Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: vIf+wcLRD8afYvOe+Q/rHxGx6msp9k/88F8wxT3aDzM=
Subject key identifier: 29:7A:03:A9:78:FB:66:E3:AF:80:96:0C:70:C3:BE:EF:BC:A2:71:33
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 0197B70E538510627C90C159EDAB180F05C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 09F8
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: 2K0uKSMybLcdA8jtmNxG5Ki84QY.roa (hash: 5mE2Q4t19bkfyumGCGmg6dxDWvIkT1fJkVfrU9nbK78=)
2: 6FGsGLFn7A73WCT0SPiFHEX5nI8.roa (hash: 7Hh/w12WqCnZ+Rx2BO6W7oVN9o4uT5fOf8UbGGxI1Zw=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: D6qPiCegcZVMz5MnIazFLGBwlpoyVR82a0Zb2kiHvjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:53:85:10:62:7c:90:c1:59:ed:ab:18:0f:05:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=297a03a978fb66e3af80960c70c3beefbca27133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cb:dd:85:2a:4b:cc:22:01:f4:52:4a:89:83:
09:49:4a:2a:e9:3e:9a:0c:2a:37:c1:0a:d7:9d:12:
a2:23:a8:f3:6d:27:7f:ac:6b:2e:92:11:ee:75:92:
41:61:63:15:87:f7:86:c8:46:62:68:5b:99:af:73:
68:49:78:92:f8:9c:14:1b:8b:cc:29:15:7d:3a:11:
6d:bb:d3:84:cd:f2:ab:ae:e2:3d:48:08:04:6a:e3:
74:56:33:a2:00:00:31:da:aa:87:77:44:97:43:f9:
43:9f:5e:1b:5f:47:32:66:84:2d:bf:70:49:2f:30:
03:79:a5:3e:ec:40:94:b9:1c:38:c2:fd:c4:f5:c0:
19:44:30:6f:f4:a3:7f:dd:bc:ed:4f:59:d3:08:27:
f4:39:6e:40:0c:8e:84:c5:de:50:8c:6d:e5:2d:60:
81:71:95:a0:af:57:b1:1d:04:dc:7f:d9:68:c2:35:
ef:da:50:48:42:29:65:7a:24:ff:de:dc:9d:01:e6:
6b:2c:8c:9a:e3:75:6b:09:3a:9a:87:e3:02:8c:7f:
10:2a:b6:33:e8:04:ed:c6:bf:5c:42:18:63:fd:70:
8f:53:0a:04:65:82:96:b9:de:a8:0e:d9:d3:70:05:
14:c5:49:7e:59:df:ae:ab:b2:b3:96:66:ed:8c:e0:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7A:03:A9:78:FB:66:E3:AF:80:96:0C:70:C3:BE:EF:BC:A2:71:33
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9c:89:2c:31:e4:00:c0:5a:d2:e7:59:f5:13:f1:fd:25:c4:
f0:f1:f5:be:9a:09:d3:00:43:b0:7e:1e:87:7e:04:82:f6:1d:
46:b5:ad:82:78:9a:1d:ee:55:66:ad:70:1d:9a:92:e5:96:07:
c8:50:c7:2c:93:bc:f5:54:ce:6c:23:6d:93:81:1e:df:a4:55:
38:28:1b:68:a4:aa:48:e8:a0:f1:e1:f5:6f:08:d4:3c:80:9b:
93:1f:07:28:f5:10:ed:f2:b5:07:6e:80:63:0f:93:50:fe:26:
14:81:7c:98:4b:f6:83:da:9d:9e:81:cd:72:35:fd:ec:53:3b:
52:d6:2f:85:37:aa:a7:06:80:03:69:5d:c9:41:38:68:54:bf:
f9:be:67:d7:75:5a:3d:e3:dc:d7:8e:3c:11:19:a4:99:bb:59:
20:d4:52:3c:f3:19:35:54:f9:d6:fe:4a:21:50:d5:e2:42:de:
0e:3b:75:d4:eb:2c:0f:0b:7c:4c:b2:c4:9a:b4:80:3e:b3:97:
48:46:c5:3e:e2:11:50:4d:59:d7:86:d8:a0:6c:6a:81:f6:26:
f3:85:6b:20:35:cd:50:73:f3:f7:33:a6:47:ba:2f:5d:be:06:
80:c1:c5:75:d9:cb:92:a5:5e:95:b6:e3:05:ab:d1:c4:be:31:
f5:73:cf:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DlOFEGJ8kMFZ7asYDwXJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNzFiMzQ5MzhhMzFhMzRiZjU4NjZhMGYzZGQ3OGMzOGFh
YzYxMTkwHhcNMjUwNjI4MTUwMDU4WhcNMjUwNjI5MTUwMDU4WjAzMTEwLwYDVQQD
EygyOTdhMDNhOTc4ZmI2NmUzYWY4MDk2MGM3MGMzYmVlZmJjYTI3MTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcvdhSpLzCIB9FJKiYMJSUoq6T6a
DCo3wQrXnRKiI6jzbSd/rGsukhHudZJBYWMVh/eGyEZiaFuZr3NoSXiS+JwUG4vM
KRV9OhFtu9OEzfKrruI9SAgEauN0VjOiAAAx2qqHd0SXQ/lDn14bX0cyZoQtv3BJ
LzADeaU+7ECUuRw4wv3E9cAZRDBv9KN/3bztT1nTCCf0OW5ADI6Exd5QjG3lLWCB
cZWgr1exHQTcf9lowjXv2lBIQilleiT/3tydAeZrLIya43VrCTqah+MCjH8QKrYz
6ATtxr9cQhhj/XCPUwoEZYKWud6oDtnTcAUUxUl+Wd+uq7KzlmbtjOB6NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCl6A6l4+2bjr4CWDHDDvu+8onEzMB8GA1UdIwQY
MBaAFGtxs0k4oxo0v1hmoPPdeMOKrGEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYt
NmY1NmUxZmEwMjMwLzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYtNmY1NmUxZmEwMjMw
LzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5yJLDHk
AMBa0udZ9RPx/SXE8PH1vpoJ0wBDsH4eh34EgvYdRrWtgniaHe5VZq1wHZqS5ZYH
yFDHLJO89VTObCNtk4Ee36RVOCgbaKSqSOig8eH1bwjUPICbkx8HKPUQ7fK1B26A
Yw+TUP4mFIF8mEv2g9qdnoHNcjX97FM7UtYvhTeqpwaAA2ldyUE4aFS/+b5n13Va
PePc1448ERmkmbtZINRSPPMZNVT51v5KIVDV4kLeDjt11OssDwt8TLLEmrSAPrOX
SEbFPuIRUE1Z14bYoGxqgfYm84VrIDXNUHPz9zOmR7ovXb4GgMHFddnLkqVelbbj
BavRxL4x9XPP8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:55 2025 by rpki-client