Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: wPjW1CAClKMFTnI1FM0V451KI1OIYwZpSwgTsO6LhSY=
Subject key identifier: 76:30:66:DA:3B:7F:36:13:55:B2:27:8D:CD:BD:4C:A6:DD:09:B0:57
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 0197C04A0C28D56B85123E7ED31923E09D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 15BB
Signing time: Mon 30 Jun 2025 10:02:47 +0000
Manifest this update: Mon 30 Jun 2025 10:02:47 +0000
Manifest next update: Tue 01 Jul 2025 10:02:47 +0000
Files and hashes: 1: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: P1DVSBnu+4BaeFuudL7rwhLQburx1wx5U+JEYmmJ3VM=)
2: a6z9s2B5USpArv-yW1XShxJdtpo.roa (hash: hfVnswmh8KT0yGpguvtRDoEqQ95xhx5KsIsgaJn/9yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:4a:0c:28:d5:6b:85:12:3e:7e:d3:19:23:e0:9d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Jun 30 10:02:47 2025 GMT
Not After : Jul 1 10:02:47 2025 GMT
Subject: CN=763066da3b7f361355b2278dcdbd4ca6dd09b057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:f9:17:93:53:74:85:2c:9b:7f:37:32:c9:
01:ba:fd:8b:ed:ef:f5:39:f5:c5:17:69:61:98:40:
3c:8b:73:38:68:68:b4:e1:72:8d:27:ee:73:f2:91:
3d:b0:4d:5e:12:37:92:61:bc:49:6a:a5:11:04:5a:
be:aa:85:c6:df:b3:e6:95:4c:99:ee:5e:d8:14:89:
12:78:17:0e:1b:20:b3:97:f1:f0:8d:1f:fb:d4:8b:
bd:97:dc:f9:87:5b:f9:fb:38:6f:29:4d:8f:15:e1:
af:0e:4a:67:6a:bc:b7:95:97:54:85:4e:c8:43:bb:
4a:a2:cf:b0:d0:da:e8:01:88:68:4d:86:52:ee:9d:
fb:e8:23:e7:c0:e4:58:be:5a:43:85:7b:95:27:47:
d3:26:56:b6:56:73:ee:33:c4:47:54:4e:c3:9d:80:
e2:e3:d9:c4:e4:f6:4c:2f:81:65:35:6a:5b:d7:82:
96:ae:ea:af:cc:27:4b:99:4a:69:7a:5a:22:60:69:
fd:25:39:b5:a1:e1:6f:1d:91:88:5b:d4:45:aa:32:
31:36:e3:c8:11:85:8c:1d:4a:99:aa:b4:e0:94:cf:
61:e6:f2:c3:0e:7d:13:d3:8b:a2:39:10:10:f4:3c:
cd:c7:24:42:c8:b5:b2:90:c3:03:f0:fa:f5:56:82:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:30:66:DA:3B:7F:36:13:55:B2:27:8D:CD:BD:4C:A6:DD:09:B0:57
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:be:6a:19:35:0d:a8:e6:78:f3:86:8a:71:51:10:c9:12:12:
4c:b8:72:d9:c2:ec:c6:5d:2a:ba:6c:41:1a:8d:3a:8e:5b:19:
be:8c:01:95:f6:50:cd:ff:c3:81:8e:1c:a8:66:d3:d2:d2:ca:
63:35:cc:a5:12:1f:d9:6c:1a:77:a6:d0:d6:4f:2b:b7:b5:f8:
2d:61:28:1c:9f:a3:3e:c0:c9:03:25:63:48:24:6e:a9:f3:76:
a9:06:d1:62:35:a1:30:bf:2c:f6:a4:62:1c:02:22:15:76:a3:
d7:25:ba:44:b4:52:46:b9:55:bf:ba:88:74:56:b6:7d:00:28:
cd:b4:60:00:c9:50:43:d3:ad:87:ec:62:ec:83:ae:39:7a:5f:
92:8a:7e:8b:c5:f2:1e:84:c9:d5:a0:59:17:f7:23:86:91:ba:
7a:79:25:67:6c:fc:20:bf:39:61:fd:91:6d:b1:13:fe:3c:44:
44:36:2a:29:94:07:cc:43:a7:ce:fd:59:09:51:90:a4:96:a7:
a2:4b:41:2d:d6:3c:ac:00:c8:f7:92:30:81:04:00:34:9c:2c:
51:81:e7:9f:50:dc:b3:ec:18:fd:71:c0:2c:b9:0b:b0:c6:d1:
d3:e5:18:c8:68:5d:5b:30:7a:88:98:62:4e:37:05:e8:2c:90:
74:92:4d:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfASgwo1WuFEj5+0xkj4J19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWY1YWExNGQzMTQwYzdjN2M0OTg4ZjE5ZGE5NDMxZWIx
YTQwZjEwHhcNMjUwNjMwMTAwMjQ3WhcNMjUwNzAxMTAwMjQ3WjAzMTEwLwYDVQQD
Eyg3NjMwNjZkYTNiN2YzNjEzNTViMjI3OGRjZGJkNGNhNmRkMDliMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp//5F5NTdIUsm383MskBuv2L7e/1
OfXFF2lhmEA8i3M4aGi04XKNJ+5z8pE9sE1eEjeSYbxJaqURBFq+qoXG37PmlUyZ
7l7YFIkSeBcOGyCzl/HwjR/71Iu9l9z5h1v5+zhvKU2PFeGvDkpnary3lZdUhU7I
Q7tKos+w0NroAYhoTYZS7p376CPnwORYvlpDhXuVJ0fTJla2VnPuM8RHVE7DnYDi
49nE5PZML4FlNWpb14KWruqvzCdLmUppeloiYGn9JTm1oeFvHZGIW9RFqjIxNuPI
EYWMHUqZqrTglM9h5vLDDn0T04uiORAQ9DzNxyRCyLWykMMD8Pr1VoICZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYwZto7fzYTVbInjc29TKbdCbBXMB8GA1UdIwQY
MBaAFBvvWqFNMUDHx8SYjxnalDHrGkDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUt
MGU0MzgyMzEwY2E1LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUtMGU0MzgyMzEwY2E1
LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ75qGTUN
qOZ484aKcVEQyRISTLhy2cLsxl0qumxBGo06jlsZvowBlfZQzf/DgY4cqGbT0tLK
YzXMpRIf2Wwad6bQ1k8rt7X4LWEoHJ+jPsDJAyVjSCRuqfN2qQbRYjWhML8s9qRi
HAIiFXaj1yW6RLRSRrlVv7qIdFa2fQAozbRgAMlQQ9Oth+xi7IOuOXpfkop+i8Xy
HoTJ1aBZF/cjhpG6enklZ2z8IL85Yf2RbbET/jxERDYqKZQHzEOnzv1ZCVGQpJan
oktBLdY8rADI95IwgQQANJwsUYHnn1Dcs+wY/XHALLkLsMbR0+UYyGhdWzB6iJhi
TjcF6CyQdJJNCA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 14:59:48 2025 by rpki-client