Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier: IDHiyKp0ZwOHHaBZWT0trE3f3VhKO0oCO4AZwPqUfiQ=
Subject key identifier: C6:AB:F4:34:2B:65:66:90:F8:D1:F4:39:E8:0F:7A:43:79:04:39:1B
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial: 0197B70EA5F726A37FC8824A98CE1127036A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: A4PQ0gQ7q04XkXEWkOpsFcG55U0.roa (hash: BlIGTUdhWCkztoNKbN33qtlZGYIZKP+ZzvO3VxYHAQ8=)
2: S1ukHOQHwZ5FXTblgAJkMrxdPMo.roa (hash: nsbro8MsYnPkoUuF8RjKDn+GAEU45Dqsh1VzCFmduco=)
3: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: IRT7S0/g+Hna7WSKAt/AnjL7tbw1HLQYN1fbJ25NcsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a5:f7:26:a3:7f:c8:82:4a:98:ce:11:27:03:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=c6abf4342b656690f8d1f439e80f7a437904391b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:e2:7f:54:db:a9:4e:74:c0:d8:66:1f:8e:
81:7d:1e:63:38:e0:85:7b:b9:e8:b5:c4:47:39:fd:
d9:8e:00:61:60:f0:19:5b:32:d4:15:1a:b8:33:30:
d9:22:c2:f8:46:43:fb:b3:da:40:99:04:df:51:a3:
a8:eb:a8:38:e9:af:a1:d5:cd:19:c1:91:fb:fd:8f:
fa:52:f3:9a:66:25:cc:eb:b9:40:03:ec:c4:0f:12:
3a:71:24:85:15:2d:28:8a:90:f3:73:8d:22:ef:2b:
20:a8:5e:cb:3e:21:bc:08:30:47:22:be:74:d8:bc:
1a:70:ef:36:aa:a4:80:50:a2:8d:05:77:e0:a4:1a:
75:ab:23:70:e7:e1:00:8b:66:15:d7:0a:4d:e2:8e:
d1:29:29:18:c0:d7:fa:0b:6c:e4:fa:f3:06:2e:2a:
40:07:2c:c3:df:ea:05:49:b6:e1:91:1c:b0:75:f5:
56:34:0f:9c:b1:50:1a:65:df:e6:ce:fa:fe:c0:17:
55:50:e3:be:9f:d4:ee:53:34:f2:97:fd:5b:c8:bb:
c8:51:3b:15:e5:dc:cc:68:aa:78:93:2b:a7:49:a3:
af:d8:c8:36:ed:0a:3c:55:9f:f4:a0:35:91:b2:7e:
46:11:ad:5d:05:d9:74:e4:7d:ae:c4:4d:ca:94:2c:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AB:F4:34:2B:65:66:90:F8:D1:F4:39:E8:0F:7A:43:79:04:39:1B
X509v3 Authority Key Identifier:
keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:71:30:2b:26:a1:cc:1d:1f:f8:5d:e2:d3:4e:03:f6:6a:19:
07:7f:19:07:a6:6a:cd:1b:aa:bc:de:e1:84:88:3a:6b:3e:71:
82:e3:21:40:67:2c:9d:7c:d9:f7:4f:74:72:b6:d8:08:35:74:
bb:af:08:b0:c1:52:cd:75:33:b6:d5:4f:8d:d4:da:0b:3a:68:
7a:f5:3b:0d:42:fb:b4:de:bb:69:0d:3a:f0:24:c3:0d:00:f1:
67:1c:33:a5:20:c2:2b:c7:13:b7:74:93:8c:b8:8c:b1:cd:20:
dc:28:46:6e:4e:7d:f7:0e:dc:2e:fb:2a:00:99:47:cb:63:88:
fb:cd:31:10:c5:a9:80:b4:88:57:4c:12:21:f1:0f:d8:66:c0:
05:c1:53:5a:a0:eb:25:d1:bb:b3:dc:48:dc:03:0f:16:f6:8e:
f8:57:e4:c0:82:b7:1b:0d:11:f2:f3:88:54:6e:a7:67:9e:06:
21:dc:90:ee:8b:a4:65:99:8e:ab:e1:33:c6:02:a4:06:02:78:
f6:f3:4d:49:9b:48:1f:de:b7:2b:fc:47:9e:31:2c:66:18:81:
08:fe:3a:95:7f:ea:bc:ea:7b:57:53:43:24:84:c4:4c:b2:28:
1c:9e:b5:3c:5f:5c:7f:c8:e5:3b:75:da:a9:f1:d5:af:22:18:
3b:a0:68:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DqX3JqN/yIJKmM4RJwNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNDZkZThjZWMwMWQwNTI1MzZjMGYwOGRmZTdhOGI1M2Y5
YWFlYzIwHhcNMjUwNjI4MTUwMTE5WhcNMjUwNjI5MTUwMTE5WjAzMTEwLwYDVQQD
EyhjNmFiZjQzNDJiNjU2NjkwZjhkMWY0MzllODBmN2E0Mzc5MDQzOTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo57if1TbqU50wNhmH46BfR5jOOCF
e7notcRHOf3ZjgBhYPAZWzLUFRq4MzDZIsL4RkP7s9pAmQTfUaOo66g46a+h1c0Z
wZH7/Y/6UvOaZiXM67lAA+zEDxI6cSSFFS0oipDzc40i7ysgqF7LPiG8CDBHIr50
2LwacO82qqSAUKKNBXfgpBp1qyNw5+EAi2YV1wpN4o7RKSkYwNf6C2zk+vMGLipA
ByzD3+oFSbbhkRywdfVWNA+csVAaZd/mzvr+wBdVUOO+n9TuUzTyl/1byLvIUTsV
5dzMaKp4kyunSaOv2Mg27Qo8VZ/0oDWRsn5GEa1dBdl05H2uxE3KlCzswQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMar9DQrZWaQ+NH0OegPekN5BDkbMB8GA1UdIwQY
MBaAFIFG3ozsAdBSU2wPCN/nqLU/mq7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjhkOWEtOGRkYi00NGIzLTlhYzAt
Y2Q1NzJmZDA0NGVlLzEvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kZjhkOWEtOGRkYi00NGIzLTlhYzAtY2Q1NzJmZDA0NGVl
LzEvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3EwKyah
zB0f+F3i004D9moZB38ZB6ZqzRuqvN7hhIg6az5xguMhQGcsnXzZ9090crbYCDV0
u68IsMFSzXUzttVPjdTaCzpoevU7DUL7tN67aQ068CTDDQDxZxwzpSDCK8cTt3ST
jLiMsc0g3ChGbk599w7cLvsqAJlHy2OI+80xEMWpgLSIV0wSIfEP2GbABcFTWqDr
JdG7s9xI3AMPFvaO+FfkwIK3Gw0R8vOIVG6nZ54GIdyQ7oukZZmOq+EzxgKkBgJ4
9vNNSZtIH963K/xHnjEsZhiBCP46lX/qvOp7V1NDJITETLIoHJ61PF9cf8jlO3Xa
qfHVryIYO6BoHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:52 2025 by rpki-client