Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
File: ggBZa784LUmLxewrP9ZTOehbmPI.mft (raw, json)
Hash identifier: 9dpwO1WYI+hCJIT6kMV+uiDLVkhEn2Rj+78ylXgJGd0=
Subject key identifier: 04:ED:CF:D4:B4:8A:8F:DD:D6:2D:2C:F0:3F:11:1B:49:B0:A4:A0:95
Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
Certificate issuer: /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Certificate serial: 0197B6A04022E80DEBFF050889D8B39EA8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
Manifest number: 0D4D
Signing time: Sat 28 Jun 2025 13:00:44 +0000
Manifest this update: Sat 28 Jun 2025 13:00:44 +0000
Manifest next update: Sun 29 Jun 2025 13:00:44 +0000
Files and hashes: 1: 0nNYMJ2yluQoQ02pe7IRw8NkdfA.roa (hash: GkG/6rDrk9vq7Jp2NvQPyT4My5GzjO9oZQi+bOX75cE=)
2: ggBZa784LUmLxewrP9ZTOehbmPI.crl (hash: Mlzug30tL9ZT8/x9PXLTaJ4w36G0LI6wNmRFG+Jps/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:40:22:e8:0d:eb:ff:05:08:89:d8:b3:9e:a8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Validity
Not Before: Jun 28 13:00:44 2025 GMT
Not After : Jun 29 13:00:44 2025 GMT
Subject: CN=04edcfd4b48a8fddd62d2cf03f111b49b0a4a095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b7:7a:f9:62:bc:5e:90:61:00:dd:c8:18:01:
45:a7:70:0b:bf:fb:65:7e:0d:01:1f:e4:30:95:d4:
52:b1:7e:3c:f2:2d:a4:c9:25:64:9b:dd:d2:80:91:
b3:c7:53:20:10:af:b4:b9:9b:23:e9:e4:9d:e7:56:
d8:3b:c0:65:e5:e1:bd:5a:d0:97:0d:08:ef:de:f6:
8b:d7:74:a4:4b:93:30:93:6d:ba:f7:4c:9d:26:e5:
a6:66:5c:58:04:ac:2c:ad:14:18:d0:1d:bb:07:48:
5a:03:36:78:76:26:84:03:b7:7e:fe:f1:1c:b9:da:
07:fe:39:90:9b:c1:88:8f:88:92:b8:1c:ef:08:dd:
9a:ec:9b:b9:b6:af:08:24:a4:0d:a2:a5:f5:ca:38:
4c:57:80:42:a4:96:bd:80:86:ef:a7:22:9d:bb:75:
fa:ff:e8:28:ee:2c:72:20:2d:68:20:62:a9:d0:fb:
fc:bc:29:87:ef:00:19:4b:a8:df:7a:1a:b5:81:d8:
07:c3:05:48:27:f8:5d:7e:71:af:25:6c:ed:c4:b9:
31:5f:df:c1:36:71:d0:c4:27:45:cb:e0:1b:a5:f7:
40:31:90:94:8c:be:f3:91:e1:be:80:88:4d:61:18:
02:73:50:f5:d5:86:c8:86:21:f6:86:31:77:e6:50:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:ED:CF:D4:B4:8A:8F:DD:D6:2D:2C:F0:3F:11:1B:49:B0:A4:A0:95
X509v3 Authority Key Identifier:
keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dd:fe:23:b2:c7:9a:48:50:68:16:c6:59:36:92:5e:9a:f5:
99:27:84:11:40:d0:1d:3b:5c:ba:c0:6c:31:7b:7f:1c:59:2a:
80:5a:6f:04:3a:61:11:fc:5b:56:26:ab:74:9e:51:4c:54:4d:
