Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: nNpq7Uhk/pa+Swq0DLWJe0pvjjstz6G2bDIf1NttfQ4=
Subject key identifier: 04:15:B5:77:DE:BE:33:6C:78:44:8E:8B:D5:2A:A7:FB:DC:D9:CF:C9
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 0197B70F45984343C96FBC30F533DEC4FC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 1239
Signing time: Sat 28 Jun 2025 15:02:00 +0000
Manifest this update: Sat 28 Jun 2025 15:02:00 +0000
Manifest next update: Sun 29 Jun 2025 15:02:00 +0000
Files and hashes: 1: FpKpXAvwQ5eTmnpDjAybF20U0r8.roa (hash: rDfC3vqrlhOzRgHniKHIntRfI5mc/vDS+DS8eZGWJuQ=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: pSFpMk4hZE7ESm+t0/MzubFAYcWR3Le+HK5HNS+mY30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:45:98:43:43:c9:6f:bc:30:f5:33:de:c4:fc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Jun 28 15:02:00 2025 GMT
Not After : Jun 29 15:02:00 2025 GMT
Subject: CN=0415b577debe336c78448e8bd52aa7fbdcd9cfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:23:74:0b:09:e4:c7:c0:47:57:17:4b:10:
04:1f:d7:67:49:ee:af:43:9e:29:dd:0b:d1:9f:71:
89:5b:9d:86:64:0d:a2:e0:a5:fd:32:42:18:34:27:
99:b1:b1:34:c4:c7:71:07:03:59:d1:16:74:ca:17:
c3:2f:24:40:df:e0:39:28:21:e9:c9:9c:d7:c9:63:
8f:b7:0f:1b:6f:e4:5c:9e:d2:0c:f3:17:63:cf:82:
8f:0d:9b:5f:28:30:fb:01:08:10:32:54:de:77:9b:
22:50:dd:f0:72:9d:18:eb:87:d0:ba:e6:e3:d4:c8:
dd:d1:1e:02:bd:19:2c:8e:58:d1:e1:a7:04:92:09:
d7:be:f1:34:f6:c7:5b:b4:23:9c:81:71:ab:61:78:
90:5f:95:8b:0e:16:b2:9c:43:69:66:f9:89:bf:c0:
90:53:18:aa:18:2b:19:d5:dd:6a:6e:27:e9:59:23:
01:54:3b:67:26:ee:de:f0:ba:41:9b:53:8f:ef:39:
c5:85:c4:31:96:cb:70:04:40:3a:d0:62:c8:8b:92:
41:b5:ad:b3:3a:3a:0f:6a:3b:3a:42:f9:4c:8c:31:
57:40:92:6a:11:56:a0:aa:21:ee:f2:3b:0c:0f:30:
1d:ed:bb:f2:1a:22:0e:e5:43:7a:01:11:2f:55:0e:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:15:B5:77:DE:BE:33:6C:78:44:8E:8B:D5:2A:A7:FB:DC:D9:CF:C9
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:34:1e:f0:9a:d0:a4:fb:d2:7f:6c:e8:05:b2:c9:e5:93:a4:
4e:c6:1d:19:b4:89:a9:67:3b:87:5a:28:0c:bb:35:5d:ff:c2:
8b:86:ac:98:42:1b:b3:aa:7c:9b:4f:3f:c0:6b:9f:52:5e:7c:
de:19:79:76:af:a0:02:7a:54:58:ba:f3:23:ea:e5:79:5d:5f:
7f:28:14:71:73:8d:78:88:80:06:ca:68:f2:4b:ab:c3:7e:d4:
f4:ce:9c:68:c2:a2:c1:51:2a:2b:c5:33:86:04:36:27:7c:e6:
65:31:0b:14:87:bf:cb:6a:90:c8:9a:ed:8b:29:07:cb:15:43:
29:1d:50:6a:66:38:92:76:1d:51:1c:61:73:9c:fe:33:69:32:
db:c8:71:6a:5b:b8:19:3a:5c:db:88:8f:cb:7a:2f:ec:f3:60:
20:f9:39:1a:48:fa:0e:a5:f2:a5:06:4b:c0:4a:8a:59:da:39:
7e:48:14:80:4b:df:b9:2f:8b:50:3c:24:a9:74:d3:32:68:8f:
32:0d:fd:a3:c1:3f:d7:ec:0e:a9:93:cf:06:6f:ab:e6:57:6c:
40:e5:0a:50:53:fd:59:7b:34:66:f4:6d:9f:22:b3:22:ed:67:
73:82:c1:22:3c:7e:76:98:21:c7:a2:a7:58:49:1e:12:23:9f:
78:13:a8:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D0WYQ0PJb7ww9TPexPw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmYwNzQ3NGYxMmY3YTMzZTVjMjFiYzJmZmJiMDc1YTE3
YmQxM2YwHhcNMjUwNjI4MTUwMjAwWhcNMjUwNjI5MTUwMjAwWjAzMTEwLwYDVQQD
EygwNDE1YjU3N2RlYmUzMzZjNzg0NDhlOGJkNTJhYTdmYmRjZDljZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZkjdAsJ5MfAR1cXSxAEH9dnSe6v
Q54p3QvRn3GJW52GZA2i4KX9MkIYNCeZsbE0xMdxBwNZ0RZ0yhfDLyRA3+A5KCHp
yZzXyWOPtw8bb+RcntIM8xdjz4KPDZtfKDD7AQgQMlTed5siUN3wcp0Y64fQuubj
1Mjd0R4CvRksjljR4acEkgnXvvE09sdbtCOcgXGrYXiQX5WLDhaynENpZvmJv8CQ
UxiqGCsZ1d1qbifpWSMBVDtnJu7e8LpBm1OP7znFhcQxlstwBEA60GLIi5JBta2z
OjoPajs6QvlMjDFXQJJqEVagqiHu8jsMDzAd7bvyGiIO5UN6AREvVQ6lnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQVtXfevjNseESOi9Uqp/vc2c/JMB8GA1UdIwQY
MBaAFBtvB0dPEvejPlwhvC/7sHWhe9E/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82NTUwMDYtNjI3NS00ZDI0LWIzZGIt
MDJjNDdiOWVhNDlkLzEvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82NTUwMDYtNjI3NS00ZDI0LWIzZGItMDJjNDdiOWVhNDlk
LzEvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzQe8JrQ
pPvSf2zoBbLJ5ZOkTsYdGbSJqWc7h1ooDLs1Xf/Ci4asmEIbs6p8m08/wGufUl58
3hl5dq+gAnpUWLrzI+rleV1ffygUcXONeIiABspo8kurw37U9M6caMKiwVEqK8Uz
hgQ2J3zmZTELFIe/y2qQyJrtiykHyxVDKR1QamY4knYdURxhc5z+M2ky28hxalu4
GTpc24iPy3ov7PNgIPk5Gkj6DqXypQZLwEqKWdo5fkgUgEvfuS+LUDwkqXTTMmiP
Mg39o8E/1+wOqZPPBm+r5ldsQOUKUFP9WXs0ZvRtnyKzIu1nc4LBIjx+dpghx6Kn
WEkeEiOfeBOoEQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:31 2025 by rpki-client