Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json)
Hash identifier: pgGU05E7ppJuZRrT56uuIXHLFl2UgdSOPwWIcRjrZOU=
Subject key identifier: 40:EB:6B:8E:BC:A1:32:BA:3A:36:F2:BA:F4:A2:D7:34:9B:A8:F0:54
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 0197B96A723A5D78A2AA9C96B4302F63F855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
Manifest number: 0305
Signing time: Sun 29 Jun 2025 02:00:50 +0000
Manifest this update: Sun 29 Jun 2025 02:00:50 +0000
Manifest next update: Mon 30 Jun 2025 02:00:50 +0000
Files and hashes: 1: NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa (hash: a1KXZCaEoxN1UkOcv0YA7zkHr19aSLSv8QON/lo/20Y=)
2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: bC8qPuxa8eTdVqU2TEnlMQ73rptLlxE/48W5u9hfJBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:72:3a:5d:78:a2:aa:9c:96:b4:30:2f:63:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Jun 29 02:00:50 2025 GMT
Not After : Jun 30 02:00:50 2025 GMT
Subject: CN=40eb6b8ebca132ba3a36f2baf4a2d7349ba8f054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:08:b6:7f:4e:08:2d:5b:55:b8:7c:b0:e4:
39:5d:b3:98:e6:ea:f3:da:65:b0:fc:94:94:5a:30:
a9:32:56:99:d1:e5:fd:56:1a:68:b3:ab:f8:83:72:
fb:07:94:73:10:3e:a2:d9:28:2b:4b:e2:9e:3b:45:
f2:1a:9a:76:ce:34:b1:b5:02:7c:76:f6:65:29:76:
85:79:dd:9f:3e:46:1a:1d:73:9c:c4:0a:a2:12:40:
25:50:37:02:a7:53:ae:99:73:3a:2f:43:5c:3d:34:
5e:7d:a7:a8:7a:3e:36:c9:7e:2a:69:d9:fe:2a:34:
45:01:e6:9b:c4:67:bd:6e:32:59:31:a9:d0:33:52:
cc:08:da:21:68:c7:06:8c:e7:dc:57:75:6c:8c:0e:
eb:61:f1:fe:b8:a6:60:43:eb:b0:62:19:fd:2c:4e:
34:ff:92:c9:0c:a2:c8:b9:3b:55:b4:41:d0:86:1b:
52:85:06:2a:71:3e:cc:03:f6:10:7b:48:26:9c:00:
65:e8:84:b0:98:a6:86:2b:5c:ac:60:b6:0f:27:25:
55:e6:c4:ac:eb:8b:dd:f1:3d:ab:5c:88:ee:2d:14:
49:87:86:63:0b:1e:95:81:4a:24:30:35:1f:0c:62:
63:94:56:ba:56:1c:ea:49:69:04:89:97:b6:2c:65:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EB:6B:8E:BC:A1:32:BA:3A:36:F2:BA:F4:A2:D7:34:9B:A8:F0:54
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:60:08:33:b2:95:bd:6c:0e:8c:a7:49:c6:69:6f:de:29:91:
43:b3:bf:60:07:bc:cb:fc:33:f1:aa:69:cc:4f:10:6a:52:e2:
46:3c:f4:e2:8f:00:cb:25:c1:af:58:6f:30:3b:90:83:f4:5a:
99:cd:51:25:86:73:ab:d1:02:2d:14:fc:3a:ae:04:42:a5:35:
44:90:8c:ff:91:56:aa:14:4d:e6:8e:0c:1f:98:2c:20:d7:13:
96:f8:41:6c:d3:4d:3e:1b:74:ab:f0:9f:07:42:9f:b3:2a:d5:
79:a0:25:b7:53:25:c4:79:6b:26:d0:bb:af:5e:b2:cb:d0:22:
b1:a1:cd:08:9f:62:9f:65:40:5e:5a:16:dc:3a:72:73:78:35:
a6:60:b3:1a:84:6b:b8:9c:3f:86:68:ad:0f:68:79:cd:8b:b0:
36:28:c1:37:51:79:e2:d1:3d:43:b8:eb:8d:d3:50:d2:29:1d:
59:cb:bf:1d:eb:db:5d:4f:6f:ef:8e:2c:d3:e3:53:4c:c1:6b:
38:e0:80:11:45:ff:85:80:ac:2e:f0:f4:b0:dc:13:77:92:1f:
32:37:55:90:d8:c4:29:c5:df:56:1a:75:4c:97:ac:77:e2:a2:
40:62:22:53:aa:47:64:28:53:d9:ad:cc:63:12:3b:3e:fc:ed:
67:91:ac:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5anI6XXiiqpyWtDAvY/hVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOTgwNWY2NDgwMWRkOTM1OTk0MTRhNjI1MDliMTJhNTQw
MmY4NjgwHhcNMjUwNjI5MDIwMDUwWhcNMjUwNjMwMDIwMDUwWjAzMTEwLwYDVQQD
Eyg0MGViNmI4ZWJjYTEzMmJhM2EzNmYyYmFmNGEyZDczNDliYThmMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH4Itn9OCC1bVbh8sOQ5XbOY5urz
2mWw/JSUWjCpMlaZ0eX9Vhpos6v4g3L7B5RzED6i2SgrS+KeO0XyGpp2zjSxtQJ8
dvZlKXaFed2fPkYaHXOcxAqiEkAlUDcCp1OumXM6L0NcPTRefaeoej42yX4qadn+
KjRFAeabxGe9bjJZManQM1LMCNohaMcGjOfcV3VsjA7rYfH+uKZgQ+uwYhn9LE40
/5LJDKLIuTtVtEHQhhtShQYqcT7MA/YQe0gmnABl6ISwmKaGK1ysYLYPJyVV5sSs
64vd8T2rXIjuLRRJh4ZjCx6VgUokMDUfDGJjlFa6VhzqSWkEiZe2LGXBfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDra468oTK6OjbyuvSi1zSbqPBUMB8GA1UdIwQY
MBaAFI+YBfZIAd2TWZQUpiUJsSpUAvhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQt
ZTU4NGNkNWY4ZDExLzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQtZTU4NGNkNWY4ZDEx
LzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmAIM7KV
vWwOjKdJxmlv3imRQ7O/YAe8y/wz8appzE8QalLiRjz04o8AyyXBr1hvMDuQg/Ra
mc1RJYZzq9ECLRT8Oq4EQqU1RJCM/5FWqhRN5o4MH5gsINcTlvhBbNNNPht0q/Cf
B0KfsyrVeaAlt1MlxHlrJtC7r16yy9AisaHNCJ9in2VAXloW3Dpyc3g1pmCzGoRr
uJw/hmitD2h5zYuwNijBN1F54tE9Q7jrjdNQ0ikdWcu/HevbXU9v744s0+NTTMFr
OOCAEUX/hYCsLvD0sNwTd5IfMjdVkNjEKcXfVhp1TJesd+KiQGIiU6pHZChT2a3M
YxI7PvztZ5Gsdw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:21:38 2025 by rpki-client