Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier: hqcoaOb0v9Veo2jiBLC4nbc3beDASpubRNYxctmR6NM=
Subject key identifier: 60:E0:36:80:FC:60:EB:8B:11:06:29:2A:A9:0F:F5:BC:76:B1:54:36
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 0197CBDEDA557EC3C3FEB53DC94EA1CBE3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number: 0ABA
Signing time: Wed 02 Jul 2025 16:01:09 +0000
Manifest this update: Wed 02 Jul 2025 16:01:09 +0000
Manifest next update: Thu 03 Jul 2025 16:01:09 +0000
Files and hashes: 1: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (hash: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=)
2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: vCCNtjWGBSDkmE22Td0D1ypUmw2rUXqWlF7CYKbtjdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:da:55:7e:c3:c3:fe:b5:3d:c9:4e:a1:cb:e3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Jul 2 16:01:09 2025 GMT
Not After : Jul 3 16:01:09 2025 GMT
Subject: CN=60e03680fc60eb8b1106292aa90ff5bc76b15436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:1a:47:13:67:e5:40:da:a8:49:98:38:36:
fd:dc:95:38:3f:6e:45:7b:9a:da:a8:82:9e:b8:2c:
fd:e5:9f:f9:49:2e:49:3f:82:1c:c6:3f:ce:d9:ac:
25:a2:5c:d9:2a:04:ab:0c:24:f0:c1:0f:61:0f:f5:
29:ae:5a:67:68:ab:75:b8:f6:5a:7b:bf:e2:cb:91:
a0:9d:11:74:8e:65:e2:b1:dd:69:1a:09:34:bc:01:
44:bc:70:45:79:eb:cd:83:43:73:de:c5:39:99:cf:
85:9e:26:e7:27:45:97:c0:bc:f7:b7:09:4f:47:dc:
fa:44:dd:02:6f:b8:85:21:11:81:3d:5d:bf:ec:09:
07:67:18:67:b4:57:18:da:33:dc:61:8d:0e:47:cf:
a7:89:cb:69:87:8a:3a:f5:27:29:c6:ec:4d:86:88:
4b:c9:ff:c1:4d:64:53:fa:6e:0a:19:68:0d:91:7d:
f5:2c:45:23:0f:48:24:50:e3:4e:ed:ec:a0:cd:2c:
c4:ca:3f:09:de:a0:f3:53:1e:8b:1a:3d:e1:6a:80:
59:a9:02:d3:6b:a1:2f:f8:79:c8:f8:98:32:8d:b3:
01:be:84:78:a1:fb:0a:6b:65:8c:ed:ad:d1:59:59:
fa:3c:12:b2:23:ee:ff:ca:f7:80:61:73:74:b4:d7:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:36:80:FC:60:EB:8B:11:06:29:2A:A9:0F:F5:BC:76:B1:54:36
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c6:91:3c:c1:9a:d5:d9:ce:c3:3c:a0:e1:d8:50:4a:ba:be:
e9:c6:cb:e4:69:ff:40:3f:3d:83:21:3e:40:36:d6:72:d6:53:
70:f7:3b:fb:9a:26:f6:1a:9c:5a:9f:08:c4:d5:0e:83:93:3d:
b7:bb:c1:52:e6:da:fe:b3:63:ab:7f:00:8c:7d:77:6b:c8:34:
3d:b1:f9:d4:31:bf:ad:60:e1:12:77:50:d8:81:0f:8c:c8:ba:
3f:3f:b7:80:a4:2e:92:54:a7:09:1e:98:e1:c8:71:53:64:5b:
e6:3d:71:fb:ef:27:c5:9c:17:3e:9c:a0:5d:e7:be:a2:56:29:
24:ac:df:cd:06:8c:ce:9f:a6:18:53:88:c7:5e:52:7c:64:37:
19:f4:5c:8c:00:8f:98:c6:66:dc:17:2d:b6:6a:93:91:25:1b:
54:ce:8b:19:fc:1d:3c:d9:82:7d:f1:d9:78:a4:2d:9b:fd:06:
db:11:8f:45:12:95:90:67:78:03:22:70:a2:9d:0f:38:24:a3:
fe:18:c0:06:53:f0:db:83:75:c4:87:50:60:ea:2e:09:be:ef:
f4:ed:2c:29:47:c4:ae:9c:5f:51:8e:c5:5a:3d:5c:54:1a:de:
e2:2b:fc:b3:e6:75:4f:2d:b4:90:67:a1:20:12:b6:20:41:37:
52:06:21:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfL3tpVfsPD/rU9yU6hy+P8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzZjYTg2NTE5YjU2ZDRkMTg3M2FmNmUyNTdkZTdlOTdm
M2M4YWMwHhcNMjUwNzAyMTYwMTA5WhcNMjUwNzAzMTYwMTA5WjAzMTEwLwYDVQQD
Eyg2MGUwMzY4MGZjNjBlYjhiMTEwNjI5MmFhOTBmZjViYzc2YjE1NDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxucaRxNn5UDaqEmYODb93JU4P25F
e5raqIKeuCz95Z/5SS5JP4Icxj/O2awlolzZKgSrDCTwwQ9hD/UprlpnaKt1uPZa
e7/iy5GgnRF0jmXisd1pGgk0vAFEvHBFeevNg0Nz3sU5mc+FnibnJ0WXwLz3twlP
R9z6RN0Cb7iFIRGBPV2/7AkHZxhntFcY2jPcYY0OR8+nictph4o69ScpxuxNhohL
yf/BTWRT+m4KGWgNkX31LEUjD0gkUONO7eygzSzEyj8J3qDzUx6LGj3haoBZqQLT
a6Ev+HnI+JgyjbMBvoR4ofsKa2WM7a3RWVn6PBKyI+7/yveAYXN0tNfdDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDgNoD8YOuLEQYpKqkP9bx2sVQ2MB8GA1UdIwQY
MBaAFIPGyoZRm1bU0Yc69uJX3n6X88isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYt
Y2E4YWY0ZjUzNTZjLzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYtY2E4YWY0ZjUzNTZj
LzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsaRPMGa
1dnOwzyg4dhQSrq+6cbL5Gn/QD89gyE+QDbWctZTcPc7+5om9hqcWp8IxNUOg5M9
t7vBUuba/rNjq38AjH13a8g0PbH51DG/rWDhEndQ2IEPjMi6Pz+3gKQuklSnCR6Y
4chxU2Rb5j1x++8nxZwXPpygXee+olYpJKzfzQaMzp+mGFOIx15SfGQ3GfRcjACP
mMZm3BcttmqTkSUbVM6LGfwdPNmCffHZeKQtm/0G2xGPRRKVkGd4AyJwop0POCSj
/hjABlPw24N1xIdQYOouCb7v9O0sKUfErpxfUY7FWj1cVBre4iv8s+Z1Ty20kGeh
IBK2IEE3UgYh8g==
-----END CERTIFICATE-----
Generated at Wed Jul 2 21:39:37 2025 by rpki-client