Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: Amk6EdRe9ZPgOgRMAdK1oKuPafA7F4rr29svWT05PH0=
Subject key identifier: 9C:AF:A4:9C:86:0B:E5:17:F7:AB:FC:CC:08:7F:EA:EA:CD:F4:68:D1
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 0197B7EAA36284A42412F243F73C0E7AFFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 1479
Signing time: Sat 28 Jun 2025 19:01:37 +0000
Manifest this update: Sat 28 Jun 2025 19:01:37 +0000
Manifest next update: Sun 29 Jun 2025 19:01:37 +0000
Files and hashes: 1: RZXIs4f4losh_NRNWSiINml7guQ.roa (hash: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: 4T+XEDcd/MKnJXjgMU0aYx8RDB2hy4u5OfvYSojd4uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a3:62:84:a4:24:12:f2:43:f7:3c:0e:7a:ff:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Jun 28 19:01:37 2025 GMT
Not After : Jun 29 19:01:37 2025 GMT
Subject: CN=9cafa49c860be517f7abfccc087feaeacdf468d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:18:12:3f:ea:73:38:ad:34:0f:ac:95:86:a8:
71:a3:4a:9e:2b:90:d3:bf:b9:da:0f:29:78:05:7b:
e9:ed:70:a3:4f:69:a8:13:c5:a2:2a:70:0e:ad:cb:
43:cf:e5:d3:eb:29:82:b8:e7:5c:0b:11:73:d0:6a:
01:fc:48:41:ec:29:3b:10:38:fe:1c:27:e6:11:aa:
36:86:75:7f:25:b9:90:76:d7:95:81:bb:87:e3:3b:
58:a0:66:6d:49:a7:f7:c7:3a:e3:87:0b:7f:25:fb:
12:fa:35:b7:cd:ca:0e:dd:e9:f4:7b:d9:10:f3:c9:
64:96:af:b1:f3:8b:7f:f8:47:c7:f5:5f:0d:a8:16:
68:1f:c9:8c:c2:7d:bf:42:ae:74:9f:3c:f1:a1:38:
bb:57:d7:33:46:3b:37:33:9e:50:e5:2d:e2:d7:d5:
85:51:ef:91:66:5d:c7:a7:b1:b1:99:1b:a5:bf:15:
a6:02:0c:0a:a4:ad:5e:0b:c1:f2:e0:0d:7e:07:9d:
03:27:e7:87:6e:48:29:40:02:52:57:5c:b9:92:e2:
f3:48:09:71:bc:db:a8:76:d4:a7:71:cd:46:7f:34:
7e:b1:26:99:96:56:5c:80:c9:4a:26:ff:87:3f:fc:
9c:2b:28:e5:55:4f:4c:83:c3:14:1e:26:6f:71:80:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AF:A4:9C:86:0B:E5:17:F7:AB:FC:CC:08:7F:EA:EA:CD:F4:68:D1
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ec:d1:14:ed:8d:80:a3:79:ed:b3:49:6a:2a:b1:ee:d4:83:
7b:d4:31:d7:c5:bf:9d:9b:c7:85:9d:b8:0c:8a:54:81:f3:ba:
79:65:9b:33:60:ad:e2:94:92:33:18:fe:b3:45:22:ad:3e:37:
54:23:19:ce:69:7d:42:32:1b:3a:8a:01:99:a7:36:d0:4a:60:
33:ee:48:d4:07:b7:eb:bb:03:26:03:5e:2e:88:9f:17:4a:c0:
2c:4a:8b:e9:54:e0:a2:17:a3:37:95:9c:41:e0:16:f6:93:da:
e1:db:9f:50:8f:46:39:8d:49:79:27:36:18:10:44:97:4d:4e:
46:1a:75:66:5d:40:9e:d8:f2:68:17:86:b7:62:7b:9b:e3:1d:
82:b6:f2:bd:db:c2:b8:06:94:8e:d7:ef:dd:db:ab:3e:c5:b0:
e1:fb:c8:17:72:6e:c1:6d:39:ed:bd:25:94:97:dd:02:00:36:
b9:e0:14:ea:8f:db:ff:42:93:e3:0f:65:69:b2:c0:e8:36:c4:
14:26:89:b8:85:a8:36:4e:e5:6b:28:c1:0b:ce:34:06:33:d1:
6e:88:86:1b:b4:e1:52:97:c3:74:23:d6:67:1a:b8:91:86:b6:
1e:d3:22:c7:2d:4e:66:3c:8f:b5:90:f5:0e:01:a3:93:97:76:
19:af:ab:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36qNihKQkEvJD9zwOev/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTkwMWI2NGZlMjI2NTZiOGYyZGIyNjBiNDUzZjI3OTM1
MmI3ZDAwHhcNMjUwNjI4MTkwMTM3WhcNMjUwNjI5MTkwMTM3WjAzMTEwLwYDVQQD
Eyg5Y2FmYTQ5Yzg2MGJlNTE3ZjdhYmZjY2MwODdmZWFlYWNkZjQ2OGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBgSP+pzOK00D6yVhqhxo0qeK5DT
v7naDyl4BXvp7XCjT2moE8WiKnAOrctDz+XT6ymCuOdcCxFz0GoB/EhB7Ck7EDj+
HCfmEao2hnV/JbmQdteVgbuH4ztYoGZtSaf3xzrjhwt/JfsS+jW3zcoO3en0e9kQ
88lklq+x84t/+EfH9V8NqBZoH8mMwn2/Qq50nzzxoTi7V9czRjs3M55Q5S3i19WF
Ue+RZl3Hp7GxmRulvxWmAgwKpK1eC8Hy4A1+B50DJ+eHbkgpQAJSV1y5kuLzSAlx
vNuodtSncc1GfzR+sSaZllZcgMlKJv+HP/ycKyjlVU9Mg8MUHiZvcYAH2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyvpJyGC+UX96v8zAh/6urN9GjRMB8GA1UdIwQY
MBaAFIGZAbZP4iZWuPLbJgtFPyeTUrfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMt
NjNkZDI3NTMwMGJjLzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMtNjNkZDI3NTMwMGJj
LzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuzRFO2N
gKN57bNJaiqx7tSDe9Qx18W/nZvHhZ24DIpUgfO6eWWbM2Ct4pSSMxj+s0UirT43
VCMZzml9QjIbOooBmac20EpgM+5I1Ae367sDJgNeLoifF0rALEqL6VTgohejN5Wc
QeAW9pPa4dufUI9GOY1JeSc2GBBEl01ORhp1Zl1AntjyaBeGt2J7m+MdgrbyvdvC
uAaUjtfv3durPsWw4fvIF3JuwW057b0llJfdAgA2ueAU6o/b/0KT4w9labLA6DbE
FCaJuIWoNk7layjBC840BjPRboiGG7ThUpfDdCPWZxq4kYa2HtMixy1OZjyPtZD1
DgGjk5d2Ga+raQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:44 2025 by rpki-client