Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: TXpk6VjFGmdPQ5XTbHoX0OKn9SoVaDbXQInKQn4J8bE=
Subject key identifier: 04:9D:08:D7:A7:E4:2C:95:9E:8A:86:9D:1A:2D:BF:4D:61:2A:F3:9C
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 0197B6D7C4263D209B8F7B1C25A1166B93D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: HhN/gMSKRX8Ors1KPYkeMue4Wy+7SUNoy4IyF+2HBPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c4:26:3d:20:9b:8f:7b:1c:25:a1:16:6b:93:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=049d08d7a7e42c959e8a869d1a2dbf4d612af39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:78:3f:c5:dd:65:f3:85:cf:29:c9:a2:a7:
8e:fa:07:0e:cb:19:cb:b4:c4:16:94:bc:76:91:1b:
cb:fc:65:94:dd:37:46:29:b0:ec:0a:87:c1:24:35:
f5:8d:a4:f2:05:43:1a:b7:32:80:d6:08:a4:f5:6a:
f7:a8:a9:58:6b:8e:9c:32:79:5b:ff:07:93:3a:03:
a3:6a:91:2b:93:9e:eb:d0:c5:27:0b:28:c4:b5:aa:
fb:b1:56:6c:5a:1e:74:e8:58:3c:83:e9:81:44:48:
a2:c0:e5:04:40:bb:35:0f:9e:68:d6:16:ef:fc:4a:
35:aa:2d:df:b8:76:bd:a4:f9:ca:ab:c8:fe:92:cb:
c2:de:3b:e5:79:42:99:51:28:e1:1c:bf:73:9f:90:
8b:7a:a2:ce:7c:ec:2d:ac:84:1a:62:84:87:33:2d:
2e:57:e8:cc:0c:d8:97:74:c4:7a:23:0c:f9:b0:aa:
cf:68:58:43:c8:c3:32:b3:af:e8:31:6e:7a:83:d9:
d6:1e:bb:e4:be:58:73:54:43:02:36:2b:4a:a4:41:
75:60:86:30:a4:32:fc:d8:0b:56:fa:ca:a6:89:b2:
ff:38:a9:db:a9:7c:6c:6b:75:ba:eb:31:61:2a:29:
33:e0:86:81:16:78:5e:5e:d8:51:98:d9:61:35:ca:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9D:08:D7:A7:E4:2C:95:9E:8A:86:9D:1A:2D:BF:4D:61:2A:F3:9C
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:71:58:97:33:04:1a:1a:bd:bd:74:c3:93:b8:25:65:c5:91:
70:5b:f0:5d:d9:14:f0:37:24:d9:a8:d6:cd:d1:8b:f4:e8:41:
2d:58:0f:08:dd:f2:59:d8:3b:d4:c6:1a:58:55:3c:ed:94:f6:
f6:d7:26:be:3e:33:d5:e9:75:09:45:97:f6:3f:81:2f:96:ff:
d6:6d:bb:3f:81:d2:46:53:b0:16:05:77:a2:9f:49:60:91:10:
5e:32:4f:d2:86:03:d0:1d:ad:f2:e8:8a:07:30:3f:18:03:13:
aa:9b:1d:f0:35:bc:ec:99:d9:78:40:ca:3b:09:05:93:10:f6:
b5:98:b6:b6:b0:13:68:84:dd:37:3b:de:02:15:cd:93:16:46:
a9:cb:21:f9:a4:43:51:1f:8b:62:ca:01:59:7e:93:51:5b:9e:
46:47:f3:ff:31:3f:57:69:77:ce:dc:98:6c:84:40:47:de:a5:
28:ec:4d:12:ca:4f:a2:ea:32:45:c6:8a:50:72:c7:b5:e5:03:
5e:1c:b3:85:45:5b:a1:f2:59:38:a8:f2:ed:0a:4f:84:53:89:
52:2a:fc:44:96:d3:80:00:62:a7:d9:27:cc:69:68:de:a5:7e:
89:44:1a:c6:ae:67:c4:57:2e:7d:de:a6:b5:85:6c:d1:21:96:
45:3b:40:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe218QmPSCbj3scJaEWa5PSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NThjYWE2ODMyYWEyYTNlN2NjNmQxNDQ1MTVmOGY0MzFi
NjY3NjIwHhcNMjUwNjI4MTQwMTIyWhcNMjUwNjI5MTQwMTIyWjAzMTEwLwYDVQQD
EygwNDlkMDhkN2E3ZTQyYzk1OWU4YTg2OWQxYTJkYmY0ZDYxMmFmMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1p4P8XdZfOFzynJoqeO+gcOyxnL
tMQWlLx2kRvL/GWU3TdGKbDsCofBJDX1jaTyBUMatzKA1gik9Wr3qKlYa46cMnlb
/weTOgOjapErk57r0MUnCyjEtar7sVZsWh506Fg8g+mBREiiwOUEQLs1D55o1hbv
/Eo1qi3fuHa9pPnKq8j+ksvC3jvleUKZUSjhHL9zn5CLeqLOfOwtrIQaYoSHMy0u
V+jMDNiXdMR6Iwz5sKrPaFhDyMMys6/oMW56g9nWHrvkvlhzVEMCNitKpEF1YIYw
pDL82AtW+sqmibL/OKnbqXxsa3W66zFhKikz4IaBFnheXthRmNlhNcrgWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASdCNen5CyVnoqGnRotv01hKvOcMB8GA1UdIwQY
MBaAFBhYyqaDKqKj58xtFEUV+PQxtmdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2Ut
YWFiN2ZjM2Y4YWM1LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2UtYWFiN2ZjM2Y4YWM1
LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXFYlzME
Ghq9vXTDk7glZcWRcFvwXdkU8Dck2ajWzdGL9OhBLVgPCN3yWdg71MYaWFU87ZT2
9tcmvj4z1el1CUWX9j+BL5b/1m27P4HSRlOwFgV3op9JYJEQXjJP0oYD0B2t8uiK
BzA/GAMTqpsd8DW87JnZeEDKOwkFkxD2tZi2trATaITdNzveAhXNkxZGqcsh+aRD
UR+LYsoBWX6TUVueRkfz/zE/V2l3ztyYbIRAR96lKOxNEspPouoyRcaKUHLHteUD
XhyzhUVbofJZOKjy7QpPhFOJUir8RJbTgABip9knzGlo3qV+iUQaxq5nxFcufd6m
tYVs0SGWRTtAGg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:21 2025 by rpki-client