Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: 2UEGheS7Hm31aonMbWptmNWSLlGKfZbk9EkGHpNY4rg=
Subject key identifier: BF:F9:12:D8:3E:C5:48:BD:B1:6F:8F:A6:C7:99:7B:87:91:87:EB:F6
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 0197CBDEC18F25B8E443093CD29468BF3853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 16:01:02 +0000
Manifest this update: Wed 02 Jul 2025 16:01:02 +0000
Manifest next update: Thu 03 Jul 2025 16:01:02 +0000
Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: kVCNahDZAjlEL/I/89L5sW7Bd5FQxsf7GWC0+h5i+Gs=)
3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:c1:8f:25:b8:e4:43:09:3c:d2:94:68:bf:38:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Jul 2 16:01:02 2025 GMT
Not After : Jul 3 16:01:02 2025 GMT
Subject: CN=bff912d83ec548bdb16f8fa6c7997b879187ebf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:d1:98:2b:0c:34:2a:28:fc:b5:64:88:5f:
b2:47:eb:76:10:09:ce:e9:97:bc:3e:d0:ce:80:56:
02:65:40:6b:26:0a:24:54:b9:0b:3f:20:ef:d8:fd:
d0:49:e8:62:d7:4b:f8:1c:9a:89:de:d9:d6:c4:c7:
a0:fc:ab:03:86:b0:45:6f:ce:d1:3c:a5:4a:8c:fd:
ac:80:2d:2d:ff:e9:16:f6:5d:c3:8f:70:f0:fd:26:
2c:f8:5b:aa:14:2d:58:df:c7:80:f8:9a:e8:4e:b1:
66:88:ff:83:ae:fb:bd:6d:f1:8c:47:e7:eb:f5:c9:
e3:b1:da:c8:6e:b3:08:1c:63:83:80:be:fb:60:48:
04:94:04:d9:2a:07:aa:5b:da:a1:18:26:1f:27:51:
8f:d8:35:cb:68:f2:5e:95:ab:af:f0:10:1f:62:db:
11:7e:f3:a2:44:d6:ea:8c:5d:89:7f:c7:9f:c4:95:
62:59:7f:f5:c3:6d:81:ec:e4:3d:56:74:df:dd:5d:
61:32:dd:1c:65:ab:84:92:12:2d:3d:7f:39:d2:62:
70:d8:41:b8:98:d3:0c:47:3c:56:c5:ce:17:45:92:
7f:a8:2c:86:6f:0b:1b:33:98:7b:1a:5d:91:a8:7d:
51:4e:4a:a0:1e:c1:28:9e:5b:a9:36:b2:53:7a:1a:
fa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F9:12:D8:3E:C5:48:BD:B1:6F:8F:A6:C7:99:7B:87:91:87:EB:F6
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0c:7b:92:d9:d6:73:51:5c:4c:79:e7:62:8e:e2:2b:98:88:
2e:d6:ab:01:05:6c:4e:a8:5f:4b:1a:45:83:0d:67:3c:f3:07:
85:b9:f3:9e:a2:e2:8a:63:95:60:e5:5b:89:b4:fc:58:fd:33:
1f:76:44:4c:89:4b:dd:e3:be:83:5e:e9:9f:cb:5b:d2:54:fe:
4a:01:d5:9f:98:ee:04:9c:4e:8e:24:9a:42:8a:78:2e:82:db:
58:e1:e4:44:f5:79:37:c7:3f:a3:76:d1:9b:64:c9:8c:41:02:
9f:aa:b7:2b:0a:f4:1a:40:79:f9:5d:02:af:86:20:ce:3b:f5:
9d:23:e9:b0:82:4a:2e:a0:09:59:d4:a8:3c:bc:d1:d2:4e:04:
d0:ac:22:e3:54:2b:90:3b:e1:bd:39:9e:e2:1d:5e:d4:4d:95:
55:c3:54:2c:b2:3d:fb:dc:c6:ec:bf:63:fc:c7:c3:c9:ca:5c:
19:2d:99:31:d7:4f:86:79:11:9a:9b:bc:46:7b:01:0d:40:82:
90:5d:4f:f6:4a:7d:1a:d9:4e:14:3d:25:8b:de:9c:8e:fb:fc:
16:28:23:e0:a6:10:db:4e:ae:3e:08:4a:4a:a1:ed:16:47:7b:
b5:1b:8c:17:4a:81:53:4d:f8:c3:f3:c0:15:5b:05:0d:88:cb:
a2:b3:17:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfL3sGPJbjkQwk80pRovzhTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjg2NTYxMjYxOTgzNzNkMDc4ODZiZjRhYjhmYjA2Yjkw
MDY3ODAwHhcNMjUwNzAyMTYwMTAyWhcNMjUwNzAzMTYwMTAyWjAzMTEwLwYDVQQD
EyhiZmY5MTJkODNlYzU0OGJkYjE2ZjhmYTZjNzk5N2I4NzkxODdlYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtavRmCsMNCoo/LVkiF+yR+t2EAnO
6Ze8PtDOgFYCZUBrJgokVLkLPyDv2P3QSehi10v4HJqJ3tnWxMeg/KsDhrBFb87R
PKVKjP2sgC0t/+kW9l3Dj3Dw/SYs+FuqFC1Y38eA+JroTrFmiP+Drvu9bfGMR+fr
9cnjsdrIbrMIHGODgL77YEgElATZKgeqW9qhGCYfJ1GP2DXLaPJelauv8BAfYtsR
fvOiRNbqjF2Jf8efxJViWX/1w22B7OQ9VnTf3V1hMt0cZauEkhItPX850mJw2EG4
mNMMRzxWxc4XRZJ/qCyGbwsbM5h7Gl2RqH1RTkqgHsEonlupNrJTehr6TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/5Etg+xUi9sW+PpseZe4eRh+v2MB8GA1UdIwQY
MBaAFBtoZWEmGYNz0HiGv0q4+wa5AGeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODIt
MjM5ODcwNGFiNTBjLzEvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODItMjM5ODcwNGFiNTBj
LzEvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQx7ktnW
c1FcTHnnYo7iK5iILtarAQVsTqhfSxpFgw1nPPMHhbnznqLiimOVYOVbibT8WP0z
H3ZETIlL3eO+g17pn8tb0lT+SgHVn5juBJxOjiSaQop4LoLbWOHkRPV5N8c/o3bR
m2TJjEECn6q3Kwr0GkB5+V0Cr4Ygzjv1nSPpsIJKLqAJWdSoPLzR0k4E0Kwi41Qr
kDvhvTme4h1e1E2VVcNULLI9+9zG7L9j/MfDycpcGS2ZMddPhnkRmpu8RnsBDUCC
kF1P9kp9GtlOFD0li96cjvv8Figj4KYQ206uPghKSqHtFkd7tRuMF0qBU034w/PA
FVsFDYjLorMXog==
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:33:08 2025 by rpki-client