Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: Wj/Gx53XCZOkierzaLXg/3c1AEXuN+/70sFixPEMmZI=
Subject key identifier: A8:06:06:4D:39:E4:52:3F:CA:5A:66:4C:F4:EB:B4:02:56:E2:21:F7
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 0197B70F1F39E9166C51D98567D05308B02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: 5yCdhwIAKXDjcmFe19N9CeL/y6GYpfmDm8bspjtwEow=)
2: qDh2JY1h_xNgvgx5Db5sVmUy5ks.roa (hash: I1r2aL4TOC/MGm5ShRW+1jSA/7hy7A6Iss+iJbXJ1A8=)
3: rj4zNee9qFUnSWdRyXBl1w5hL7U.roa (hash: ura4XN26mFPNxngI443E4Cbcpg3UZiyC6cycpOaLYgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1f:39:e9:16:6c:51:d9:85:67:d0:53:08:b0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=a806064d39e4523fca5a664cf4ebb40256e221f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:f1:fc:3b:86:72:38:c4:0c:ad:a8:87:7a:
7d:c6:02:20:84:75:3d:71:b7:a9:44:bc:4c:7a:5e:
1d:2f:c7:3e:f0:99:19:73:a0:b1:1e:5c:a7:4e:24:
dd:2a:65:40:02:e8:ed:d3:f4:d5:61:d0:18:7d:94:
08:90:08:66:70:f4:96:fa:f4:2c:6e:b1:a3:b0:4e:
53:9d:5c:90:47:0a:74:84:ee:bf:c1:0b:f5:30:cc:
f3:ce:52:eb:18:fa:ae:e1:ba:1d:c0:c1:4f:d3:45:
71:ab:31:68:39:05:c5:df:f4:a3:1d:63:96:ba:eb:
39:3a:ae:3c:14:6a:d9:57:fa:d5:95:91:1f:69:f8:
3b:49:47:ea:56:c4:04:35:91:ab:d2:66:ef:41:8e:
af:84:61:b4:d5:1b:ea:9a:6f:91:b9:77:45:bb:22:
2b:ce:f7:fb:e3:57:b0:ac:d0:c9:00:b4:54:b8:38:
b7:a9:f8:b1:22:af:26:cd:27:a3:88:7b:46:88:8f:
ad:04:d4:dd:f7:00:a2:4a:3d:eb:37:ee:b6:aa:97:
3a:6d:c5:dd:94:66:57:03:57:9d:8c:16:ec:34:1e:
25:63:5c:f2:44:44:c8:0c:ee:24:9f:3e:d7:ba:85:
91:ed:ce:69:2a:50:27:d5:d6:e5:cc:1c:05:15:d7:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:06:06:4D:39:E4:52:3F:CA:5A:66:4C:F4:EB:B4:02:56:E2:21:F7
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c3:9d:1c:9f:f1:3a:94:e0:65:ff:34:ac:3b:1b:16:ac:36:
ba:1a:1a:1f:82:d0:b8:b4:f8:b2:38:cf:ec:e3:48:7f:22:e7:
c9:d4:a5:1a:92:18:c6:c4:a3:31:3d:38:4d:ee:c2:c5:e8:e4:
8c:93:f5:4a:75:6c:a0:2f:a5:25:a8:e0:a6:40:48:d6:7b:a3:
f9:24:6a:45:80:27:16:28:96:41:3d:b3:ad:1a:91:1e:97:6a:
dc:2b:20:9a:ec:89:7e:3d:1b:1d:fd:64:19:f4:3d:82:b7:8c:
a8:e6:b4:75:5b:3e:a6:ed:4c:b9:a3:01:13:e8:b4:c9:a8:03:
1c:a0:c5:43:f3:89:20:d2:03:30:ca:33:b7:a4:ea:14:d8:b5:
71:a5:44:a1:d9:5c:4c:f5:77:3e:7c:1a:98:ea:ef:61:12:42:
0e:03:58:bb:b9:69:09:fc:02:03:1e:b8:9a:65:ba:6d:f8:a4:
66:ab:19:f3:e7:f9:7b:f0:28:9b:70:ff:1a:90:73:28:b0:f6:
09:03:21:4e:7c:e5:91:ee:61:b2:14:9d:d7:22:d1:b4:10:d0:
f7:b3:dc:87:6b:0d:f0:ca:0b:66:33:a0:5c:bf:a6:6b:bd:0d:
78:42:a3:e6:65:75:78:46:46:73:8a:6c:f2:bd:d1:c9:56:c2:
89:c2:59:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dx856RZsUdmFZ9BTCLAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMmY1YTZjMGI5NTY0N2YwNzAzNTBlNjUyNGUxMjIwZmJh
NDdmYTMwHhcNMjUwNjI4MTUwMTUwWhcNMjUwNjI5MTUwMTUwWjAzMTEwLwYDVQQD
EyhhODA2MDY0ZDM5ZTQ1MjNmY2E1YTY2NGNmNGViYjQwMjU2ZTIyMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRjx/DuGcjjEDK2oh3p9xgIghHU9
cbepRLxMel4dL8c+8JkZc6CxHlynTiTdKmVAAujt0/TVYdAYfZQIkAhmcPSW+vQs
brGjsE5TnVyQRwp0hO6/wQv1MMzzzlLrGPqu4bodwMFP00VxqzFoOQXF3/SjHWOW
uus5Oq48FGrZV/rVlZEfafg7SUfqVsQENZGr0mbvQY6vhGG01Rvqmm+RuXdFuyIr
zvf741ewrNDJALRUuDi3qfixIq8mzSejiHtGiI+tBNTd9wCiSj3rN+62qpc6bcXd
lGZXA1edjBbsNB4lY1zyRETIDO4knz7XuoWR7c5pKlAn1dblzBwFFdd7pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgGBk055FI/ylpmTPTrtAJW4iH3MB8GA1UdIwQY
MBaAFIIvWmwLlWR/BwNQ5lJOEiD7pH+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMt
NWQwZTA5YTAyMDRmLzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMtNWQwZTA5YTAyMDRm
LzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMOdHJ/x
OpTgZf80rDsbFqw2uhoaH4LQuLT4sjjP7ONIfyLnydSlGpIYxsSjMT04Te7Cxejk
jJP1SnVsoC+lJajgpkBI1nuj+SRqRYAnFiiWQT2zrRqRHpdq3CsgmuyJfj0bHf1k
GfQ9greMqOa0dVs+pu1MuaMBE+i0yagDHKDFQ/OJINIDMMozt6TqFNi1caVEodlc
TPV3PnwamOrvYRJCDgNYu7lpCfwCAx64mmW6bfikZqsZ8+f5e/Aom3D/GpBzKLD2
CQMhTnzlke5hshSd1yLRtBDQ97Pch2sN8MoLZjOgXL+ma70NeEKj5mV1eEZGc4ps
8r3RyVbCicJZXA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:33 2025 by rpki-client