Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
File: g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json)
Hash identifier: toYYXz9zLebh9VZ9DaFrezlrdsbRtLiaaYdmdqX+WRo=
Subject key identifier: 9C:CC:7F:04:C9:0A:7E:B5:89:14:14:21:FD:51:45:90:EB:AF:B5:49
Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Certificate serial: 0197B9D88104743CC04FA1C46EE8E2AD2FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
Manifest number: 05C7
Signing time: Sun 29 Jun 2025 04:01:03 +0000
Manifest this update: Sun 29 Jun 2025 04:01:03 +0000
Manifest next update: Mon 30 Jun 2025 04:01:03 +0000
Files and hashes: 1: c8jr9RK1jYIIU9J_37XkvdpDKPQ.roa (hash: FypzDCTYnJOnd+60Jv/bTV7/TP6pt9nWegIKGFpscqo=)
2: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: JaS0RaLO7YnYdZTVMxDA5B9lG0xQ+z+UTYJwazFPzko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:81:04:74:3c:c0:4f:a1:c4:6e:e8:e2:ad:2f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Validity
Not Before: Jun 29 04:01:03 2025 GMT
Not After : Jun 30 04:01:03 2025 GMT
Subject: CN=9ccc7f04c90a7eb589141421fd514590ebafb549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:a1:81:73:d9:65:e4:75:d4:7e:62:f5:8e:
55:f4:04:88:53:e3:72:cd:ca:b4:5e:f0:cc:2f:e2:
7e:c6:46:06:dd:22:dc:bc:43:cf:8b:35:0b:cf:7b:
1a:03:6d:f3:1c:db:57:8c:5d:50:79:11:d8:39:80:
32:44:24:55:6a:20:8c:74:26:44:a8:d4:72:4e:43:
17:3c:3b:0b:ee:60:7c:df:40:fe:4c:73:01:aa:f2:
6f:18:36:34:5c:24:f5:fe:ae:12:c5:dc:12:72:bd:
c6:17:50:17:1f:50:65:c4:1c:c7:3f:4e:c0:56:4a:
82:7e:fc:c7:70:e0:ba:a3:93:46:f5:50:8e:d3:60:
7d:df:f8:e9:d4:a1:4b:3f:95:fd:71:e1:bc:9a:0a:
0b:a7:02:23:36:0d:95:ca:f6:b0:06:55:b1:6f:34:
04:57:a4:e1:9d:07:cd:58:c0:a1:0f:b2:1c:b1:d5:
eb:4e:8b:f0:80:eb:34:86:18:99:20:37:c1:d9:7a:
1d:12:d1:ee:10:56:3c:92:94:ca:3a:1f:90:d3:37:
b4:14:10:1f:48:35:2c:51:5f:95:1f:ff:24:d4:82:
b3:43:e5:6b:2b:88:6b:6e:ba:af:c1:f3:ab:c9:e2:
43:51:c2:f4:16:08:2b:d9:18:a1:08:11:dc:60:76:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CC:7F:04:C9:0A:7E:B5:89:14:14:21:FD:51:45:90:EB:AF:B5:49
X509v3 Authority Key Identifier:
keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:50:ae:b9:f3:46:0a:e4:04:b4:69:6b:e9:41:49:f9:bf:13:
87:b6:31:66:f7:16:c8:b6:a0:a9:ff:60:fc:81:9b:23:65:9a:
58:b0:7d:49:a7:0a:e3:19:6b:d9:52:09:5a:3a:37:e0:1c:c1:
68:cd:41:77:ab:33:24:c0:f7:41:8b:81:33:a7:6b:37:65:7b:
53:d0:a9:44:91:a9:b0:2f:ca:c2:55:dd:b1:85:91:5d:31:fe:
9f:b7:de:fe:1e:e7:35:38:16:46:96:0c:8d:be:24:02:c6:a1:
b6:46:78:f7:9a:17:29:0d:18:d8:5d:d7:79:2f:d3:2c:01:e1:
93:0a:66:6e:5b:88:63:b9:93:34:be:69:50:6a:de:4f:e2:56:
b4:97:3b:e3:6c:da:f5:8f:01:26:f8:11:39:ad:6b:7f:ee:ba:
23:1b:c2:ad:92:7e:20:3b:74:50:89:85:12:cc:dc:1d:3c:0f:
f1:49:85:27:47:54:6c:42:11:e7:18:d7:ff:11:16:0a:8f:8c:
25:84:94:80:a5:32:02:10:1c:e6:bb:27:e0:e1:c3:01:25:48:
2e:b0:f5:b7:57:22:95:0d:55:c0:99:11:ad:a1:6e:e3:24:af:
39:8a:54:19:23:34:b6:84:ef:09:99:93:03:f9:c2:c2:80:45:
92:c5:d5:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52IEEdDzAT6HEbujirS++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzODg1ZTM4YWM3N2NhYzA0NDgyOWI1M2NiM2IyNWFiZTYx
ZTlmNjQwHhcNMjUwNjI5MDQwMTAzWhcNMjUwNjMwMDQwMTAzWjAzMTEwLwYDVQQD
Eyg5Y2NjN2YwNGM5MGE3ZWI1ODkxNDE0MjFmZDUxNDU5MGViYWZiNTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1GhgXPZZeR11H5i9Y5V9ASIU+Ny
zcq0XvDML+J+xkYG3SLcvEPPizULz3saA23zHNtXjF1QeRHYOYAyRCRVaiCMdCZE
qNRyTkMXPDsL7mB830D+THMBqvJvGDY0XCT1/q4SxdwScr3GF1AXH1BlxBzHP07A
VkqCfvzHcOC6o5NG9VCO02B93/jp1KFLP5X9ceG8mgoLpwIjNg2VyvawBlWxbzQE
V6ThnQfNWMChD7IcsdXrTovwgOs0hhiZIDfB2XodEtHuEFY8kpTKOh+Q0ze0FBAf
SDUsUV+VH/8k1IKzQ+VrK4hrbrqvwfOryeJDUcL0Fggr2RihCBHcYHZrLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzMfwTJCn61iRQUIf1RRZDrr7VJMB8GA1UdIwQY
MBaAFIOIXjisd8rARIKbU8s7JavmHp9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2Qt
YTJmNTllYWU4NmQwLzEvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2QtYTJmNTllYWU4NmQw
LzEvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1CuufNG
CuQEtGlr6UFJ+b8Th7YxZvcWyLagqf9g/IGbI2WaWLB9SacK4xlr2VIJWjo34BzB
aM1Bd6szJMD3QYuBM6drN2V7U9CpRJGpsC/KwlXdsYWRXTH+n7fe/h7nNTgWRpYM
jb4kAsahtkZ495oXKQ0Y2F3XeS/TLAHhkwpmbluIY7mTNL5pUGreT+JWtJc742za
9Y8BJvgROa1rf+66IxvCrZJ+IDt0UImFEszcHTwP8UmFJ0dUbEIR5xjX/xEWCo+M
JYSUgKUyAhAc5rsn4OHDASVILrD1t1cilQ1VwJkRraFu4ySvOYpUGSM0toTvCZmT
A/nCwoBFksXV/Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:15:26 2025 by rpki-client