Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
File: G6jqOiKIpq-PZKg4MALHQIVXmgc.mft (raw, json)
Hash identifier: ORj3p08tY1SLvnCqD8s6BhD43altCcrmQ93JcVZ3lZY=
Subject key identifier: DD:A2:1D:34:5C:56:9C:9C:F9:E1:67:BE:D4:CD:12:C3:C9:26:BA:0A
Authority key identifier: 1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
Certificate issuer: /CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Certificate serial: 0197B7B320000F229CD750C3ED7CB97E87B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
Manifest number: 1450
Signing time: Sat 28 Jun 2025 18:00:58 +0000
Manifest this update: Sat 28 Jun 2025 18:00:58 +0000
Manifest next update: Sun 29 Jun 2025 18:00:58 +0000
Files and hashes: 1: G6jqOiKIpq-PZKg4MALHQIVXmgc.crl (hash: olW2/h8r54yJmYfD3xZ2Wo3AqieacQeOfJutXxPmQho=)
2: awSvsuAzEkNxIrYxJqTZDb_nVnE.roa (hash: 3jZ+yIojuG+AZ6SFsISQRAEfZSYSxHFN/YCIQpbx+o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:20:00:0f:22:9c:d7:50:c3:ed:7c:b9:7e:87:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Validity
Not Before: Jun 28 18:00:58 2025 GMT
Not After : Jun 29 18:00:58 2025 GMT
Subject: CN=dda21d345c569c9cf9e167bed4cd12c3c926ba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:1a:17:b0:d2:00:f4:61:83:36:03:43:ac:
30:a0:9c:9a:8b:66:a9:ce:99:2c:51:fa:b7:95:ec:
0c:03:13:4b:93:e0:d2:6b:aa:26:ca:8f:8d:7f:49:
f8:13:1d:59:01:74:51:41:80:d2:e6:f9:3b:16:aa:
97:e8:ee:63:ad:65:f2:f3:79:3e:b2:80:9e:37:48:
dc:c0:6b:ce:f2:ea:e3:fa:62:c4:1c:9d:1e:6a:f1:
38:8c:31:7e:74:37:4b:4f:1b:30:b6:40:cd:95:8c:
4e:3a:09:ed:0e:4c:12:8f:64:30:59:f9:49:b7:09:
d9:8f:5a:cd:d0:3a:41:0a:42:e5:45:b5:2e:36:d0:
f2:b4:30:a9:70:d9:ec:8f:3d:c7:04:a2:8d:33:0e:
82:91:ea:80:a4:00:f6:d1:4f:07:45:6e:17:d4:37:
9c:13:41:77:1a:4e:da:cb:7b:1a:87:71:12:b1:1e:
42:cb:7b:99:23:ae:36:28:27:70:05:cc:e0:4a:62:
1f:58:13:1a:a6:b9:5d:8c:31:eb:0c:60:03:95:5e:
d5:c4:cc:0f:b4:7c:e6:43:26:43:2e:d4:0c:cd:00:
78:ce:85:e0:57:ba:b1:64:50:7e:c3:51:7b:d9:0b:
07:5b:20:bb:8a:db:b3:1a:88:38:b4:f6:3e:bc:04:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A2:1D:34:5C:56:9C:9C:F9:E1:67:BE:D4:CD:12:C3:C9:26:BA:0A
X509v3 Authority Key Identifier:
keyid:1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c5:5e:e9:01:39:ce:b2:1e:8b:b0:a4:1e:a3:2b:cc:fc:be:
60:d0:6b:43:f4:98:0b:5f:11:87:03:22:8f:31:ee:6f:55:0b:
