Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier: kTPJ+4zsYq1nYF3eq9pgICJnJVxj08lh5C1mDl7KbnI=
Subject key identifier: 99:E4:5C:6C:7A:29:F5:80:BB:A2:34:0B:D6:40:63:68:28:7A:26:7D
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 0197C191E427F0FA0DDE4325EDA891A78061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number: 12E5
Signing time: Mon 30 Jun 2025 16:00:53 +0000
Manifest this update: Mon 30 Jun 2025 16:00:53 +0000
Manifest next update: Tue 01 Jul 2025 16:00:53 +0000
Files and hashes: 1: 52xHcZKMiLkJfC48D6ah-VZ8yTA.roa (hash: jrz3bp7KHkqbn8SdD2JCqFdwlcK3RRhyL/xchThJ/cc=)
2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: 1nJudSxwaVFXstmoTuLnjl4JnAfoXZL2DiWKlVYe0MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:91:e4:27:f0:fa:0d:de:43:25:ed:a8:91:a7:80:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: Jun 30 16:00:53 2025 GMT
Not After : Jul 1 16:00:53 2025 GMT
Subject: CN=99e45c6c7a29f580bba2340bd6406368287a267d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:78:30:40:fa:44:0e:a2:92:46:fd:96:ee:ee:
71:ae:64:f1:34:2f:fb:f6:c5:4e:02:91:7e:c6:e4:
83:f3:9e:ff:ed:71:92:cb:03:d2:e4:9c:e6:42:04:
41:48:d6:be:87:42:e2:ae:02:cc:6e:3f:1d:e7:a1:
cd:39:57:b1:bc:ad:65:c8:8a:b4:5e:1c:84:dd:9c:
39:5d:f6:5c:70:f1:2b:8c:a0:7a:63:15:f3:fc:a2:
e6:99:0e:7c:a5:dd:63:15:21:cd:e4:18:63:75:6d:
d7:6a:84:65:73:92:ed:c2:c7:91:03:df:f3:9e:18:
ad:5e:c7:2b:1e:f0:15:a0:2b:11:b8:66:ec:00:3d:
8e:95:2a:73:21:b4:38:51:98:a6:09:c5:c0:c2:16:
f4:9b:a6:5c:a4:7f:3e:c1:89:78:11:8c:4d:7b:d2:
16:81:f0:44:fa:f2:cb:fb:8a:d6:8c:da:b1:b8:06:
99:33:e9:da:ae:41:04:e1:16:27:df:dc:64:80:ee:
31:55:fd:aa:b9:f6:a0:9c:63:01:2c:b0:ca:f8:74:
6d:74:8d:07:25:d5:86:fc:3e:41:0a:7d:a4:9c:28:
8f:2f:92:81:3f:c5:2e:2c:6c:cf:e0:79:77:6f:ae:
47:19:2a:37:03:a6:3d:3b:db:76:ac:37:72:eb:24:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E4:5C:6C:7A:29:F5:80:BB:A2:34:0B:D6:40:63:68:28:7A:26:7D
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:59:51:1b:ef:a3:2d:05:5a:bf:46:de:07:29:94:11:64:df:
78:fe:82:b4:df:2a:b9:bb:b9:2c:17:c4:74:40:ab:af:61:82:
84:b5:81:65:4e:71:d8:d9:e2:e0:4d:c4:2b:d6:25:80:6d:46:
ae:de:af:69:73:d9:dc:c2:66:71:4c:ca:2e:45:c2:c9:ae:68:
47:cb:24:d2:12:c5:7e:01:c7:b1:f2:3c:dd:d3:35:4f:5f:d3:
1e:85:f3:6c:15:7e:4b:6d:ed:32:2d:00:67:e9:71:ce:91:c2:
21:77:6b:d2:f3:8b:61:ed:ca:97:8c:25:a9:35:bf:93:1d:90:
84:1b:db:df:4a:25:38:91:a6:c9:49:d0:67:1d:1f:77:36:da:
c7:06:d5:44:15:23:3d:e8:63:e5:05:1e:dd:85:53:8f:4b:cb:
b1:88:ac:98:7d:05:ef:d5:b7:ba:80:20:87:23:ef:c0:f7:31:
59:f1:cc:2d:5a:7c:9c:10:b0:d9:ef:31:66:45:b6:5d:dd:a9:
32:98:e4:ff:f0:8c:c6:4b:2e:f8:36:34:c4:99:72:3e:1e:11:
52:fa:56:59:d5:4a:43:77:c5:6b:f8:37:a1:21:0b:28:fb:09:
7a:ad:f3:a7:65:42:37:d5:8a:a8:2d:8f:9f:79:6b:04:6b:ed:
2a:63:9d:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfBkeQn8PoN3kMl7aiRp4BhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzU0NDRjNTgxMTYxYzU4OGFlODRiZTAxOTY1YmM4ZTgz
NzgwYjgwHhcNMjUwNjMwMTYwMDUzWhcNMjUwNzAxMTYwMDUzWjAzMTEwLwYDVQQD
Eyg5OWU0NWM2YzdhMjlmNTgwYmJhMjM0MGJkNjQwNjM2ODI4N2EyNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HgwQPpEDqKSRv2W7u5xrmTxNC/7
9sVOApF+xuSD857/7XGSywPS5JzmQgRBSNa+h0LirgLMbj8d56HNOVexvK1lyIq0
XhyE3Zw5XfZccPErjKB6YxXz/KLmmQ58pd1jFSHN5BhjdW3XaoRlc5LtwseRA9/z
nhitXscrHvAVoCsRuGbsAD2OlSpzIbQ4UZimCcXAwhb0m6ZcpH8+wYl4EYxNe9IW
gfBE+vLL+4rWjNqxuAaZM+narkEE4RYn39xkgO4xVf2qufagnGMBLLDK+HRtdI0H
JdWG/D5BCn2knCiPL5KBP8UuLGzP4Hl3b65HGSo3A6Y9O9t2rDdy6yQZNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnkXGx6KfWAu6I0C9ZAY2goeiZ9MB8GA1UdIwQY
MBaAFIM1RExYEWHFiK6EvgGWW8joN4C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEt
MWYxM2Y1NWQwMDU5LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEtMWYxM2Y1NWQwMDU5
LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkllRG++j
LQVav0beBymUEWTfeP6CtN8qubu5LBfEdECrr2GChLWBZU5x2Nni4E3EK9YlgG1G
rt6vaXPZ3MJmcUzKLkXCya5oR8sk0hLFfgHHsfI83dM1T1/THoXzbBV+S23tMi0A
Z+lxzpHCIXdr0vOLYe3Kl4wlqTW/kx2QhBvb30olOJGmyUnQZx0fdzbaxwbVRBUj
Pehj5QUe3YVTj0vLsYismH0F79W3uoAghyPvwPcxWfHMLVp8nBCw2e8xZkW2Xd2p
Mpjk//CMxksu+DY0xJlyPh4RUvpWWdVKQ3fFa/g3oSELKPsJeq3zp2VCN9WKqC2P
n3lrBGvtKmOdSQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:35:21 2025 by rpki-client