d7:d7:b8:4e:d6:be:fa:2d:5a:36:d1:2d:70:f0:3d:4d:12:9d:
33:85:a9:19:20:06:17:b0:5f:e8:76:1e:3b:67:78:87:28:4c:
34:67:40:fd:7b:99:cf:fd:01:54:87:a9:f3:b7:f5:56:e2:7f:
4a:36:1b:cf:71:f3:f8:5e:33:55:10:85:3a:11:d4:5b:a8:60:
81:21:40:27:bd:6c:0a:fd:fc:dc:12:57:47:77:9a:5f:8f:d0:
a7:cc:ab:13:a0:0c:c9:54:d2:2c:5c:fe:53:aa:34:28:c5:91:
63:e8:91:57:b1:65:1e:e2:71:16:84:eb:d3:4a:da:39:46:11:
83:3d:74:8c:74:3e:2f:1c:0c:69:c8:0f:b3:68:c8:e3:bd:51:
c1:a7:21:28:fe:00:0b:d3:60:95:87:35:19:54:d7:ba:7b:3f:
39:73:b2:2c:c0:ca:55:d2:b9:8b:df:51:79:f8:97:84:a0:e0:
e6:4d:5c:d4:80:64:cf:c7:a1:a2:94:39:8e:d2:96:52:a4:46:
e1:b6:b4:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oEAi6A3r/wUIidiznqiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMDA1OTZiYmYzODJkNDk4YmM1ZWMyYjNmZDY1MzM5ZTg1
Yjk4ZjIwHhcNMjUwNjI4MTMwMDQ0WhcNMjUwNjI5MTMwMDQ0WjAzMTEwLwYDVQQD
EygwNGVkY2ZkNGI0OGE4ZmRkZDYyZDJjZjAzZjExMWI0OWIwYTRhMDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77d6+WK8XpBhAN3IGAFFp3ALv/tl
fg0BH+QwldRSsX488i2kySVkm93SgJGzx1MgEK+0uZsj6eSd51bYO8Bl5eG9WtCX
DQjv3vaL13SkS5Mwk22690ydJuWmZlxYBKwsrRQY0B27B0haAzZ4diaEA7d+/vEc
udoH/jmQm8GIj4iSuBzvCN2a7Ju5tq8IJKQNoqX1yjhMV4BCpJa9gIbvpyKdu3X6
/+go7ixyIC1oIGKp0Pv8vCmH7wAZS6jfehq1gdgHwwVIJ/hdfnGvJWztxLkxX9/B
NnHQxCdFy+AbpfdAMZCUjL7zkeG+gIhNYRgCc1D11YbIhiH2hjF35lDTQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATtz9S0io/d1i0s8D8RG0mwpKCVMB8GA1UdIwQY
MBaAFIIAWWu/OC1Ji8XsKz/WUznoW5jyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2dCWmE3ODRMVW1MeGV3clA5WlRPZWhibVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MzY0MzEtOWNiZS00M2E5LThjMWYt
NjhhZDJkMTExYmFjLzEvZ2dCWmE3ODRMVW1MeGV3clA5WlRPZWhibVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS81MzY0MzEtOWNiZS00M2E5LThjMWYtNjhhZDJkMTExYmFj
LzEvZ2dCWmE3ODRMVW1MeGV3clA5WlRPZWhibVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjN3+I7LH
mkhQaBbGWTaSXpr1mSeEEUDQHTtcusBsMXt/HFkqgFpvBDphEfxbViardJ5RTFRN
19e4Tta++i1aNtEtcPA9TRKdM4WpGSAGF7Bf6HYeO2d4hyhMNGdA/XuZz/0BVIep
87f1VuJ/SjYbz3Hz+F4zVRCFOhHUW6hggSFAJ71sCv383BJXR3eaX4/Qp8yrE6AM
yVTSLFz+U6o0KMWRY+iRV7FlHuJxFoTr00raOUYRgz10jHQ+LxwMacgPs2jI471R
wachKP4AC9NglYc1GVTXuns/OXOyLMDKVdK5i99RefiXhKDg5k1c1IBkz8ehopQ5
jtKWUqRG4ba0tg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:40 2025 by rpki-client