Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: 6ODQIP8K2TMu7LulOLAaZRWfXlMk57/wXd6Cqo04km4=
Subject key identifier: 56:F3:89:ED:29:52:8E:CE:01:9E:A5:09:BB:D9:E3:BF:19:EF:FC:FD
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 0197B632DC92749400E3C13728D858236BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 068F
Signing time: Sat 28 Jun 2025 11:01:15 +0000
Manifest this update: Sat 28 Jun 2025 11:01:15 +0000
Manifest next update: Sun 29 Jun 2025 11:01:15 +0000
Files and hashes: 1: 5lbTUO-rP5txsV_jlKv3vzS10Vc.roa (hash: VgScyBVTOIb/scuSoZmb+259XQHu/6r7pBA0Gc4Wdqs=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: 7k5Mli7lqS+iOKsGrhvE6m+MtdQt/Hsmsipwwr+87hY=)
3: RR-wG56YXYGUEbsQFd9GOjHnKvM.roa (hash: eG7mgkU6tN6hBwmEUuDYJD2Lxu/DlOxJUe50nzg9em4=)
4: TdRFPSiE6z0QGX9lW2WUDs-qrvc.roa (hash: uIOA5ClG5A+YjWezToN8AYQViV6aWN3VOQLxA91W/R8=)
5: W9jLQPfJ-gf7W45fE6xy024pvso.roa (hash: myRMJIwFBs9jjITp4SZwdlJzPIPHFfsrLal6I49sinM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:dc:92:74:94:00:e3:c1:37:28:d8:58:23:6b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Jun 28 11:01:15 2025 GMT
Not After : Jun 29 11:01:15 2025 GMT
Subject: CN=56f389ed29528ece019ea509bbd9e3bf19effcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:15:a6:72:6c:5e:1c:eb:5f:8e:54:93:0a:
d1:dd:e3:c5:90:99:f9:fd:42:0f:5e:bd:17:fd:89:
97:c9:9c:9f:d3:4e:81:b7:22:66:83:5d:e8:89:3b:
a4:da:fb:e6:b6:db:1c:fb:65:9d:e4:4d:fc:b5:de:
fa:af:e3:98:c9:98:c5:35:b9:9e:d7:b1:e3:b4:65:
ec:a5:ba:6b:6a:86:cc:5f:84:8a:38:76:f4:be:28:
be:bf:90:06:df:42:a0:6c:d8:4b:2b:b7:bb:86:af:
1c:c3:12:bd:73:19:96:6e:d6:0a:60:b6:01:c3:f2:
93:9c:12:42:fa:d5:a0:5c:a9:04:cf:e3:c5:74:de:
d2:e4:ef:9d:a9:72:2d:2b:02:ca:3a:78:20:dd:b6:
56:73:56:78:1d:28:b9:20:c6:3e:9b:e7:c4:94:4d:
ef:61:0f:14:b7:10:9e:5b:9f:58:2c:95:5a:de:2e:
d8:86:68:4a:a8:b7:f0:6f:d7:dd:c8:05:93:97:8e:
1c:34:01:f5:be:7f:35:0d:b0:94:10:16:6b:0a:0a:
43:10:98:34:8f:f9:64:65:92:a3:e4:60:6a:5c:8c:
df:de:5e:d4:d3:69:08:70:3e:1f:f9:0b:6c:c1:f5:
a3:c5:d6:a2:fe:a7:59:57:a7:2f:7a:59:49:cb:3b:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F3:89:ED:29:52:8E:CE:01:9E:A5:09:BB:D9:E3:BF:19:EF:FC:FD
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c1:c7:2d:8b:12:8c:45:95:78:87:f6:8b:3b:64:f0:74:52:
24:bc:21:7e:b1:66:d1:b2:4b:cf:af:b2:0e:1a:ad:69:6b:32:
05:a0:04:b3:f9:7f:12:46:76:03:5c:c4:7b:86:40:10:3f:c2:
15:35:c0:d8:ba:61:8b:95:34:56:bf:e9:18:5f:07:43:5d:bc:
ae:4b:d6:29:e2:1f:77:49:59:11:01:c8:26:35:23:1e:5a:03:
d0:f7:c5:78:ac:ad:bf:98:5b:2a:6b:9e:3f:46:63:6e:6b:cc:
12:b1:33:81:a2:11:e2:9a:fb:f2:97:49:fa:ba:97:9d:87:b5:
25:fc:d1:ec:f8:a7:26:2a:b6:81:c4:8a:bc:b9:cd:de:c0:63:
85:54:50:24:e8:c7:8f:23:aa:08:65:cb:ed:28:6c:ba:12:a0:
c3:40:73:2a:35:43:65:10:73:7f:8e:95:ca:b3:18:fe:9c:cd:
2d:28:9c:31:73:58:6b:82:ab:03:5d:72:03:b9:55:58:36:69:
a9:c7:6d:5b:7e:81:22:82:26:80:28:4f:32:e0:96:38:57:a1:
dd:10:a3:5a:97:b7:23:66:10:c9:8e:4f:dc:d7:e0:1a:e9:11:
08:dc:52:c5:e2:48:e5:fd:69:b3:c7:13:99:bd:04:79:33:99:
dc:0c:30:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MtySdJQA48E3KNhYI2vKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ODg2MDA3ZGExNzMwYjA3NzBkODYwNGRiNzNkMTJmZDI2
NGYzZjkwHhcNMjUwNjI4MTEwMTE1WhcNMjUwNjI5MTEwMTE1WjAzMTEwLwYDVQQD
Eyg1NmYzODllZDI5NTI4ZWNlMDE5ZWE1MDliYmQ5ZTNiZjE5ZWZmY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHwVpnJsXhzrX45UkwrR3ePFkJn5
/UIPXr0X/YmXyZyf006BtyJmg13oiTuk2vvmttsc+2Wd5E38td76r+OYyZjFNbme
17HjtGXspbpraobMX4SKOHb0vii+v5AG30KgbNhLK7e7hq8cwxK9cxmWbtYKYLYB
w/KTnBJC+tWgXKkEz+PFdN7S5O+dqXItKwLKOngg3bZWc1Z4HSi5IMY+m+fElE3v
YQ8UtxCeW59YLJVa3i7YhmhKqLfwb9fdyAWTl44cNAH1vn81DbCUEBZrCgpDEJg0
j/lkZZKj5GBqXIzf3l7U02kIcD4f+QtswfWjxdai/qdZV6cvellJyzvifQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbzie0pUo7OAZ6lCbvZ478Z7/z9MB8GA1UdIwQY
MBaAFBiIYAfaFzCwdw2GBNtz0S/SZPP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEt
MTY5YzgzNmJkNmIwLzEvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEtMTY5YzgzNmJkNmIw
LzEvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcHHLYsS
jEWVeIf2iztk8HRSJLwhfrFm0bJLz6+yDhqtaWsyBaAEs/l/EkZ2A1zEe4ZAED/C
FTXA2Lphi5U0Vr/pGF8HQ128rkvWKeIfd0lZEQHIJjUjHloD0PfFeKytv5hbKmue
P0ZjbmvMErEzgaIR4pr78pdJ+rqXnYe1JfzR7PinJiq2gcSKvLnN3sBjhVRQJOjH
jyOqCGXL7ShsuhKgw0BzKjVDZRBzf46VyrMY/pzNLSicMXNYa4KrA11yA7lVWDZp
qcdtW36BIoImgChPMuCWOFeh3RCjWpe3I2YQyY5P3NfgGukRCNxSxeJI5f1ps8cT
mb0EeTOZ3Aww7Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:20:53 2025 by rpki-client