85:82:7b:3b:42:25:a4:c2:a8:18:6d:59:78:6a:df:ce:97:ab:
e6:dc:26:ac:bf:2a:ad:2c:36:66:39:69:8c:cf:b9:c5:0d:91:
f5:8a:1f:77:01:68:ad:cf:7f:d8:ec:5b:e5:df:6b:78:7c:4b:
1d:41:96:c8:67:1e:df:a6:78:12:7a:a2:e7:4e:35:89:75:d7:
e4:db:9c:8e:af:aa:c3:ec:ba:d2:ba:8c:5f:d6:13:53:6d:0c:
24:eb:93:69:ac:fa:69:ea:c5:33:48:3a:28:59:0c:d1:5d:67:
6b:88:81:ba:fd:3e:66:93:10:e1:d2:e6:f0:78:4d:17:f3:29:
1d:26:a9:9b:3c:1b:13:dd:e3:ae:8f:13:90:91:64:52:5a:28:
66:87:eb:16:1c:f4:cf:58:1c:5e:14:44:e0:dd:3a:a1:a6:d2:
b5:39:67:98:6c:32:a3:80:c0:00:fe:14:b6:12:b1:54:3f:59:
77:66:ab:dc:12:12:b6:c6:22:be:57:0b:f4:d8:a4:31:60:e1:
99:93:39:1c:fa:8a:40:30:51:75:ed:d6:31:57:f3:f6:2f:31:
99:cd:d1:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3syAADyKc11DD7Xy5foe4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYThlYTNhMjI4OGE2YWY4ZjY0YTgzODMwMDJjNzQwODU1
NzlhMDcwHhcNMjUwNjI4MTgwMDU4WhcNMjUwNjI5MTgwMDU4WjAzMTEwLwYDVQQD
EyhkZGEyMWQzNDVjNTY5YzljZjllMTY3YmVkNGNkMTJjM2M5MjZiYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvMaF7DSAPRhgzYDQ6wwoJyai2ap
zpksUfq3lewMAxNLk+DSa6omyo+Nf0n4Ex1ZAXRRQYDS5vk7FqqX6O5jrWXy83k+
soCeN0jcwGvO8urj+mLEHJ0eavE4jDF+dDdLTxswtkDNlYxOOgntDkwSj2QwWflJ
twnZj1rN0DpBCkLlRbUuNtDytDCpcNnsjz3HBKKNMw6CkeqApAD20U8HRW4X1Dec
E0F3Gk7ay3sah3ESsR5Cy3uZI642KCdwBczgSmIfWBMaprldjDHrDGADlV7VxMwP
tHzmQyZDLtQMzQB4zoXgV7qxZFB+w1F72QsHWyC7ituzGog4tPY+vASIbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2iHTRcVpyc+eFnvtTNEsPJJroKMB8GA1UdIwQY
MBaAFBuo6joiiKavj2SoODACx0CFV5oHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZqcU9pS0lwcS1QWktnNE1BTEhRSVZYbWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jMGIyODMtODhiOS00M2NkLWIwOGYt
YThlYTQzMjUzZWQ1LzEvRzZqcU9pS0lwcS1QWktnNE1BTEhRSVZYbWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9jMGIyODMtODhiOS00M2NkLWIwOGYtYThlYTQzMjUzZWQ1
LzEvRzZqcU9pS0lwcS1QWktnNE1BTEhRSVZYbWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8Ve6QE5
zrIei7CkHqMrzPy+YNBrQ/SYC18RhwMijzHub1ULhYJ7O0IlpMKoGG1ZeGrfzper
5twmrL8qrSw2ZjlpjM+5xQ2R9YofdwForc9/2Oxb5d9reHxLHUGWyGce36Z4Enqi
5041iXXX5Nucjq+qw+y60rqMX9YTU20MJOuTaaz6aerFM0g6KFkM0V1na4iBuv0+
ZpMQ4dLm8HhNF/MpHSapmzwbE93jro8TkJFkUlooZofrFhz0z1gcXhRE4N06oabS
tTlnmGwyo4DAAP4UthKxVD9Zd2ar3BIStsYivlcL9NikMWDhmZM5HPqKQDBRde3W
MVfz9i8xmc3RmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:30 2025 by rpki-client