Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
File: v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft (raw, json)
Hash identifier: tWAD5hKILpJU09p8BFkgeho/v7ynBZPtNCix9XEtbZA=
Subject key identifier: 5E:B9:6A:3D:B1:11:D4:59:C2:66:18:5C:23:B5:80:18:63:99:A9:E6
Authority key identifier: BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
Certificate issuer: /CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Certificate serial: 0197B6A2218AB163638A4B9AB9463A7BB613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
Manifest number: 14C7
Signing time: Sat 28 Jun 2025 13:02:48 +0000
Manifest this update: Sat 28 Jun 2025 13:02:48 +0000
Manifest next update: Sun 29 Jun 2025 13:02:48 +0000
Files and hashes: 1: RyCW3YF5iKkzrNHX6rZe54l5IMM.roa (hash: nnvkgafHFhfZcY1hKxlsPbFkmUe449pia8RGh1NFs+Q=)
2: aJ0uGpexjSkAa27B-n72oqb3t3I.roa (hash: H6fzloTmxNo2mJK6Qd1BL+h1srxz+hjXl3IHpHqT1Kw=)
3: v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl (hash: DbkaNMM2xJOhYLKCX11OZLa60QreJBVLsN5xbrsu1Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:21:8a:b1:63:63:8a:4b:9a:b9:46:3a:7b:b6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Validity
Not Before: Jun 28 13:02:48 2025 GMT
Not After : Jun 29 13:02:48 2025 GMT
Subject: CN=5eb96a3db111d459c266185c23b580186399a9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:16:15:9f:9d:41:8f:b0:fd:37:53:20:20:2f:
1b:96:cb:48:70:54:43:fc:95:2e:92:1d:b9:17:35:
16:9d:b7:95:bd:3b:51:57:67:d3:78:38:e2:4e:65:
71:5d:da:39:2b:bd:07:e4:2c:68:52:dc:63:cf:27:
83:45:2a:35:f3:13:4f:86:d0:8f:c8:a4:90:a9:5b:
05:f0:15:49:ab:80:69:5f:b9:be:5b:30:44:ee:53:
0c:c0:9b:64:34:c7:3f:4f:e6:0c:94:ec:b5:2a:b2:
dc:ec:fd:96:d1:b2:1e:05:c1:1a:d3:21:40:bc:5b:
8b:0f:9f:de:a1:2a:52:9a:90:94:ab:83:de:9f:c1:
ef:5a:1c:f9:89:4f:46:f7:1d:3b:d6:87:27:56:e6:
d7:c4:bf:23:90:ef:53:c7:8f:09:28:07:8d:ce:d1:
07:c3:d0:a3:ee:6e:b9:67:a3:43:a9:0b:7e:d0:3a:
49:4b:22:f0:ab:50:52:74:04:10:d3:d3:b8:b3:d6:
27:16:36:d1:dc:c6:01:07:eb:d0:bb:01:85:f9:15:
a5:49:89:2e:3a:a4:29:a6:f7:95:78:ad:a7:3c:64:
8f:c9:a7:07:9a:84:e5:fe:b0:0c:38:35:33:41:80:
3d:f3:d6:1d:ac:54:27:e0:a0:12:87:d6:a1:03:31:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B9:6A:3D:B1:11:D4:59:C2:66:18:5C:23:B5:80:18:63:99:A9:E6
X509v3 Authority Key Identifier:
keyid:BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fa:6e:27:b0:39:2f:10:ea:4c:8c:79:78:ac:cf:d2:51:cd:
