Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
File: GtXRdMu0aq-GVVuA4XczMbhwtWg.mft (raw, json)
Hash identifier: VpDJteQ01AwY79z/giTf1AE4bTccgtVynUhwD7U5J78=
Subject key identifier: 29:29:41:9F:2C:97:D2:91:27:5A:77:1D:AA:D2:B0:B8:9A:30:C9:60
Authority key identifier: 1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
Certificate issuer: /CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Certificate serial: 0197B77CCA9ED0FB52E80723BAD71C8B281B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
Manifest number: 0470
Signing time: Sat 28 Jun 2025 17:01:38 +0000
Manifest this update: Sat 28 Jun 2025 17:01:38 +0000
Manifest next update: Sun 29 Jun 2025 17:01:38 +0000
Files and hashes: 1: 9dcg4kop7SgWnE6_RqxuTw6E4S0.roa (hash: 0Gyw3aRec61kP8ssDusbhrk3Tfc+FxYebdPIc+4lPH0=)
2: BCx9uHR447EqnUAT6LDXDmc-U64.roa (hash: uKePdL/bKCVHy8Q2jDMnzQQFWnYFjJHWmlJeT5g86S8=)
3: GtXRdMu0aq-GVVuA4XczMbhwtWg.crl (hash: wC2gOLtFPqqUU+25VZJGwdsvUjB/zQHAe1Fd4TOghs0=)
4: XUhnIv1VyzEH-O2IlJPEOJmVv7s.roa (hash: ia3ApPA9xBWk3etwJmYP71gyRoYwwrPnhqVB0ZSnJZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ca:9e:d0:fb:52:e8:07:23:ba:d7:1c:8b:28:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Validity
Not Before: Jun 28 17:01:38 2025 GMT
Not After : Jun 29 17:01:38 2025 GMT
Subject: CN=2929419f2c97d291275a771daad2b0b89a30c960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:e8:d3:0a:2c:e3:fe:af:5c:d1:3a:67:d6:
90:e1:62:c4:42:3f:ab:f9:1e:49:0b:80:89:10:93:
9f:f9:16:e8:70:e4:dd:a3:47:90:48:5d:49:c2:ae:
0b:26:cb:28:58:80:6b:ab:3a:ea:b9:3b:69:2c:c0:
2d:37:30:fd:f8:c2:aa:be:da:03:66:50:f7:1b:d1:
bf:2e:79:2b:7b:f5:e9:84:2e:bb:3d:f5:c5:14:6c:
02:3d:ef:f0:81:67:35:8a:45:08:dd:51:2c:16:c5:
d1:e2:43:57:33:c1:aa:02:b0:35:cb:c6:fc:b2:9a:
e2:e8:c9:6d:05:64:a9:65:03:c8:8b:14:f0:c1:be:
07:01:d9:2d:fb:31:04:08:81:6d:31:25:80:fe:11:
74:2e:a0:e4:73:68:f3:a5:c3:32:c7:f5:e7:60:f3:
a5:ff:44:82:d4:14:a1:02:aa:3d:f6:36:da:3f:43:
fb:50:7a:0b:5c:45:01:e5:35:ab:5d:73:94:8d:c2:
ef:8e:d8:f2:22:a1:3d:f8:47:30:50:14:a4:1e:91:
71:4a:fa:a1:d9:63:63:ca:e4:dd:e3:1a:64:2c:04:
9a:42:4c:5b:4a:fe:87:bd:ae:f1:b6:a0:07:15:5a:
9b:14:62:4e:c4:1a:1e:76:54:ec:ab:fe:ca:37:fe:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:41:9F:2C:97:D2:91:27:5A:77:1D:AA:D2:B0:B8:9A:30:C9:60
X509v3 Authority Key Identifier:
keyid:1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7a:18:f6:1c:95:65:9c:8d:a7:9d:a0:35:89:62:ff:fe:8e:
