Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
File: G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json)
Hash identifier: 2mErs3335le9l+YQz9IjnhxLNSd/5G4gC2XWCpHiDQA=
Subject key identifier: 8D:59:C8:0B:5C:C8:4B:E2:B4:57:4B:00:D7:56:19:BC:22:D1:FB:8F
Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
Certificate issuer: /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Certificate serial: 0197B7458DE35675A081394B51C1B3C68C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
Manifest number: 1463
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: eUbuTcIr6z7rQZUW8Ju5f5PBhZHG7eBjjDQNImEYthY=)
2: uDXgZr4d7paw0tQnlQAuxTAiQJ4.roa (hash: ZLVG9qnKbapzUcUyG3vXPFRhsGi/6YqVmyuunmvWt4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8d:e3:56:75:a0:81:39:4b:51:c1:b3:c6:8c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=8d59c80b5cc84be2b4574b00d75619bc22d1fb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:7d:9b:a1:b8:c7:69:40:4a:ab:fb:28:58:
26:5e:6b:bb:10:0a:b7:fc:6d:60:8d:6f:6c:b6:fd:
35:31:c1:56:fd:c2:74:b6:2f:84:51:9c:1e:2e:35:
a7:43:af:41:54:5e:0e:3d:a6:eb:72:3e:12:64:81:
39:50:a7:19:74:7e:a6:59:6b:37:88:6d:d4:1b:e6:
dd:d4:47:d0:19:56:aa:7a:1f:de:15:ac:41:02:4a:
f6:a3:21:6f:21:61:8c:db:39:dc:12:f3:fc:aa:aa:
cb:ca:e9:a5:df:39:60:d1:7a:5f:0f:82:84:8e:4b:
74:9c:3e:16:68:8a:4f:62:19:ca:38:fa:3c:78:4e:
6f:54:f4:08:b2:81:a7:10:73:ea:2d:c1:93:e3:1d:
68:29:ce:82:09:83:24:07:8e:fc:f9:4c:9c:96:8e:
d6:be:4f:f6:c1:2c:42:d4:1c:5d:cc:d3:f9:5d:2f:
90:e8:47:c7:25:92:97:c8:de:e5:66:7f:e0:cf:f2:
95:e4:ec:ae:0a:0a:aa:85:fc:29:ac:17:06:eb:f4:
4e:c9:e3:2c:01:84:28:a2:47:f6:e7:f9:5b:95:b7:
71:ae:d2:04:30:48:ea:19:28:22:d7:23:90:d3:59:
0f:24:92:b9:96:be:59:24:80:87:f3:ff:af:91:b8:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:59:C8:0B:5C:C8:4B:E2:B4:57:4B:00:D7:56:19:BC:22:D1:FB:8F
X509v3 Authority Key Identifier:
keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:13:45:50:cf:33:60:8b:62:46:19:99:be:7d:c8:c0:ee:56:
0c:81:1e:a9:ac:e8:e4:c7:28:3b:f4:5e:24:d5:7a:42:ac:72:
5d:1e:2c:da:4e:33:b2:66:5f:74:15:40:5b:26:07:46:6b:20:
07:59:6f:36:54:71:4b:2a:5a:b4:68:1c:25:a1:33:8e:e4:cf:
f3:c5:9a:80:68:e0:10:54:f6:7d:42:8b:32:d7:bd:83:ec:ae:
77:f8:e1:9d:bc:4e:bc:dc:ba:34:d3:6e:12:0e:5c:f0:ab:dc:
8d:f8:96:05:2b:d2:d5:16:4f:c9:fc:bf:d7:dd:6e:a5:33:cc:
d6:e9:10:d7:19:8c:12:c9:a1:00:68:d6:dc:f5:a6:95:87:8c:
8f:00:1c:65:76:c3:34:20:44:4a:93:0d:46:4c:ff:cd:96:60:
9a:80:83:7f:8f:9a:de:47:c7:11:91:db:cf:f8:87:7d:63:0d:
64:50:2f:34:62:73:e7:ad:6a:04:57:29:23:ba:3d:f2:18:1d:
0b:4a:32:23:b1:e6:09:50:1e:30:62:71:79:54:ed:c4:fb:80:
94:1a:33:e0:43:78:c0:3a:6a:58:35:37:bf:f8:0b:b1:4f:3e:
79:e8:56:c2:d6:ff:84:98:c2:c6:50:af:69:e0:9c:1b:f6:77:
93:55:03:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RY3jVnWggTlLUcGzxowaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWU0MTdiYjllY2IxYWNlOTQ5MWViYzI4MjNiYjc4OTM0
YjJjZGYwHhcNMjUwNjI4MTYwMTE4WhcNMjUwNjI5MTYwMTE4WjAzMTEwLwYDVQQD
Eyg4ZDU5YzgwYjVjYzg0YmUyYjQ1NzRiMDBkNzU2MTliYzIyZDFmYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4p9m6G4x2lASqv7KFgmXmu7EAq3
/G1gjW9stv01McFW/cJ0ti+EUZweLjWnQ69BVF4OPabrcj4SZIE5UKcZdH6mWWs3
iG3UG+bd1EfQGVaqeh/eFaxBAkr2oyFvIWGM2zncEvP8qqrLyuml3zlg0XpfD4KE
jkt0nD4WaIpPYhnKOPo8eE5vVPQIsoGnEHPqLcGT4x1oKc6CCYMkB478+Uyclo7W
vk/2wSxC1BxdzNP5XS+Q6EfHJZKXyN7lZn/gz/KV5OyuCgqqhfwprBcG6/ROyeMs
AYQookf25/lblbdxrtIEMEjqGSgi1yOQ01kPJJK5lr5ZJICH8/+vkbiyzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1ZyAtcyEvitFdLANdWGbwi0fuPMB8GA1UdIwQY
MBaAFBueQXu57LGs6UkevCgju3iTSyzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2Qt
ODFlZDEyZGRmMTc1LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2QtODFlZDEyZGRmMTc1
LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxNFUM8z
YItiRhmZvn3IwO5WDIEeqazo5McoO/ReJNV6QqxyXR4s2k4zsmZfdBVAWyYHRmsg
B1lvNlRxSypatGgcJaEzjuTP88WagGjgEFT2fUKLMte9g+yud/jhnbxOvNy6NNNu
Eg5c8KvcjfiWBSvS1RZPyfy/191upTPM1ukQ1xmMEsmhAGjW3PWmlYeMjwAcZXbD
NCBESpMNRkz/zZZgmoCDf4+a3kfHEZHbz/iHfWMNZFAvNGJz561qBFcpI7o98hgd
C0oyI7HmCVAeMGJxeVTtxPuAlBoz4EN4wDpqWDU3v/gLsU8+eehWwtb/hJjCxlCv
aeCcG/Z3k1UD2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:17 2025 by rpki-client