Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: uFuj6NAEDRxc7qfWz7yR3ssqtLIpquRBUG/V9eA+zaA=
Subject key identifier: E2:65:67:D4:AA:9B:4D:3F:DE:44:A2:F7:DC:B5:F5:BF:1F:EB:AB:5F
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 01984AAF15A8C2ABBD85DF24F486E54B8812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 131A
Signing time: Sun 27 Jul 2025 07:00:44 +0000
Manifest this update: Sun 27 Jul 2025 07:00:44 +0000
Manifest next update: Mon 28 Jul 2025 07:00:44 +0000
Files and hashes: 1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: bTYM17gHeuixCnTKNoBXXrxx0nGNydYKQQFWpYQUJ9k=)
3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:15:a8:c2:ab:bd:85:df:24:f4:86:e5:4b:88:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Jul 27 07:00:44 2025 GMT
Not After : Jul 28 07:00:44 2025 GMT
Subject: CN=e26567d4aa9b4d3fde44a2f7dcb5f5bf1febab5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:b5:cc:a1:d4:8a:02:d1:62:3a:e6:29:f9:
81:21:69:c4:4e:08:d5:57:fe:d3:d0:d4:14:d5:52:
b9:89:6d:fc:b7:53:97:3d:5d:f0:2c:25:ce:16:4f:
3c:75:f9:94:b9:c9:60:a4:64:eb:92:8c:01:a4:10:
48:b9:42:05:54:29:5c:78:3c:15:03:f5:91:83:68:
66:23:4a:67:6c:d9:cb:5c:3c:d9:c5:d5:fb:cd:a3:
7a:ba:9d:93:38:34:5a:35:9a:60:17:c8:28:97:f3:
ac:22:3f:4c:2f:e4:53:12:cf:13:09:12:a5:3f:48:
dc:0d:63:05:05:7b:9b:8d:28:c4:a7:e3:9f:75:e0:
4b:3d:16:d0:af:f9:13:8a:5b:73:63:15:84:fd:6c:
3a:87:26:8b:09:91:48:2b:3d:ed:c1:f2:32:07:f5:
b6:33:0b:4a:eb:2a:71:f5:1d:94:34:66:34:c2:f8:
be:37:d5:6d:a6:84:1c:72:c6:5b:a3:91:61:f9:4a:
22:6a:7c:1c:7c:a7:85:6a:da:6b:4c:e9:60:15:d6:
fb:6f:56:27:19:b1:26:db:a2:61:5e:1a:5b:f7:db:
2e:00:03:30:0c:4f:78:7f:55:e1:4a:60:00:05:17:
50:f5:41:ef:0b:49:6e:d0:b9:43:5a:92:4f:9f:b7:
85:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:65:67:D4:AA:9B:4D:3F:DE:44:A2:F7:DC:B5:F5:BF:1F:EB:AB:5F
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:84:48:21:18:d9:e9:8f:6e:20:b6:4d:75:25:c5:07:ef:a1:
2a:86:b5:5e:a8:76:c9:56:b1:6f:fe:97:1a:db:f8:ce:57:da:
fe:5a:38:e4:c8:cc:a3:60:b9:b3:09:05:3a:ff:1b:e1:68:1e:
39:71:2e:f2:4d:f8:8a:b5:6c:06:35:57:03:41:1c:b7:7f:49:
5f:c8:17:3e:8c:31:7a:e3:99:07:11:27:cd:05:82:46:08:79:
75:a1:02:fc:5b:b3:9d:bf:a1:dd:25:4d:84:b3:81:34:4e:68:
7b:e7:f0:46:a9:be:d1:12:41:a9:ba:74:37:22:75:32:a9:49:
8b:ce:f2:2f:9e:3e:27:34:65:41:e2:9d:04:51:3c:24:b3:a4:
4f:e6:9f:db:0f:1d:e7:53:70:78:d4:90:43:8b:45:9b:ac:9f:
5c:0e:64:00:d2:8a:d3:96:66:5a:cd:ae:3a:30:5c:2b:fb:6c:
b4:1c:1b:d9:15:b6:e3:0c:0c:4b:ad:cb:98:5d:3e:f1:03:c8:
71:e7:ce:52:ff:81:24:64:e5:cf:e4:e2:31:c7:c9:a2:a0:ff:
0d:ef:0c:32:4a:b1:1b:a2:eb:2c:eb:d7:ce:fa:24:79:6a:d6:
f9:ba:e7:de:85:91:08:51:4b:1d:ab:b0:8e:77:aa:ce:b2:86:
54:b7:43:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrxWowqu9hd8k9IblS4gSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiY2VlNDA0MDVhZWZiNmRhMTdhMzQwZWVmMTU5Y2U5YzRk
MTgzMjIwHhcNMjUwNzI3MDcwMDQ0WhcNMjUwNzI4MDcwMDQ0WjAzMTEwLwYDVQQD
EyhlMjY1NjdkNGFhOWI0ZDNmZGU0NGEyZjdkY2I1ZjViZjFmZWJhYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXu1zKHUigLRYjrmKfmBIWnETgjV
V/7T0NQU1VK5iW38t1OXPV3wLCXOFk88dfmUuclgpGTrkowBpBBIuUIFVClceDwV
A/WRg2hmI0pnbNnLXDzZxdX7zaN6up2TODRaNZpgF8gol/OsIj9ML+RTEs8TCRKl
P0jcDWMFBXubjSjEp+OfdeBLPRbQr/kTiltzYxWE/Ww6hyaLCZFIKz3twfIyB/W2
MwtK6ypx9R2UNGY0wvi+N9VtpoQccsZbo5Fh+UoianwcfKeFatprTOlgFdb7b1Yn
GbEm26JhXhpb99suAAMwDE94f1XhSmAABRdQ9UHvC0lu0LlDWpJPn7eFzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJlZ9Sqm00/3kSi99y19b8f66tfMB8GA1UdIwQY
MBaAFBvO5AQFrvttoXo0Du8VnOnE0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQt
N2U0NmFkNzQ4NDg0LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQtN2U0NmFkNzQ4NDg0
LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoRIIRjZ
6Y9uILZNdSXFB++hKoa1Xqh2yVaxb/6XGtv4zlfa/lo45MjMo2C5swkFOv8b4Wge
OXEu8k34irVsBjVXA0Ect39JX8gXPowxeuOZBxEnzQWCRgh5daEC/Fuznb+h3SVN
hLOBNE5oe+fwRqm+0RJBqbp0NyJ1MqlJi87yL54+JzRlQeKdBFE8JLOkT+af2w8d
51NweNSQQ4tFm6yfXA5kANKK05ZmWs2uOjBcK/tstBwb2RW24wwMS63LmF0+8QPI
cefOUv+BJGTlz+TiMcfJoqD/De8MMkqxG6LrLOvXzvokeWrW+brn3oWRCFFLHauw
jneqzrKGVLdDqw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:33 2025 by rpki-client