7f:bc:27:a7:4e:1f:0f:f2:03:ee:bc:47:36:8d:6b:37:69:6d:
e6:75:aa:a1:a7:ff:e5:2b:83:8d:d8:97:c1:0b:db:86:b7:73:
fe:6a:53:b4:98:c0:cc:23:85:8c:c0:f8:d8:6a:6a:b6:35:79:
27:29:36:96:ba:9e:91:f4:3a:a6:8b:b3:24:5c:d9:31:91:c5:
9a:99:4d:bd:d1:98:07:40:5f:97:15:f0:b3:94:22:4e:1e:5a:
30:df:29:30:91:a0:44:7f:4e:8d:ae:5c:48:b7:e0:1c:bb:10:
c5:cb:c7:7f:39:57:db:f8:87:bf:40:1d:22:bd:26:ee:66:21:
b7:7e:69:f6:a6:2f:bf:1f:74:b2:5e:b0:6b:f3:43:99:71:60:
eb:61:5a:16:c5:fa:83:40:ec:aa:a3:f5:90:e4:9e:e3:d9:35:
cf:7b:b1:91:fc:a8:c6:36:9d:aa:02:36:76:06:b9:de:45:23:
96:df:53:cf:63:38:c9:ca:a9:fe:50:58:f7:c0:b0:bb:57:3d:
7d:c3:cf:16:a5:67:b7:99:3e:27:4c:6c:52:cb:de:09:2e:50:
d3:16:26:e5:9d:d6:93:b1:ee:72:4e:cf:31:cb:cc:f9:79:e9:
b9:bd:67:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fMqe0PtS6AcjutcciygbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZDVkMTc0Y2JiNDZhYWY4NjU1NWI4MGUxNzczMzMxYjg3
MGI1NjgwHhcNMjUwNjI4MTcwMTM4WhcNMjUwNjI5MTcwMTM4WjAzMTEwLwYDVQQD
EygyOTI5NDE5ZjJjOTdkMjkxMjc1YTc3MWRhYWQyYjBiODlhMzBjOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPno0wos4/6vXNE6Z9aQ4WLEQj+r
+R5JC4CJEJOf+RbocOTdo0eQSF1Jwq4LJssoWIBrqzrquTtpLMAtNzD9+MKqvtoD
ZlD3G9G/Lnkre/XphC67PfXFFGwCPe/wgWc1ikUI3VEsFsXR4kNXM8GqArA1y8b8
spri6MltBWSpZQPIixTwwb4HAdkt+zEECIFtMSWA/hF0LqDkc2jzpcMyx/XnYPOl
/0SC1BShAqo99jbaP0P7UHoLXEUB5TWrXXOUjcLvjtjyIqE9+EcwUBSkHpFxSvqh
2WNjyuTd4xpkLASaQkxbSv6Hva7xtqAHFVqbFGJOxBoedlTsq/7KN/6rxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkpQZ8sl9KRJ1p3HarSsLiaMMlgMB8GA1UdIwQY
MBaAFBrV0XTLtGqvhlVbgOF3MzG4cLVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RYUmRNdTBhcS1HVlZ1QTRYY3pNYmh3dFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNmI5MDYtOTE1MC00NDNkLWJhMzAt
NzM5YzE5OGM1MTNmLzEvR3RYUmRNdTBhcS1HVlZ1QTRYY3pNYmh3dFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jNmI5MDYtOTE1MC00NDNkLWJhMzAtNzM5YzE5OGM1MTNm
LzEvR3RYUmRNdTBhcS1HVlZ1QTRYY3pNYmh3dFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3oY9hyV
ZZyNp52gNYli//6Of7wnp04fD/ID7rxHNo1rN2lt5nWqoaf/5SuDjdiXwQvbhrdz
/mpTtJjAzCOFjMD42GpqtjV5Jyk2lrqekfQ6pouzJFzZMZHFmplNvdGYB0BflxXw
s5QiTh5aMN8pMJGgRH9Oja5cSLfgHLsQxcvHfzlX2/iHv0AdIr0m7mYht35p9qYv
vx90sl6wa/NDmXFg62FaFsX6g0DsqqP1kOSe49k1z3uxkfyoxjadqgI2dga53kUj
lt9Tz2M4ycqp/lBY98Cwu1c9fcPPFqVnt5k+J0xsUsveCS5Q0xYm5Z3Wk7Huck7P
McvM+Xnpub1nVw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:12 2025 by rpki-client