Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier: 8bG+APrdZ+dXh4qqQsHmoZ3rVl3MHNNk1QpeWNa9n3E=
Subject key identifier: 5C:1D:7B:10:1B:BA:23:2C:5A:46:2F:0E:62:F0:48:B5:CF:3A:C4:33
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 0197C9145BA9AFD48CCCD8F7EB38D45A4F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 03:00:43 +0000
Manifest this update: Wed 02 Jul 2025 03:00:43 +0000
Manifest next update: Thu 03 Jul 2025 03:00:43 +0000
Files and hashes: 1: 1-KYSj48sD3jE1Gzvv9kFu9QJGtY.roa (hash: H4x96iKua2b3UDRaB1WSf9rakbeSZ8QQwLawXzA3kBc=)
2: kroCcDuLJiEm7WFd8GtQQzKukrk.roa (hash: C4/C9Nc89baYiSQf8o8T95z101LyK5Fm6SS+L143NqQ=)
3: oWikPPO3V0QeY0v8vBGwReraGUs.roa (hash: xHZgaltZECGHYZXkWizrY9iMMJdCdaYUNGOTHUNFxDM=)
4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: X8O5Rojpwx/XIh65/ggjSmsY8Y5tpiv5A7p976YZFqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:14:5b:a9:af:d4:8c:cc:d8:f7:eb:38:d4:5a:4f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Jul 2 03:00:43 2025 GMT
Not After : Jul 3 03:00:43 2025 GMT
Subject: CN=5c1d7b101bba232c5a462f0e62f048b5cf3ac433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:d1:58:52:0d:09:ab:fc:bd:ca:86:b2:7d:
a8:b3:b8:f6:f4:29:a5:a1:8e:fa:02:0e:3b:ac:60:
1d:99:9c:9b:35:b2:5d:4b:a2:0c:61:02:41:36:44:
7c:c8:08:e4:c0:39:db:4a:51:d2:76:4f:10:89:3a:
41:14:56:eb:b9:cf:22:2a:b9:e3:70:c3:35:23:c1:
69:fc:e8:4c:98:9e:38:b2:b3:42:f8:40:8d:f5:2b:
42:cf:35:bf:82:26:d8:b5:71:d5:39:82:11:2e:55:
2d:55:05:eb:82:00:6a:ba:a0:3c:6b:37:07:35:26:
16:2a:da:ff:2d:05:38:f8:a3:9f:d4:4c:86:0f:12:
07:c3:df:36:ee:ce:2e:1b:49:49:c2:a5:e3:41:6f:
50:27:54:34:a8:47:11:e8:20:23:cf:f5:e9:de:cd:
80:2f:a2:94:f7:06:54:0c:c0:56:0d:77:a4:8e:7b:
1e:90:e9:3f:85:dd:52:0a:1a:e4:07:dd:dd:ae:57:
31:84:99:d2:be:51:9e:19:b4:55:cf:73:3f:70:a3:
e1:10:54:d0:3f:2e:89:2d:34:d4:b5:e4:4c:8d:97:
ea:3c:4d:e1:18:2c:1b:35:c3:d8:26:19:06:a3:4a:
76:19:ac:cb:dd:5d:49:e1:d1:02:1a:dc:06:09:bc:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1D:7B:10:1B:BA:23:2C:5A:46:2F:0E:62:F0:48:B5:CF:3A:C4:33
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:09:2e:ad:bb:a5:9a:33:03:2c:fe:c9:ee:4e:7c:1a:13:5b:
e5:3f:0d:fa:73:9b:65:be:87:9a:3a:ed:2b:a2:82:48:9e:d4:
0f:4d:ff:27:57:ee:c9:c6:91:85:53:2a:25:3c:ba:1a:60:bc:
34:a5:7b:fd:f6:d5:26:e0:93:00:ef:b0:6e:1d:74:2e:c5:ac:
39:90:a4:08:66:85:1d:bb:8f:91:02:ac:5d:cf:a5:d3:b7:5a:
88:1a:2f:f2:1c:c8:da:32:31:c2:80:21:f8:61:16:b5:cc:6a:
8c:3d:62:c2:12:1f:82:13:15:11:ec:61:e2:77:85:8b:df:96:
6a:48:08:52:43:a5:20:bb:1b:67:7b:11:63:c9:45:f3:74:1a:
a4:5e:3d:ee:2a:ec:33:6b:b2:60:57:0c:60:29:50:85:35:b2:
85:ae:86:cc:85:da:59:67:5a:b6:81:8c:7d:50:56:17:e0:2a:
9b:6d:6d:bd:ff:77:e4:52:78:9e:a1:f2:8e:22:9d:b1:b6:4f:
ad:8f:53:88:84:9d:bb:3e:1c:e2:ed:92:b3:c5:18:a7:fa:65:
4c:ae:ef:a8:c5:7b:5a:b7:bd:01:7e:57:91:f8:a2:68:61:ae:
fe:d2:66:c5:27:30:a7:d3:69:26:51:99:38:de:84:e9:cb:6c:
c9:d2:f5:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJFFupr9SMzNj36zjUWk+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MmZjNjBkMzZlMjhiYjhkZjE0NWM4NGFjYWIxOWNmYTUz
YjAyNWEwHhcNMjUwNzAyMDMwMDQzWhcNMjUwNzAzMDMwMDQzWjAzMTEwLwYDVQQD
Eyg1YzFkN2IxMDFiYmEyMzJjNWE0NjJmMGU2MmYwNDhiNWNmM2FjNDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLLRWFINCav8vcqGsn2os7j29Cml
oY76Ag47rGAdmZybNbJdS6IMYQJBNkR8yAjkwDnbSlHSdk8QiTpBFFbruc8iKrnj
cMM1I8Fp/OhMmJ44srNC+ECN9StCzzW/gibYtXHVOYIRLlUtVQXrggBquqA8azcH
NSYWKtr/LQU4+KOf1EyGDxIHw9827s4uG0lJwqXjQW9QJ1Q0qEcR6CAjz/Xp3s2A
L6KU9wZUDMBWDXekjnsekOk/hd1SChrkB93drlcxhJnSvlGeGbRVz3M/cKPhEFTQ
Py6JLTTUteRMjZfqPE3hGCwbNcPYJhkGo0p2GazL3V1J4dECGtwGCbwDmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwdexAbuiMsWkYvDmLwSLXPOsQzMB8GA1UdIwQY
MBaAFKUvxg024ou43xRchKyrGc+lOwJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTct
OWI0YTJkNWYzYTc2LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTctOWI0YTJkNWYzYTc2
LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQkurbul
mjMDLP7J7k58GhNb5T8N+nObZb6HmjrtK6KCSJ7UD03/J1fuycaRhVMqJTy6GmC8
NKV7/fbVJuCTAO+wbh10LsWsOZCkCGaFHbuPkQKsXc+l07daiBov8hzI2jIxwoAh
+GEWtcxqjD1iwhIfghMVEexh4neFi9+WakgIUkOlILsbZ3sRY8lF83QapF497irs
M2uyYFcMYClQhTWyha6GzIXaWWdatoGMfVBWF+Aqm21tvf935FJ4nqHyjiKdsbZP
rY9TiISduz4c4u2Ss8UYp/plTK7vqMV7Wre9AX5XkfiiaGGu/tJmxScwp9NpJlGZ
ON6E6ctsydL1fQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:22:56 2025 by rpki-client