Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File: G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier: sInlq96YkuyUkTSAByzP7misM/ZU4NQYLOw1ZCDRS3M=
Subject key identifier: 22:C6:8A:3D:A6:1B:A6:53:96:4A:4B:C9:F4:3A:C0:35:55:D7:0C:16
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer: /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial: 01984A7816E4ED4822EED25358C25C23DD27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 06:00:40 +0000
Manifest this update: Sun 27 Jul 2025 06:00:40 +0000
Manifest next update: Mon 28 Jul 2025 06:00:40 +0000
Files and hashes: 1: Csk8FW5y7YJBzT_KmLLv1t_20_E.roa (hash: v8gWLbfcXD73mmO4K/7j3PoZmZQLB/oP8z7Xeflu12k=)
2: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: zsjESWguBXSqVk41SqokC+x8Z9zD5zXYC1HnIa4VZmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:16:e4:ed:48:22:ee:d2:53:58:c2:5c:23:dd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Validity
Not Before: Jul 27 06:00:40 2025 GMT
Not After : Jul 28 06:00:40 2025 GMT
Subject: CN=22c68a3da61ba653964a4bc9f43ac03555d70c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:dc:13:49:96:24:f2:3c:92:e1:b3:ac:49:
7e:f9:9b:42:70:4d:60:47:48:87:62:50:d1:41:d2:
c4:8e:99:6e:3b:95:f8:e7:85:8d:d7:ca:83:66:84:
ea:b9:88:04:bb:c3:be:c1:2d:29:38:78:fe:12:93:
ee:a7:98:2b:1d:82:f1:32:36:3b:e8:60:e8:a2:fa:
ce:e2:f3:c0:ca:1f:1b:b9:06:cd:1f:c8:f5:2c:7e:
fd:34:6b:a3:54:7c:ac:93:ea:11:60:fe:b8:db:c7:
e9:5a:9a:3c:81:8f:0f:4f:5d:f6:57:4a:67:4a:0b:
e5:6a:99:10:fb:a2:0b:35:af:74:5d:79:69:43:c3:
55:18:af:6a:eb:02:5c:54:7a:2a:c5:37:6e:e3:cd:
88:17:9f:17:75:97:f6:7d:e8:be:0e:c2:9f:0e:41:
d7:ee:c5:29:9a:0d:cf:ca:0e:b3:c0:e2:2b:77:3d:
ef:16:a4:c8:e3:e9:c1:3c:92:41:50:c3:d9:99:41:
73:bf:35:b3:3a:eb:32:36:51:a4:14:9b:9a:54:0a:
71:ff:2c:6a:c0:fc:36:f5:35:ef:f0:d8:1d:3e:f1:
5d:28:20:8c:13:d1:a7:6f:a3:1f:7b:33:63:1b:4a:
2c:73:68:77:80:f6:9b:ae:53:2d:25:17:52:18:2d:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C6:8A:3D:A6:1B:A6:53:96:4A:4B:C9:F4:3A:C0:35:55:D7:0C:16
X509v3 Authority Key Identifier:
keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1a:64:ae:49:1c:4b:bf:ee:55:0d:37:46:08:47:58:e8:ae:
0b:29:8d:fa:ab:95:59:1e:54:aa:20:4e:9e:3c:a7:09:63:e7:
12:59:d2:69:ae:9d:55:ee:e0:b7:34:04:4e:8c:02:97:5d:bd:
4c:3a:1a:d3:59:01:41:41:56:2f:ed:c3:f6:d5:a1:3c:da:f6:
04:b0:02:9f:f6:8d:7d:40:2e:df:51:06:42:1a:9a:64:64:1f:
bf:c0:6e:10:e7:28:24:1a:1b:1b:39:48:fb:29:a8:45:20:c5:
a7:49:1c:2b:bd:7e:b0:c3:13:dc:5a:33:8a:1c:63:a3:81:3d:
de:55:e5:73:c8:a9:ec:88:33:19:82:5f:dd:f4:13:84:c9:a5:
95:1f:77:b0:a3:6d:fb:28:d8:9e:99:e0:c8:42:cb:98:69:7b:
00:a4:23:6b:31:83:8b:4d:6b:a5:2c:38:cc:76:57:74:8e:14:
44:4a:05:1a:b9:d2:5e:cd:da:db:22:19:ec:19:ac:a0:e5:5e:
e4:50:6a:a1:f5:7c:55:b3:6a:db:a5:12:aa:be:98:6a:21:59:
ef:20:30:76:0e:7b:41:8a:ab:8c:ac:fe:c2:85:9e:8e:2f:41:
8c:9e:9b:0b:9c:5b:3f:5e:6e:3f:56:48:6f:7b:f7:5f:ec:de:
af:8e:c3:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKeBbk7Ugi7tJTWMJcI90nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNzhkYmYzZTg1OTU4MmZkMWVkYTJmMmRjZGU1NDIyMjk1
MTQ2ZjEwHhcNMjUwNzI3MDYwMDQwWhcNMjUwNzI4MDYwMDQwWjAzMTEwLwYDVQQD
EygyMmM2OGEzZGE2MWJhNjUzOTY0YTRiYzlmNDNhYzAzNTU1ZDcwYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ3cE0mWJPI8kuGzrEl++ZtCcE1g
R0iHYlDRQdLEjpluO5X454WN18qDZoTquYgEu8O+wS0pOHj+EpPup5grHYLxMjY7
6GDoovrO4vPAyh8buQbNH8j1LH79NGujVHysk+oRYP6428fpWpo8gY8PT132V0pn
SgvlapkQ+6ILNa90XXlpQ8NVGK9q6wJcVHoqxTdu482IF58XdZf2fei+DsKfDkHX
7sUpmg3Pyg6zwOIrdz3vFqTI4+nBPJJBUMPZmUFzvzWzOusyNlGkFJuaVApx/yxq
wPw29TXv8NgdPvFdKCCME9Gnb6MfezNjG0osc2h3gPabrlMtJRdSGC3hlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLGij2mG6ZTlkpLyfQ6wDVV1wwWMB8GA1UdIwQY
MBaAFBt42/PoWVgv0e2i8tzeVCIpUUbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85OWI1MzUtYzQyYi00ZTAxLTg3OTMt
NzIyMjk0NzgzZTllLzEvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85OWI1MzUtYzQyYi00ZTAxLTg3OTMtNzIyMjk0NzgzZTll
LzEvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRpkrkkc
S7/uVQ03RghHWOiuCymN+quVWR5UqiBOnjynCWPnElnSaa6dVe7gtzQETowCl129
TDoa01kBQUFWL+3D9tWhPNr2BLACn/aNfUAu31EGQhqaZGQfv8BuEOcoJBobGzlI
+ymoRSDFp0kcK71+sMMT3Fozihxjo4E93lXlc8ip7IgzGYJf3fQThMmllR93sKNt
+yjYnpngyELLmGl7AKQjazGDi01rpSw4zHZXdI4UREoFGrnSXs3a2yIZ7BmsoOVe
5FBqofV8VbNq26USqr6YaiFZ7yAwdg57QYqrjKz+woWeji9BjJ6bC5xbP15uP1ZI
b3v3X+zer47DDg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:30 2025 by rpki-client