Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
File: gMez3pa5HtxunIXZ1aZoQZIDtfU.mft (raw, json)
Hash identifier: W10Omm9a2bjWCBXFGdhE63lQBtXLdUcLOwfN43J1vgg=
Subject key identifier: 8B:E4:89:D5:C1:38:27:7C:C1:13:9F:DE:50:3D:C3:36:48:38:FA:00
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Certificate issuer: /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial: 0197BC6C47DD7956C3D45EC7E4CCCCAF1D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
Manifest number: 0393
Signing time: Sun 29 Jun 2025 16:01:42 +0000
Manifest this update: Sun 29 Jun 2025 16:01:42 +0000
Manifest next update: Mon 30 Jun 2025 16:01:42 +0000
Files and hashes: 1: gMez3pa5HtxunIXZ1aZoQZIDtfU.crl (hash: O7xNR4KQ6+nzNEU4cGpEHBUTiJJqPuwBAc7FrmMyVNk=)
2: xVzCoBRTedY1vT9C7xN3NLO-WeY.roa (hash: ystLlP8JPbF13VOw8QCBVAQ5cldgA4v4fXVvBu8BWIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:6c:47:dd:79:56:c3:d4:5e:c7:e4:cc:cc:af:1d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Validity
Not Before: Jun 29 16:01:42 2025 GMT
Not After : Jun 30 16:01:42 2025 GMT
Subject: CN=8be489d5c138277cc1139fde503dc3364838fa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:f1:61:52:43:42:9f:2f:c3:3e:2f:3b:91:
f3:89:ae:ba:a2:1c:5f:01:2b:1b:7f:d8:4e:7e:61:
3b:4f:a4:03:5a:d9:b9:17:71:4b:85:66:1a:69:24:
32:ee:50:76:7e:56:ca:ee:e0:9f:93:14:9c:4a:3b:
61:fa:45:d8:62:aa:6e:6a:48:a9:e6:55:a3:4b:1e:
fe:ba:f2:29:59:6c:58:fe:f4:54:2b:3a:af:e8:41:
c2:b8:e8:ba:65:dc:2f:84:be:3b:2a:21:7e:44:ca:
9e:95:93:e5:d1:82:83:e9:19:7c:37:1a:25:25:68:
f1:fc:23:4c:3b:06:6c:12:4f:37:47:8c:f4:9d:96:
db:ea:2c:92:c0:85:27:e7:23:e0:de:fa:c7:4c:c3:
6e:f3:17:f5:49:d0:03:23:72:4a:32:56:9e:04:97:
61:73:61:f0:38:17:00:c9:21:93:f5:d7:1f:c5:f0:
88:69:18:41:ab:ff:79:34:3d:59:30:fa:d8:21:65:
25:02:b1:79:a7:13:cb:4d:9b:09:a1:39:7e:fd:e1:
f0:c3:89:4b:28:86:e4:20:38:1d:ee:56:57:a0:7b:
1e:e3:24:71:e3:ac:a3:ca:76:0a:d3:e8:61:4e:72:
a9:58:32:9a:93:1d:38:89:99:b3:20:8b:9a:a6:ea:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E4:89:D5:C1:38:27:7C:C1:13:9F:DE:50:3D:C3:36:48:38:FA:00
X509v3 Authority Key Identifier:
keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b8:3a:04:54:11:1d:ed:81:6e:9c:58:9c:b3:d5:c2:1d:f5:
3a:2d:72:43:58:81:88:eb:00:84:b3:b3:36:54:30:0d:47:78:
3d:4a:e7:1e:43:4e:10:ad:98:50:01:ab:ac:fa:5c:4d:ab:83:
bc:b2:03:52:98:58:25:8a:28:f9:16:40:04:76:ac:60:78:1f:
36:df:13:47:1e:69:31:3f:dc:ee:b3:08:93:47:96:d7:9f:29:
60:85:9b:b8:fe:c0:c8:f0:49:76:a8:dc:64:11:18:3e:d8:d9:
1a:e2:69:57:6a:0f:0a:c2:f8:27:6a:30:36:bc:0c:06:41:54:
4c:90:03:0f:53:a7:cf:8e:f0:2b:84:a4:f9:6e:69:70:d5:ba:
f1:ec:09:da:0a:6e:9d:a4:44:e6:d7:a9:48:26:35:d8:a0:bf:
35:89:27:c1:67:58:4c:5a:d2:85:6f:66:25:b4:05:54:79:01:
7c:77:62:11:27:54:7e:94:83:29:8c:c1:ae:fa:d8:94:b4:85:
8a:cb:bc:3c:3a:43:92:27:05:2a:2d:84:e6:b4:c5:bf:51:80:
2d:b9:dc:40:08:35:26:31:6a:1e:8d:aa:2f:53:89:1d:4c:48:
ff:f5:6e:9d:52:8c:b5:68:0c:c8:e7:f6:bd:eb:bd:37:44:ce:
b5:3e:b1:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe8bEfdeVbD1F7H5MzMrx1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYzdiM2RlOTZiOTFlZGM2ZTljODVkOWQ1YTY2ODQxOTIw
M2I1ZjUwHhcNMjUwNjI5MTYwMTQyWhcNMjUwNjMwMTYwMTQyWjAzMTEwLwYDVQQD
Eyg4YmU0ODlkNWMxMzgyNzdjYzExMzlmZGU1MDNkYzMzNjQ4MzhmYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnLxYVJDQp8vwz4vO5Hzia66ohxf
ASsbf9hOfmE7T6QDWtm5F3FLhWYaaSQy7lB2flbK7uCfkxScSjth+kXYYqpuakip
5lWjSx7+uvIpWWxY/vRUKzqv6EHCuOi6ZdwvhL47KiF+RMqelZPl0YKD6Rl8Nxol
JWjx/CNMOwZsEk83R4z0nZbb6iySwIUn5yPg3vrHTMNu8xf1SdADI3JKMlaeBJdh
c2HwOBcAySGT9dcfxfCIaRhBq/95ND1ZMPrYIWUlArF5pxPLTZsJoTl+/eHww4lL
KIbkIDgd7lZXoHse4yRx46yjynYK0+hhTnKpWDKakx04iZmzIIuapupEPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvkidXBOCd8wROf3lA9wzZIOPoAMB8GA1UdIwQY
MBaAFIDHs96WuR7cbpyF2dWmaEGSA7X1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMzAxZmItMzE3NC00NWMzLWE0NDct
YTdmY2ZiNTI5ZGM3LzEvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jMzAxZmItMzE3NC00NWMzLWE0NDctYTdmY2ZiNTI5ZGM3
LzEvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt7g6BFQR
He2BbpxYnLPVwh31Oi1yQ1iBiOsAhLOzNlQwDUd4PUrnHkNOEK2YUAGrrPpcTauD
vLIDUphYJYoo+RZABHasYHgfNt8TRx5pMT/c7rMIk0eW158pYIWbuP7AyPBJdqjc
ZBEYPtjZGuJpV2oPCsL4J2owNrwMBkFUTJADD1Onz47wK4Sk+W5pcNW68ewJ2gpu
naRE5tepSCY12KC/NYknwWdYTFrShW9mJbQFVHkBfHdiESdUfpSDKYzBrvrYlLSF
isu8PDpDkicFKi2E5rTFv1GALbncQAg1JjFqHo2qL1OJHUxI//VunVKMtWgMyOf2
veu9N0TOtT6xkg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 02:10:46 2025 by rpki-client