Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json)
Hash identifier: XbjW1C7pjw3Dx0Z38rpR58rgZ1nGBRfOks0VJprxDdg=
Subject key identifier: 70:32:AB:4B:E9:B3:68:AF:35:FC:93:D2:AE:97:44:82:BA:62:8F:74
Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9
Certificate serial: 0197B96A954C62F9348F8994D87478B533F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 02:00:59 +0000
Manifest this update: Sun 29 Jun 2025 02:00:59 +0000
Manifest next update: Mon 30 Jun 2025 02:00:59 +0000
Files and hashes: 1: JRNBLXBQWgTuBg1-jZxrM7iYCuQ.roa (hash: A/80zWYF3RYk10mzwst52/4Qz1yzT35DfBM28lDeN+s=)
2: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: I4+iGGfHuspqqQr+NWsTsYfy6waoppfqN2DviYqqQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:95:4c:62:f9:34:8f:89:94:d8:74:78:b5:33:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9
Validity
Not Before: Jun 29 02:00:59 2025 GMT
Not After : Jun 30 02:00:59 2025 GMT
Subject: CN=7032ab4be9b368af35fc93d2ae974482ba628f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:b8:a9:48:79:c4:5d:0e:6a:28:7a:26:e2:
bf:fa:37:f1:22:48:ee:ac:b5:d4:ec:ab:62:4a:e8:
b7:d2:c4:c6:40:14:a1:14:3c:83:c6:e2:36:9a:41:
0b:bd:98:ef:46:8e:a5:06:2c:c9:68:8b:ae:dc:56:
64:57:cd:af:93:8b:f3:a9:c5:ad:bd:db:79:ad:9e:
ef:96:82:02:a1:3a:f6:a1:28:83:b8:88:4a:cc:a9:
fd:04:62:9a:b5:dd:10:58:8d:4f:33:1e:3f:20:84:
6f:41:63:de:44:48:3e:93:fe:ed:90:d6:4d:38:b9:
6c:fd:45:ce:6b:34:2c:57:cd:ec:f5:e5:42:67:c3:
31:5c:8d:41:66:80:77:c4:a2:81:6f:52:b2:4b:3d:
73:35:6d:ac:dc:bd:87:88:a0:ad:5d:f3:f7:cd:00:
c0:2d:d7:80:49:3f:85:47:53:e6:6d:41:d6:be:21:
86:ae:a6:60:9b:d9:45:f5:5e:38:41:27:a9:eb:7b:
17:cd:b2:46:44:51:1a:12:77:4d:fd:37:e0:8c:61:
38:d7:43:f2:d5:21:96:50:5d:a0:be:c2:07:5b:42:
8b:fc:5e:7b:4d:ab:ed:18:21:9f:7a:e7:1b:b3:87:
b8:96:3b:5d:4b:3e:6c:7d:d2:db:98:55:5e:55:7b:
71:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:32:AB:4B:E9:B3:68:AF:35:FC:93:D2:AE:97:44:82:BA:62:8F:74
X509v3 Authority Key Identifier:
keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:86:78:fb:ff:70:7d:c2:45:d1:e6:7b:da:57:7d:45:fe:27:
93:da:f6:c7:5c:9c:2b:6a:00:a1:63:e2:76:90:b0:64:5b:6b:
7d:93:12:c8:bd:9f:28:36:57:5f:e6:43:1d:6a:75:77:78:df:
23:b4:00:b2:af:be:ab:f3:f1:44:31:4f:4f:fa:7f:d1:3d:54:
1a:92:df:3d:87:c9:de:c3:77:89:c6:7a:2e:be:bf:8c:7e:c3:
a9:ce:12:0f:92:0c:67:11:c5:98:8d:6e:1b:3e:9d:bc:0e:23:
9e:6c:b6:18:41:7e:bc:4a:ad:2f:0f:9f:a9:fb:ed:a6:00:c3:
09:f4:38:f3:d9:16:1a:b3:cb:0d:7e:19:90:85:4e:4b:07:63:
4e:2d:41:91:88:68:3e:52:f5:cb:6f:4a:52:94:cc:c4:7a:01:
f1:45:df:bd:be:13:4e:4e:6e:3e:bc:e0:b1:77:8b:d7:f0:0f:
08:3a:cf:79:2d:eb:77:f4:d7:ca:4e:cc:56:a2:89:ef:25:53:
21:09:bb:fb:a1:37:bd:20:68:56:5b:22:b9:86:78:78:d4:02:
55:04:cb:89:4c:43:14:af:e5:56:94:68:0e:9b:f9:8c:9f:33:
17:74:7e:3f:5a:73:48:99:b5:9e:22:d2:a1:e5:9e:85:08:ce:
19:61:21:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5apVMYvk0j4mU2HR4tTP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOGM0ZjgxMGQ3YTIwYTc4M2E0ZmFiMWMwMzQ0NjdiODI1
MDUxYjkwHhcNMjUwNjI5MDIwMDU5WhcNMjUwNjMwMDIwMDU5WjAzMTEwLwYDVQQD
Eyg3MDMyYWI0YmU5YjM2OGFmMzVmYzkzZDJhZTk3NDQ4MmJhNjI4Zjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYa4qUh5xF0Oaih6JuK/+jfxIkju
rLXU7KtiSui30sTGQBShFDyDxuI2mkELvZjvRo6lBizJaIuu3FZkV82vk4vzqcWt
vdt5rZ7vloICoTr2oSiDuIhKzKn9BGKatd0QWI1PMx4/IIRvQWPeREg+k/7tkNZN
OLls/UXOazQsV83s9eVCZ8MxXI1BZoB3xKKBb1KySz1zNW2s3L2HiKCtXfP3zQDA
LdeAST+FR1PmbUHWviGGrqZgm9lF9V44QSep63sXzbJGRFEaEndN/TfgjGE410Py
1SGWUF2gvsIHW0KL/F57TavtGCGfeucbs4e4ljtdSz5sfdLbmFVeVXtxXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAyq0vps2ivNfyT0q6XRIK6Yo90MB8GA1UdIwQY
MBaAFIOMT4ENeiCng6T6scA0RnuCUFG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNTA0MjMtZmE5MS00YTIyLWI4M2Et
ODNlNDc1ODBiM2VjLzEvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yNTA0MjMtZmE5MS00YTIyLWI4M2EtODNlNDc1ODBiM2Vj
LzEvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYZ4+/9w
fcJF0eZ72ld9Rf4nk9r2x1ycK2oAoWPidpCwZFtrfZMSyL2fKDZXX+ZDHWp1d3jf
I7QAsq++q/PxRDFPT/p/0T1UGpLfPYfJ3sN3icZ6Lr6/jH7Dqc4SD5IMZxHFmI1u
Gz6dvA4jnmy2GEF+vEqtLw+fqfvtpgDDCfQ489kWGrPLDX4ZkIVOSwdjTi1BkYho
PlL1y29KUpTMxHoB8UXfvb4TTk5uPrzgsXeL1/APCDrPeS3rd/TXyk7MVqKJ7yVT
IQm7+6E3vSBoVlsiuYZ4eNQCVQTLiUxDFK/lVpRoDpv5jJ8zF3R+P1pzSJm1niLS
oeWehQjOGWEhow==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:29 2025 by rpki-client