Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
File: G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json)
Hash identifier: ZhL887bMmS4A+Dp57UAEOGm0SjPaUXUbll6Jwnrgzd8=
Subject key identifier: 28:B6:4F:C8:93:98:8C:B7:6E:00:5B:D5:92:E7:48:66:23:D2:5B:66
Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
Certificate issuer: /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Certificate serial: 0197B6A16294EF212A54ED4405233F977EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
Manifest number: 1495
Signing time: Sat 28 Jun 2025 13:01:59 +0000
Manifest this update: Sat 28 Jun 2025 13:01:59 +0000
Manifest next update: Sun 29 Jun 2025 13:01:59 +0000
Files and hashes: 1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: qYXdWOoKD45eV0fWwFh4ZIqaF7fgpMOQxV3d2u1lTGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:62:94:ef:21:2a:54:ed:44:05:23:3f:97:7e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Validity
Not Before: Jun 28 13:01:59 2025 GMT
Not After : Jun 29 13:01:59 2025 GMT
Subject: CN=28b64fc893988cb76e005bd592e7486623d25b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:12:7b:c0:64:ae:58:48:c8:24:df:2a:73:
50:d2:ea:6d:02:9b:66:aa:87:13:a9:a0:e3:28:1f:
ac:ab:dd:80:a8:e8:3b:ee:8d:0c:5a:25:55:47:de:
6c:86:fb:2d:25:13:9a:1d:4b:20:99:cc:31:ee:00:
e7:d9:9c:1f:62:37:04:e5:f1:c9:1a:38:43:5d:a7:
84:f6:b6:73:34:10:ea:d4:6a:d8:60:01:5f:1e:83:
d2:0b:98:24:79:dd:8a:4f:b6:95:0d:c3:a5:10:09:
ad:1d:7a:90:70:50:68:22:b8:87:11:f8:09:f1:5d:
2e:15:ac:f5:3e:e3:d1:df:92:4d:ef:39:f4:f3:a0:
bf:e5:fb:7b:10:ea:2f:ff:66:a0:f0:c3:97:03:c9:
a4:c5:d5:36:a5:6d:8f:9f:08:5b:e0:c7:d5:ca:41:
a3:08:ea:d6:83:39:02:6a:35:16:59:dc:3b:70:f2:
b1:59:20:e2:da:f3:41:c1:35:88:dd:4c:99:70:1b:
b7:ed:f0:14:90:49:11:c3:c8:c2:8a:d5:07:67:a5:
dc:93:3a:24:8b:d5:66:b3:b8:0f:82:bc:c2:ad:46:
90:d8:a7:b2:4f:a8:4e:29:57:2f:9d:5c:17:4e:71:
00:eb:bf:28:8c:92:ff:63:21:25:a5:b8:a4:ca:f1:
2e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B6:4F:C8:93:98:8C:B7:6E:00:5B:D5:92:E7:48:66:23:D2:5B:66
X509v3 Authority Key Identifier:
keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c8:b6:93:b9:00:6f:22:f2:9a:73:bc:f9:83:dd:25:dc:f1:
76:c5:17:01:98:f0:5c:57:dd:cb:fb:7d:d6:24:b5:2d:97:f0:
c7:0c:09:f6:94:13:63:85:59:54:91:4c:de:ba:ea:0a:37:39:
56:96:65:a0:5e:7c:b2:cd:55:8e:2a:eb:f8:4b:95:18:fe:77:
fd:32:61:08:5e:a0:5b:db:26:f7:22:13:a5:ec:f1:03:62:10:
ee:2d:16:5f:ba:a6:e4:95:9c:72:df:63:34:e3:dd:71:c1:2c:
02:a4:42:ca:5c:03:28:8e:dc:e4:b5:bc:8f:17:0a:28:67:d0:
db:a3:d1:fe:98:4b:5d:67:ce:a4:e5:8e:de:80:16:ee:e1:a2:
98:0b:f2:83:53:bb:e0:36:5d:d2:bc:59:78:40:40:60:db:ad:
2a:9e:62:b7:9f:3a:28:d6:70:d4:89:e6:2a:86:75:9d:4e:d6:
a0:bd:35:a2:e8:c0:cd:91:41:aa:9c:56:ee:9e:05:4d:04:04:
ae:b6:68:2a:26:4f:98:3b:ce:7e:9c:23:c8:ca:aa:69:25:16:
9e:e3:5a:a0:93:c0:64:01:ac:35:b4:dd:2f:98:99:44:8c:94:
98:c9:c9:7b:26:9e:8e:c0:f1:ff:59:31:f0:8e:3f:c7:87:2c:
bc:6d:ee:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oWKU7yEqVO1EBSM/l37yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWJiYmJlYjZlOTIyMzE3NmNhNWExZGYxNDk4OTg2MDE3
ZThlMjgwHhcNMjUwNjI4MTMwMTU5WhcNMjUwNjI5MTMwMTU5WjAzMTEwLwYDVQQD
EygyOGI2NGZjODkzOTg4Y2I3NmUwMDViZDU5MmU3NDg2NjIzZDI1YjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB4Se8BkrlhIyCTfKnNQ0uptAptm
qocTqaDjKB+sq92AqOg77o0MWiVVR95shvstJROaHUsgmcwx7gDn2ZwfYjcE5fHJ
GjhDXaeE9rZzNBDq1GrYYAFfHoPSC5gked2KT7aVDcOlEAmtHXqQcFBoIriHEfgJ
8V0uFaz1PuPR35JN7zn086C/5ft7EOov/2ag8MOXA8mkxdU2pW2Pnwhb4MfVykGj
COrWgzkCajUWWdw7cPKxWSDi2vNBwTWI3UyZcBu37fAUkEkRw8jCitUHZ6Xckzok
i9Vms7gPgrzCrUaQ2KeyT6hOKVcvnVwXTnEA678ojJL/YyElpbikyvEutQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCi2T8iTmIy3bgBb1ZLnSGYj0ltmMB8GA1UdIwQY
MBaAFBvru7626SIxdspaHfFJiYYBfo4oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84MzlmZDgtYzI4Yy00MTEyLTk3OWEt
N2VjNDAyZWNmYjVjLzEvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS84MzlmZDgtYzI4Yy00MTEyLTk3OWEtN2VjNDAyZWNmYjVj
LzEvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsi2k7kA
byLymnO8+YPdJdzxdsUXAZjwXFfdy/t91iS1LZfwxwwJ9pQTY4VZVJFM3rrqCjc5
VpZloF58ss1Vjirr+EuVGP53/TJhCF6gW9sm9yITpezxA2IQ7i0WX7qm5JWcct9j
NOPdccEsAqRCylwDKI7c5LW8jxcKKGfQ26PR/phLXWfOpOWO3oAW7uGimAvyg1O7
4DZd0rxZeEBAYNutKp5it586KNZw1InmKoZ1nU7WoL01oujAzZFBqpxW7p4FTQQE
rrZoKiZPmDvOfpwjyMqqaSUWnuNaoJPAZAGsNbTdL5iZRIyUmMnJeyaejsDx/1kx
8I4/x4csvG3uHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:21 2025 by rpki-client