Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
File: ga63YipE0jwqRbTQ30DWzcwzJB0.mft (raw, json)
Hash identifier: J89MdzwskLIrCNoq0m3voko5GS2W5tt9aItESQVCnKk=
Subject key identifier: C7:0F:C8:08:09:09:34:12:24:B0:1A:2B:12:D3:F6:4F:1A:C6:53:80
Authority key identifier: 81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
Certificate issuer: /CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Certificate serial: 0197B933B99F13EA0B0715FBAB2F4C300C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
Manifest number: 0644
Signing time: Sun 29 Jun 2025 01:01:03 +0000
Manifest this update: Sun 29 Jun 2025 01:01:03 +0000
Manifest next update: Mon 30 Jun 2025 01:01:03 +0000
Files and hashes: 1: TdvnZ-pSKLZ2di0IsrjKM1Y6TNQ.roa (hash: 3haz/IHoayXe0sYmFVaRZdqvibPOZRqi6vqfWqU727k=)
2: ga63YipE0jwqRbTQ30DWzcwzJB0.crl (hash: SEAVTA+PH+jBMaaRWfuX22hM+h3ukqBziGhvjgkUrAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:b9:9f:13:ea:0b:07:15:fb:ab:2f:4c:30:0c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Validity
Not Before: Jun 29 01:01:03 2025 GMT
Not After : Jun 30 01:01:03 2025 GMT
Subject: CN=c70fc8080909341224b01a2b12d3f64f1ac65380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:b7:59:e5:7b:86:28:1d:9b:4e:e3:11:69:
69:2f:26:50:92:19:a6:75:f3:13:e1:ac:e7:81:4d:
cb:86:9e:1d:6d:ba:bf:58:12:db:49:97:1d:58:7e:
be:b0:b1:6f:a4:1a:45:79:6c:be:91:2c:ad:7b:b7:
59:0f:ab:bd:ce:5c:f5:c5:49:f3:41:69:f8:83:a8:
42:25:80:07:6f:18:7d:57:0a:89:f8:c4:11:28:25:
4c:56:f1:5b:c6:d8:ba:83:b0:91:7a:ba:7f:7e:4b:
0d:41:16:3e:fa:a5:44:91:43:d8:5a:16:d6:f0:f3:
77:94:b2:8c:0c:12:e5:4c:68:a8:71:9c:be:b7:53:
a3:88:1c:2f:6d:80:e9:6a:ed:1f:f9:3f:3a:fe:cb:
ff:61:41:2c:00:77:f3:27:7d:8b:86:e0:27:3a:7c:
d0:6d:cf:14:b8:a6:de:9d:e6:c6:6d:7e:ff:2e:a3:
59:28:ba:d4:c5:1d:a5:98:75:0a:4b:07:4e:02:c9:
e7:83:dc:c4:60:1d:4e:aa:19:8a:01:13:f1:9f:c9:
a3:37:66:76:ca:4b:4d:6e:a8:43:c0:3a:91:6e:68:
38:96:e4:a3:45:4e:44:e0:28:ee:62:3e:77:88:6c:
42:b9:e1:ad:05:19:5b:35:37:e9:9b:31:2e:76:e7:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0F:C8:08:09:09:34:12:24:B0:1A:2B:12:D3:F6:4F:1A:C6:53:80
X509v3 Authority Key Identifier:
keyid:81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6b:6a:a4:2c:ce:8c:92:46:ea:a3:a9:d3:e4:ac:cb:41:0f:
8f:be:1f:9b:5e:ac:e8:5d:3b:58:e8:9a:c0:73:e9:ba:a5:96:
cf:1d:c4:f0:59:bf:07:af:7e:13:9d:c2:6a:29:a5:09:c9:c3:
79:e7:ee:6a:6b:70:9e:4f:92:41:a6:52:84:dd:9f:9b:cf:0c:
04:64:ba:93:1f:c7:af:ac:5f:c6:b6:b7:03:a6:14:75:df:43:
56:43:3d:0f:11:db:35:d5:d3:30:51:fb:4f:da:11:e8:82:7c:
fc:8c:80:45:4e:9c:5c:1d:09:c3:26:31:a2:2a:13:c8:b4:99:
71:85:ba:58:e6:61:5d:1e:3f:86:b4:58:bd:f3:d2:61:d6:b4:
b2:bd:50:06:4d:eb:b2:d1:cb:a6:45:f8:fc:55:2a:ae:ca:b7:
a1:4a:2f:b4:33:36:d5:00:f9:86:15:19:d7:33:91:2b:16:1a:
ec:09:cd:45:10:d7:be:55:e6:32:4d:f7:b8:d5:f2:99:61:04:
d2:95:1b:cb:aa:9d:58:48:d8:97:13:31:dc:1f:29:4b:a4:92:
3d:75:55:0e:df:3a:c4:94:eb:60:33:e6:07:d2:e9:00:20:6e:
2e:9f:82:d9:93:5d:6a:69:e1:37:d9:28:dd:83:23:60:d9:37:
45:16:a1:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5M7mfE+oLBxX7qy9MMAxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYWViNzYyMmE0NGQyM2MyYTQ1YjRkMGRmNDBkNmNkY2Mz
MzI0MWQwHhcNMjUwNjI5MDEwMTAzWhcNMjUwNjMwMDEwMTAzWjAzMTEwLwYDVQQD
EyhjNzBmYzgwODA5MDkzNDEyMjRiMDFhMmIxMmQzZjY0ZjFhYzY1MzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+63WeV7higdm07jEWlpLyZQkhmm
dfMT4azngU3Lhp4dbbq/WBLbSZcdWH6+sLFvpBpFeWy+kSyte7dZD6u9zlz1xUnz
QWn4g6hCJYAHbxh9VwqJ+MQRKCVMVvFbxti6g7CRerp/fksNQRY++qVEkUPYWhbW
8PN3lLKMDBLlTGiocZy+t1OjiBwvbYDpau0f+T86/sv/YUEsAHfzJ32LhuAnOnzQ
bc8UuKbenebGbX7/LqNZKLrUxR2lmHUKSwdOAsnng9zEYB1OqhmKARPxn8mjN2Z2
yktNbqhDwDqRbmg4luSjRU5E4CjuYj53iGxCueGtBRlbNTfpmzEududmKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcPyAgJCTQSJLAaKxLT9k8axlOAMB8GA1UdIwQY
MBaAFIGut2IqRNI8KkW00N9A1s3MMyQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2E2M1lpcEUwandxUmJUUTMwRFd6Y3d6SkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zMzFjZTYtZTQyOC00MWZhLWJiMTAt
ZGIzYWZkM2Q3NjJlLzEvZ2E2M1lpcEUwandxUmJUUTMwRFd6Y3d6SkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zMzFjZTYtZTQyOC00MWZhLWJiMTAtZGIzYWZkM2Q3NjJl
LzEvZ2E2M1lpcEUwandxUmJUUTMwRFd6Y3d6SkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmtqpCzO
jJJG6qOp0+Ssy0EPj74fm16s6F07WOiawHPpuqWWzx3E8Fm/B69+E53CaimlCcnD
eefuamtwnk+SQaZShN2fm88MBGS6kx/Hr6xfxra3A6YUdd9DVkM9DxHbNdXTMFH7
T9oR6IJ8/IyARU6cXB0JwyYxoioTyLSZcYW6WOZhXR4/hrRYvfPSYda0sr1QBk3r
stHLpkX4/FUqrsq3oUovtDM21QD5hhUZ1zORKxYa7AnNRRDXvlXmMk33uNXymWEE
0pUby6qdWEjYlxMx3B8pS6SSPXVVDt86xJTrYDPmB9LpACBuLp+C2ZNdamnhN9ko
3YMjYNk3RRahag==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:41:41 2025 by rpki-client