Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
File: S-G7vlQAedK38nC5LOrzsqgW6Po.mft (raw, json)
Hash identifier: ipDpILAQiFSeOelKTnUAoNw90fcVcy7FMZGe6r41htA=
Subject key identifier: 8A:48:3A:3B:F7:37:51:E0:37:6B:CF:F9:72:BE:9F:75:F0:40:FC:08
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Certificate issuer: /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial: 0197C2DBB1971043E3EF9EC962035E384056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
Manifest number: 0BD7
Signing time: Mon 30 Jun 2025 22:01:07 +0000
Manifest this update: Mon 30 Jun 2025 22:01:07 +0000
Manifest next update: Tue 01 Jul 2025 22:01:07 +0000
Files and hashes: 1: 9hr0RxcMrr0PdZUeFGL7xFCCX6M.roa (hash: c+l8O2VvW8FmRNHxjGZmeZsqcY4y9njJ0XhuiOI82Ig=)
2: S-G7vlQAedK38nC5LOrzsqgW6Po.crl (hash: gXGycOkQlfbBdX90mOfIRsd1us496hyj48VQe2b0hxk=)
3: Wo69R9wkZdSu2YDZamu1cwfnvYY.roa (hash: M7Dkgn12kNJ0G/XHeqGYMOBhXYTKj/x9/fg1DkcC9rY=)
4: Yz-y591eNOrcrLSkt7bX4CY92Hg.roa (hash: oW3oUBZKt4uL8vuRz0uNo1Cj56FiYIaWKe1rVvQOsZY=)
5: sxzxRsYpVJ4N1lToM8Cy5xPqMsU.roa (hash: g5PD0lSPsiV5TiY4CJ8jfV/ckG/Bc1/ChU4XFCIeK1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:b1:97:10:43:e3:ef:9e:c9:62:03:5e:38:40:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Validity
Not Before: Jun 30 22:01:07 2025 GMT
Not After : Jul 1 22:01:07 2025 GMT
Subject: CN=8a483a3bf73751e0376bcff972be9f75f040fc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:8e:35:f2:c6:db:0c:bc:da:4c:76:e0:96:
54:8f:41:6e:ac:1f:83:ae:ea:37:dd:ee:e8:86:8f:
3b:2c:b8:e9:6c:fd:b3:9a:0e:b0:83:43:95:e2:4f:
a5:e6:50:3d:a0:21:16:64:ca:25:ed:e1:b3:f7:12:
08:c7:56:b5:7e:49:f0:28:a9:99:16:56:81:c4:9a:
bf:52:30:d7:98:78:2a:8b:22:39:bf:89:34:0f:bd:
07:59:15:3a:1d:8b:99:38:97:e1:12:47:b6:81:a6:
2f:3d:ff:3f:f3:1d:55:cc:b5:11:0c:e9:ad:d9:53:
16:b0:77:98:87:43:b4:7d:7a:62:78:cc:e6:9e:fc:
9d:d0:d9:e6:70:7e:ea:20:10:44:c2:f6:06:cf:ae:
48:70:89:10:4f:91:44:13:3d:76:41:e8:e1:f6:9e:
7c:b2:ad:b5:2e:d0:f2:78:e2:62:51:78:2b:1f:f6:
1c:56:93:42:95:10:a2:68:fc:de:3c:2e:2d:0f:cc:
bc:f5:a3:a1:ec:37:04:43:d5:df:3f:99:8b:c7:d5:
c0:4e:58:d9:47:c0:e6:e5:5e:22:be:ca:76:73:8f:
11:3b:31:66:0c:3c:72:25:07:d8:ca:3e:a0:4a:83:
4b:ea:ba:92:71:da:7b:ac:2d:11:7e:bb:4a:8d:3f:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:48:3A:3B:F7:37:51:E0:37:6B:CF:F9:72:BE:9F:75:F0:40:FC:08
X509v3 Authority Key Identifier:
keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a3:00:75:17:11:9f:2e:85:22:ef:0f:ca:89:eb:5a:81:dd:
0c:d8:40:0e:1e:01:cd:8f:27:84:fd:96:1f:b6:bc:84:16:00:
5c:e2:4b:6d:6c:c8:60:d4:7e:04:20:d4:c2:5d:f5:35:d8:d8:
d6:6e:72:90:23:90:7b:41:53:c9:a4:6a:aa:9f:e0:e5:b0:e1:
55:00:47:20:bf:f1:e0:79:40:54:cf:c8:bc:ed:85:a0:8b:4b:
ba:38:dc:d5:a3:0e:89:64:28:ca:d7:54:a4:b7:7a:ce:08:55:
55:eb:cb:71:ea:96:36:fd:e5:72:37:52:b1:fc:cc:c9:ec:63:
f6:6c:37:16:65:fa:93:9e:e1:39:17:10:25:0d:10:e3:e6:1d:
30:8f:73:80:d5:25:22:e2:6a:5a:f3:fe:0b:26:7e:ad:cc:ef:
e4:b9:6d:68:cc:8c:1c:2a:c3:49:9f:1c:97:95:8a:9c:05:a5:
c0:6d:16:a7:a8:d4:8d:85:74:1f:4d:e2:c2:e2:0e:2a:2d:98:
cb:ca:53:28:81:27:8b:74:ce:d1:bf:2d:be:e2:2e:6b:a8:14:
dd:7e:1d:d9:fe:c6:41:6d:33:ab:77:38:0f:6f:e4:a6:02:8b:
f5:da:a1:98:35:3e:7f:6b:0d:c8:69:da:94:80:2c:11:45:70:
e7:7e:17:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfC27GXEEPj757JYgNeOEBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTFiYmJlNTQwMDc5ZDJiN2YyNzBiOTJjZWFmM2IyYTgx
NmU4ZmEwHhcNMjUwNjMwMjIwMTA3WhcNMjUwNzAxMjIwMTA3WjAzMTEwLwYDVQQD
Eyg4YTQ4M2EzYmY3Mzc1MWUwMzc2YmNmZjk3MmJlOWY3NWYwNDBmYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorOONfLG2wy82kx24JZUj0FurB+D
ruo33e7oho87LLjpbP2zmg6wg0OV4k+l5lA9oCEWZMol7eGz9xIIx1a1fknwKKmZ
FlaBxJq/UjDXmHgqiyI5v4k0D70HWRU6HYuZOJfhEke2gaYvPf8/8x1VzLURDOmt
2VMWsHeYh0O0fXpieMzmnvyd0NnmcH7qIBBEwvYGz65IcIkQT5FEEz12Qejh9p58
sq21LtDyeOJiUXgrH/YcVpNClRCiaPzePC4tD8y89aOh7DcEQ9XfP5mLx9XATljZ
R8Dm5V4ivsp2c48ROzFmDDxyJQfYyj6gSoNL6rqScdp7rC0RfrtKjT+N/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpIOjv3N1HgN2vP+XK+n3XwQPwIMB8GA1UdIwQY
MBaAFEvhu75UAHnSt/JwuSzq87KoFuj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1HN3ZsUUFlZEszOG5DNUxPcnpzcWdXNlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83YzdiZjYtMmJkZi00YzdkLTlhZWMt
MWVmMWNlZTY2MWNhLzEvUy1HN3ZsUUFlZEszOG5DNUxPcnpzcWdXNlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83YzdiZjYtMmJkZi00YzdkLTlhZWMtMWVmMWNlZTY2MWNh
LzEvUy1HN3ZsUUFlZEszOG5DNUxPcnpzcWdXNlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaMAdRcR
ny6FIu8PyonrWoHdDNhADh4BzY8nhP2WH7a8hBYAXOJLbWzIYNR+BCDUwl31NdjY
1m5ykCOQe0FTyaRqqp/g5bDhVQBHIL/x4HlAVM/IvO2FoItLujjc1aMOiWQoytdU
pLd6zghVVevLceqWNv3lcjdSsfzMyexj9mw3FmX6k57hORcQJQ0Q4+YdMI9zgNUl
IuJqWvP+CyZ+rczv5LltaMyMHCrDSZ8cl5WKnAWlwG0Wp6jUjYV0H03iwuIOKi2Y
y8pTKIEni3TO0b8tvuIua6gU3X4d2f7GQW0zq3c4D2/kpgKL9dqhmDU+f2sNyGna
lIAsEUVw534XSA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 07:00:02 2025 by rpki-client