd:62:5a:c5:87:28:34:a6:81:
1d:e0:bc:4c:84:ae:13:0e:2f:ad:c8:76:d9:42:1d:
f8:72:9b:d8:8f:bf:00:62:d4:31:bd:ec:c8:7e:6b:
15:e5:c9:02:d7:77:b3:78:ae:81:29:da:d1:f8:d4:
8c:d9:c1:21:cf:9c:0e:e3:a9:fc:43:60:b5:02:6f:
be:b4:40:5c:8f:a4:14:6f:ac:db:2d:f2:4c:84:4b:
a1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:64:BF:B3:52:3F:97:2B:E6:1C:33:CD:96:B3:5F:E0:75:DD:06:DC
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:60:50:95:a2:88:f7:9a:46:5a:30:f7:33:9e:01:cd:14:dd:
3b:15:02:90:16:01:aa:29:1b:b6:ab:70:02:bd:c7:c9:6b:ed:
04:4c:cc:16:8f:12:bc:b3:b7:9a:e1:ce:22:77:a6:15:4a:b9:
6a:56:8f:3a:00:99:01:da:8c:9e:ed:bd:9e:9a:e8:62:9e:58:
20:c7:c6:0f:de:1f:ac:8f:79:ee:0d:b1:ad:ac:da:bf:53:68:
58:79:40:1f:2b:dd:a1:b3:24:e8:eb:32:b6:c3:08:9b:d7:78:
dc:3e:05:5e:3d:cc:93:8d:89:dc:50:00:50:41:39:0c:9b:60:
a5:5a:b7:dd:b9:3a:aa:94:ec:0a:36:08:5d:a1:3d:b2:73:3a:
d9:3a:6d:20:49:b4:91:49:a9:9e:cd:fa:aa:11:ee:19:7d:7e:
d8:70:95:43:fb:34:99:0a:c9:7b:80:85:91:c1:fd:1b:d2:d6:
1a:03:92:29:c1:aa:2b:a4:f5:4e:08:cc:8a:07:d1:c7:10:c4:
18:28:d9:cc:dc:8a:c5:d8:f8:54:51:d0:4a:d5:5e:29:48:e9:
d0:b0:05:49:a8:4d:d8:41:b1:cf:2a:4b:ec:05:49:08:83:cd:
0e:7d:f6:57:65:0a:3c:75:06:62:97:57:25:28:9b:cd:d5:2f:
4e:e5:f7:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp4rXYlsVT2vsBoICBsgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjA4ODUxMjAyMzI4ZGNlNWZjMDFiZjlkZDI5MjUyMDUz
MGQ5ZmUwHhcNMjUwODIzMDIwMDA2WhcNMjUwODI0MDIwMDA2WjAzMTEwLwYDVQQD
Eyg1NDY0YmZiMzUyM2Y5NzJiZTYxYzMzY2Q5NmIzNWZlMDc1ZGQwNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwSUkXae6QSZx3suf39UEj8DxXm0
mCY7Yu3e9yrDdey2tJk/sFllkG02xq4o71Yp4WvqH4JVblmvGaWVRB2jwMXJh3rw
UvepBvAM7WfaFqcRTSx/qq6xsgSsbDUS2YPpizL0YqUh3efhSHlYT1AUQOYNvDVT
08jSIuabD7Xgt/GR+N8Kaa233BOsObAMtkrka/hZUtM5TNbR02v9FDYFAFYL2YPn
gM5SZ2O9YlrFhyg0poEd4LxMhK4TDi+tyHbZQh34cpvYj78AYtQxvezIfmsV5ckC
13ezeK6BKdrR+NSM2cEhz5wO46n8Q2C1Am++tEBcj6QUb6zbLfJMhEuh0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRkv7NSP5cr5hwzzZazX+B13QbcMB8GA1UdIwQY
MBaAFINgiFEgIyjc5fwBv53SklIFMNn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMt
Yzc1NmFlMDFmYThhLzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMtYzc1NmFlMDFmYThh
LzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomBQlaKI
95pGWjD3M54BzRTdOxUCkBYBqikbtqtwAr3HyWvtBEzMFo8SvLO3muHOInemFUq5
alaPOgCZAdqMnu29nproYp5YIMfGD94frI957g2xrazav1NoWHlAHyvdobMk6Osy
tsMIm9d43D4FXj3Mk42J3FAAUEE5DJtgpVq33bk6qpTsCjYIXaE9snM62TptIEm0
kUmpns36qhHuGX1+2HCVQ/s0mQrJe4CFkcH9G9LWGgOSKcGqK6T1TgjMigfRxxDE
GCjZzNyKxdj4VFHQStVeKUjp0LAFSahN2EGxzypL7AVJCIPNDn32V2UKPHUGYpdX
JSibzdUvTuX3Fg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:41 2025 by rpki-client