Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: d1iiO1UFhqCYNPWYWFs0F1gLGl/bALmlY3pzLAKD+6w=
Subject key identifier: 15:1E:74:E7:D4:E9:E9:39:72:3A:1F:35:56:41:DE:3A:FA:E5:AA:CA
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 0197B6A205AB2B8B8AD946A5BF8DB9E006DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 0710
Signing time: Sat 28 Jun 2025 13:02:40 +0000
Manifest this update: Sat 28 Jun 2025 13:02:40 +0000
Manifest next update: Sun 29 Jun 2025 13:02:40 +0000
Files and hashes: 1: PWVVCu9dDfBo5aJQ6tlPGGlV6B0.roa (hash: 7Oj98eAXsnZMzEk2r6cNh4fSjsZETDRb2EQ95CICh04=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: j3h+l/iRVKjt38OGF51rEpVpfjiWnGLbW2L4vLPl53k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:05:ab:2b:8b:8a:d9:46:a5:bf:8d:b9:e0:06:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Jun 28 13:02:40 2025 GMT
Not After : Jun 29 13:02:40 2025 GMT
Subject: CN=151e74e7d4e9e939723a1f355641de3afae5aaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:4c:fd:ea:d1:6e:0c:ff:66:34:af:8b:27:
80:21:6c:5e:59:be:0a:59:4b:3b:18:06:6b:8a:aa:
50:dc:dd:14:03:7e:ed:67:b0:a6:f2:c7:45:22:38:
59:a8:dd:4a:61:6f:e9:ae:f7:4f:8c:bf:25:d8:13:
bb:5a:ef:a6:62:b5:2d:f9:bf:95:25:35:2a:5d:c1:
71:a4:ee:12:30:e8:99:26:35:f3:dd:1a:5f:af:2d:
54:5e:2f:0a:41:78:3f:5f:16:fe:3d:6b:1a:26:6f:
64:02:09:5b:d6:51:bd:36:71:6f:b8:8c:bf:0c:ae:
ad:31:72:72:db:0a:1c:00:6b:9e:37:61:2a:2b:9b:
ab:a4:1c:9e:3e:2f:bf:42:83:0d:08:18:9a:b6:96:
b6:21:65:28:f4:2e:ab:54:1c:ad:44:75:00:11:1e:
1c:0e:51:fd:79:32:03:3d:bd:b0:c3:72:7b:6f:fb:
87:e4:88:37:0d:22:ef:46:54:5a:e0:a1:d4:7b:a4:
86:64:51:a3:11:0e:b1:21:bd:d0:1d:da:3f:d9:6e:
e0:d3:42:2b:49:f1:2d:a7:02:97:25:d2:8e:83:0e:
b4:2a:23:45:64:b5:0c:45:0e:3d:01:ac:d5:2d:ed:
c7:6a:60:64:83:a4:2d:2d:f8:39:bf:56:f8:4d:4a:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1E:74:E7:D4:E9:E9:39:72:3A:1F:35:56:41:DE:3A:FA:E5:AA:CA
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a0:b3:6e:6a:00:25:8e:93:e2:f0:eb:47:f7:a3:59:03:1b:
89:92:2b:06:a7:fc:80:89:c0:59:e5:18:2f:2a:69:3f:19:72:
fd:eb:ed:2d:37:2e:3b:2c:49:15:f7:9d:5e:b7:61:18:8c:96:
de:a0:56:23:0e:35:ad:9d:ad:09:5f:5f:28:6d:99:47:53:e4:
60:34:fc:cc:b1:7f:e7:b6:c8:68:c5:8d:19:d3:5f:7b:c5:cd:
00:fa:47:16:9c:ec:89:04:2c:10:00:24:0f:0f:3b:b5:19:88:
bd:52:2f:83:de:96:08:17:9a:36:26:be:a4:a1:59:58:d2:4b:
95:e6:34:8c:45:0f:d4:de:1f:5d:e6:3e:49:79:f9:e4:c2:81:
aa:60:7c:93:45:63:2f:1b:33:e4:5f:55:9c:4b:6a:6a:e7:30:
3e:c6:cf:c3:18:0f:d0:d6:61:ff:92:2b:8b:f4:e0:5c:ec:fd:
55:37:8f:d1:87:60:b5:d1:76:14:06:7e:e8:f7:5f:b9:ce:79:
f1:03:f0:03:02:e8:fd:0a:78:ec:3d:d9:da:5c:c7:ec:3e:83:
5e:ac:29:59:6e:0c:5d:5f:94:00:a8:15:cd:ec:8d:7d:60:c2:
08:cc:26:e5:e7:98:4f:5a:5a:76:9c:a6:2f:0e:7c:84:3e:36:
bd:d7:25:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ogWrK4uK2Ualv4254AbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYWU3MGRmZDQzMDUyNzM2ZmU4NWYwMGQyOTg0Y2UzNzZi
NzZlYjMwHhcNMjUwNjI4MTMwMjQwWhcNMjUwNjI5MTMwMjQwWjAzMTEwLwYDVQQD
EygxNTFlNzRlN2Q0ZTllOTM5NzIzYTFmMzU1NjQxZGUzYWZhZTVhYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHhM/erRbgz/ZjSviyeAIWxeWb4K
WUs7GAZriqpQ3N0UA37tZ7Cm8sdFIjhZqN1KYW/prvdPjL8l2BO7Wu+mYrUt+b+V
JTUqXcFxpO4SMOiZJjXz3Rpfry1UXi8KQXg/Xxb+PWsaJm9kAglb1lG9NnFvuIy/
DK6tMXJy2wocAGueN2EqK5urpByePi+/QoMNCBiatpa2IWUo9C6rVBytRHUAER4c
DlH9eTIDPb2ww3J7b/uH5Ig3DSLvRlRa4KHUe6SGZFGjEQ6xIb3QHdo/2W7g00Ir
SfEtpwKXJdKOgw60KiNFZLUMRQ49AazVLe3HamBkg6QtLfg5v1b4TUp2nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUedOfU6ek5cjofNVZB3jr65arKMB8GA1UdIwQY
MBaAFIGucN/UMFJzb+hfANKYTON2t26zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgt
YmI1ODkzYTZhYzkxLzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgtYmI1ODkzYTZhYzkx
LzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6CzbmoA
JY6T4vDrR/ejWQMbiZIrBqf8gInAWeUYLyppPxly/evtLTcuOyxJFfedXrdhGIyW
3qBWIw41rZ2tCV9fKG2ZR1PkYDT8zLF/57bIaMWNGdNfe8XNAPpHFpzsiQQsEAAk
Dw87tRmIvVIvg96WCBeaNia+pKFZWNJLleY0jEUP1N4fXeY+SXn55MKBqmB8k0Vj
Lxsz5F9VnEtqaucwPsbPwxgP0NZh/5Iri/TgXOz9VTeP0YdgtdF2FAZ+6Pdfuc55
8QPwAwLo/Qp47D3Z2lzH7D6DXqwpWW4MXV+UAKgVzeyNfWDCCMwm5eeYT1padpym
Lw58hD42vdcloQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:37 2025 by rpki-client