60:c6:4b:97:48:9f:dd:0f:52:5b:1a:de:6e:24:10:49:f5:2a:
4e:48:a5:3f:db:3e:bf:9b:bd:2c:0a:d8:3a:ff:25:0c:10:e6:
98:8b:64:82:7a:c0:58:ec:a0:3d:67:e7:b9:6a:51:41:34:a3:
d6:3c:1a:79:b7:d3:19:2f:6b:8c:37:0d:bb:5c:5a:66:b5:9f:
9b:19:5b:af:32:34:10:44:62:03:6d:2d:a1:25:21:10:53:8e:
36:e2:20:61:be:98:d4:84:09:29:86:e6:9f:a7:90:87:c4:e2:
2e:0c:64:5c:e9:01:06:17:8f:13:5f:c0:66:c0:8a:6d:29:d6:
2a:f1:4f:07:f5:b0:b7:e4:c2:8e:0a:53:b3:3e:5d:fe:de:cc:
ff:32:86:3b:49:03:25:f1:18:a8:20:6a:e0:5f:20:23:47:8d:
7e:f8:04:ec:84:d0:2f:47:16:2c:f4:ae:21:5d:9f:61:32:53:
30:73:24:b9:8c:46:48:68:22:fa:b7:eb:d3:0d:ec:6d:a4:46:
77:10:93:48:bc:47:9f:38:a8:08:67:61:2f:3b:53:dc:5e:34:
c0:9d:b2:9c:bd:91:f6:2e:e9:06:f4:7e:de:a4:d8:ef:a1:75:
cc:4f:5e:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oiGKsWNjikuauUY6e7YTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYTVmMGU3NjU0NzU3NTk1N2JjOTJjNmRkZGQwODRkM2Vh
N2Y4NjMwHhcNMjUwNjI4MTMwMjQ4WhcNMjUwNjI5MTMwMjQ4WjAzMTEwLwYDVQQD
Eyg1ZWI5NmEzZGIxMTFkNDU5YzI2NjE4NWMyM2I1ODAxODYzOTlhOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RYVn51Bj7D9N1MgIC8blstIcFRD
/JUukh25FzUWnbeVvTtRV2fTeDjiTmVxXdo5K70H5CxoUtxjzyeDRSo18xNPhtCP
yKSQqVsF8BVJq4BpX7m+WzBE7lMMwJtkNMc/T+YMlOy1KrLc7P2W0bIeBcEa0yFA
vFuLD5/eoSpSmpCUq4Pen8HvWhz5iU9G9x071ocnVubXxL8jkO9Tx48JKAeNztEH
w9Cj7m65Z6NDqQt+0DpJSyLwq1BSdAQQ09O4s9YnFjbR3MYBB+vQuwGF+RWlSYku
OqQppveVeK2nPGSPyacHmoTl/rAMODUzQYA989YdrFQn4KASh9ahAzGKewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF65aj2xEdRZwmYYXCO1gBhjmanmMB8GA1UdIwQY
MBaAFL+l8OdlR1dZV7ySxt3dCE0+p/hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjZYdzUyVkhWMWxYdkpMRzNkMElUVDZuLUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iY2NjYjgtNmM3NC00ZDBhLTg5NWYt
MDFkMTlhNzRiZTIzLzEvdjZYdzUyVkhWMWxYdkpMRzNkMElUVDZuLUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iY2NjYjgtNmM3NC00ZDBhLTg5NWYtMDFkMTlhNzRiZTIz
LzEvdjZYdzUyVkhWMWxYdkpMRzNkMElUVDZuLUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvpuJ7A5
LxDqTIx5eKzP0lHNYMZLl0if3Q9SWxrebiQQSfUqTkilP9s+v5u9LArYOv8lDBDm
mItkgnrAWOygPWfnuWpRQTSj1jwaebfTGS9rjDcNu1xaZrWfmxlbrzI0EERiA20t
oSUhEFOONuIgYb6Y1IQJKYbmn6eQh8TiLgxkXOkBBhePE1/AZsCKbSnWKvFPB/Ww
t+TCjgpTsz5d/t7M/zKGO0kDJfEYqCBq4F8gI0eNfvgE7ITQL0cWLPSuIV2fYTJT
MHMkuYxGSGgi+rfr0w3sbaRGdxCTSLxHnzioCGdhLztT3F40wJ2ynL2R9i7pBvR+
3qTY76F1zE9e4w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:38 2025 by rpki-client