Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier: 9Dd2d5wAmk24bibbYBJ9/bHrHhMeYc9a1a5UUrcT5v4=
Subject key identifier: B7:B5:27:64:73:0D:ED:D5:4F:96:AB:16:50:60:5A:A0:36:87:E8:8F
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 019854FC724DA0E30C2056E3659900551B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number: 0B01
Signing time: Tue 29 Jul 2025 07:01:27 +0000
Manifest this update: Tue 29 Jul 2025 07:01:27 +0000
Manifest next update: Wed 30 Jul 2025 07:01:27 +0000
Files and hashes: 1: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (hash: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=)
2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: fdcZc+cvcKi0+ESaI3LI+DZm8B5Mx0UTUT8TxtEvbm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:72:4d:a0:e3:0c:20:56:e3:65:99:00:55:1b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Jul 29 07:01:27 2025 GMT
Not After : Jul 30 07:01:27 2025 GMT
Subject: CN=b7b52764730dedd54f96ab1650605aa03687e88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:2c:b7:41:76:4d:41:b0:61:51:27:70:20:
83:58:d9:55:ce:2d:8f:d1:43:57:5c:1e:7f:ab:61:
9b:ad:12:2d:21:f7:70:5d:01:bb:5b:60:be:c5:33:
25:0a:4c:3d:b4:a6:16:3f:f1:78:6d:3a:ac:2d:ec:
c2:df:7e:a8:de:1b:84:96:3a:97:11:40:14:00:0f:
dc:fc:0c:aa:10:40:bd:fa:c0:34:6f:49:42:8d:4c:
c8:9c:77:6e:3a:a1:c5:46:ec:7d:7e:58:65:94:1a:
ff:18:64:9f:fe:24:dc:88:1c:0f:3f:34:f2:63:f0:
dc:5a:d3:82:ff:96:57:59:4b:29:68:4e:27:d6:bd:
42:19:a0:a8:86:5a:9d:f9:41:bb:77:a6:fa:0a:cd:
d3:93:3d:40:25:cd:59:87:d3:92:8b:67:4a:0d:05:
63:c9:f6:6e:7b:df:d6:79:ff:d1:52:7b:07:69:c1:
dd:74:eb:36:c4:2d:f0:65:2b:b1:94:68:93:6f:fd:
76:1a:25:a7:ad:b4:45:fe:4d:83:ad:46:d4:95:85:
ae:5a:54:66:ab:9e:d1:bb:a1:c5:4e:4b:48:eb:d7:
5e:f0:c2:cc:67:70:d9:97:ec:a3:34:49:24:b6:ea:
44:ba:00:46:94:5e:95:44:f9:54:2a:67:18:af:c5:
67:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B5:27:64:73:0D:ED:D5:4F:96:AB:16:50:60:5A:A0:36:87:E8:8F
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c8:f5:e7:e7:61:60:b0:00:a5:c0:dd:b9:c7:10:07:ad:97:
72:02:c1:b0:37:a8:7d:3a:ac:58:4d:cf:7e:0b:a4:f8:4e:c9:
ca:47:39:ca:df:11:e5:b3:8e:4f:a8:27:71:36:0f:bb:04:f3:
6c:de:92:46:6c:1a:13:40:85:9d:1b:66:cd:0c:0f:63:be:10:
9c:90:c9:5a:00:cc:8f:d6:73:a3:af:61:58:7e:4f:52:33:09:
47:ff:19:46:da:92:e2:05:c0:d4:18:d3:65:f8:2f:44:e4:b2:
07:f4:3f:72:ea:e1:21:5a:f1:32:40:fa:8d:f5:ba:cb:1a:3d:
88:a6:fe:79:66:3a:e2:38:40:0d:6e:97:7e:bf:aa:71:f5:af:
66:da:d7:30:1c:16:32:49:ca:33:5b:91:08:43:b4:9a:7e:fe:
85:d1:05:5e:6b:82:e8:ae:9e:05:a9:43:6a:b3:23:9b:db:8f:
ad:e9:07:9f:5a:88:f2:a3:31:e9:dd:1d:dd:1c:42:a1:88:0d:
fd:54:e5:68:a8:88:90:c3:45:5e:77:2f:90:23:46:b0:13:58:
5b:03:9b:e8:b6:e6:87:78:59:41:39:fd:1a:f3:32:22:ed:b2:
f7:4b:59:d2:8f:d2:a6:ce:f0:db:9c:6f:62:88:d5:93:48:bf:
fd:37:65:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhU/HJNoOMMIFbjZZkAVRsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzZjYTg2NTE5YjU2ZDRkMTg3M2FmNmUyNTdkZTdlOTdm
M2M4YWMwHhcNMjUwNzI5MDcwMTI3WhcNMjUwNzMwMDcwMTI3WjAzMTEwLwYDVQQD
EyhiN2I1Mjc2NDczMGRlZGQ1NGY5NmFiMTY1MDYwNWFhMDM2ODdlODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVcst0F2TUGwYVEncCCDWNlVzi2P
0UNXXB5/q2GbrRItIfdwXQG7W2C+xTMlCkw9tKYWP/F4bTqsLezC336o3huEljqX
EUAUAA/c/AyqEEC9+sA0b0lCjUzInHduOqHFRux9flhllBr/GGSf/iTciBwPPzTy
Y/DcWtOC/5ZXWUspaE4n1r1CGaCohlqd+UG7d6b6Cs3Tkz1AJc1Zh9OSi2dKDQVj
yfZue9/Wef/RUnsHacHddOs2xC3wZSuxlGiTb/12GiWnrbRF/k2DrUbUlYWuWlRm
q57Ru6HFTktI69de8MLMZ3DZl+yjNEkktupEugBGlF6VRPlUKmcYr8VnYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLe1J2RzDe3VT5arFlBgWqA2h+iPMB8GA1UdIwQY
MBaAFIPGyoZRm1bU0Yc69uJX3n6X88isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYt
Y2E4YWY0ZjUzNTZjLzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYtY2E4YWY0ZjUzNTZj
LzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsj15+dh
YLAApcDduccQB62XcgLBsDeofTqsWE3Pfguk+E7Jykc5yt8R5bOOT6gncTYPuwTz
bN6SRmwaE0CFnRtmzQwPY74QnJDJWgDMj9Zzo69hWH5PUjMJR/8ZRtqS4gXA1BjT
ZfgvROSyB/Q/curhIVrxMkD6jfW6yxo9iKb+eWY64jhADW6Xfr+qcfWvZtrXMBwW
MknKM1uRCEO0mn7+hdEFXmuC6K6eBalDarMjm9uPrekHn1qI8qMx6d0d3RxCoYgN
/VTlaKiIkMNFXncvkCNGsBNYWwOb6Lbmh3hZQTn9GvMyIu2y90tZ0o/Sps7w25xv
YojVk0i//TdlOA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 10:02:59 2025 by rpki-client