Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
File: v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft (raw, json)
Hash identifier: jhrJjOXTNCrJnun8XKrdPNwpO2pC42Of3PlEhZFGcH0=
Subject key identifier: 71:49:33:22:32:F8:50:AD:A1:48:2C:6B:E4:47:95:AC:38:55:52:40
Authority key identifier: BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
Certificate issuer: /CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Certificate serial: 019847774E3402C2D90D0CE1D877FF3C48A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
Manifest number: 1512
Signing time: Sat 26 Jul 2025 16:00:57 +0000
Manifest this update: Sat 26 Jul 2025 16:00:57 +0000
Manifest next update: Sun 27 Jul 2025 16:00:57 +0000
Files and hashes: 1: RyCW3YF5iKkzrNHX6rZe54l5IMM.roa (hash: nnvkgafHFhfZcY1hKxlsPbFkmUe449pia8RGh1NFs+Q=)
2: aJ0uGpexjSkAa27B-n72oqb3t3I.roa (hash: H6fzloTmxNo2mJK6Qd1BL+h1srxz+hjXl3IHpHqT1Kw=)
3: v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl (hash: FytqXQZ9vo8jjstGsBFi4a2i47opkxlzAbh3wbdarl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:4e:34:02:c2:d9:0d:0c:e1:d8:77:ff:3c:48:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Validity
Not Before: Jul 26 16:00:57 2025 GMT
Not After : Jul 27 16:00:57 2025 GMT
Subject: CN=7149332232f850ada1482c6be44795ac38555240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:90:53:d8:c7:1f:2c:e9:7a:f0:58:95:d1:
27:df:10:7e:db:b9:3f:9d:fa:b6:b9:74:5b:fc:d8:
21:6e:e8:0e:06:87:04:86:f1:7a:8d:91:18:67:62:
1c:9b:e5:dc:d0:cc:10:fc:42:60:30:15:cb:cb:c1:
07:c5:10:93:f1:55:c3:45:3a:b3:97:ac:a1:34:ae:
24:40:6c:a6:0b:b7:4c:b2:3a:ec:d9:18:70:70:ef:
43:f5:c5:ef:41:00:e4:b8:5f:50:2e:6b:5c:62:81:
9f:a8:2f:db:e5:86:00:ea:70:2c:10:2d:be:3c:52:
4d:30:1a:f9:29:af:cd:24:3b:7e:83:e9:ef:14:22:
fe:64:ce:e1:ee:ca:ed:32:99:4a:0f:bd:9e:65:e0:
9a:5b:c7:f9:56:20:2b:6d:5c:9f:af:4a:bd:d2:a4:
51:0a:48:69:61:30:90:b8:f4:57:f1:68:11:f5:11:
71:11:8c:50:2a:33:02:67:0c:bc:b0:ca:57:d4:ee:
6e:a6:58:cf:a3:e9:1f:e5:d1:b5:69:ac:c5:7e:13:
e0:e3:12:28:6c:88:a2:3b:a8:5c:12:a3:f8:ef:09:
58:9f:15:66:ac:ab:10:93:00:30:31:db:3a:8f:f8:
7a:62:b7:49:0f:70:7e:44:8e:6b:fd:79:d5:47:bf:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:33:22:32:F8:50:AD:A1:48:2C:6B:E4:47:95:AC:38:55:52:40
X509v3 Authority Key Identifier:
keyid:BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:46:c6:82:f3:b5:a8:6f:30:69:72:93:b1:fc:0b:4b:33:ac:
0b:02:7a:21:10:40:6e:5e:0c:b3:f1:96:f9:40:34:73:2f:24:
cd:40:db:83:fd:34:26:59:e0:47:ef:a5:55:4d:a5:a4:a0:02:
9d:36:74:f7:66:cb:35:9f:72:0e:53:16:64:79:7c:6a:42:95:
52:40:3c:8d:e6:b8:53:f4:c5:0c:bb:6b:27:cf:9a:d2:d6:99:
28:a4:2a:9c:5c:d2:0e:db:dd:92:9d:4f:41:e3:b3:17:0c:fb:
e1:b8:bd:50:ea:e7:0b:7a:90:75:2a:52:fa:5c:11:7d:ab:8a:
61:51:ec:88:f6:5f:07:bd:e2:92:e1:8f:0a:a3:1d:08:25:83:
2c:f6:8c:d9:e9:09:f7:d3:08:6f:c2:ef:fd:7e:3c:77:8b:c4:
8c:e0:ab:44:53:b3:f1:84:13:7d:d7:6a:af:2b:fd:1c:56:78:
51:15:12:39:9f:06:93:34:e7:bf:94:f8:07:1c:c9:1c:17:29:
b6:ac:9a:da:f8:0a:45:98:35:38:47:a6:0d:a1:ba:6b:64:51:
e1:f9:bf:a8:86:28:35:86:15:d5:29:9f:af:4e:4a:60:66:f2:
59:a0:5b:47:30:f5:9c:02:05:10:b0:10:70:ef:b2:ba:8d:d2:
3f:9e:f3:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd040AsLZDQzh2Hf/PEihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYTVmMGU3NjU0NzU3NTk1N2JjOTJjNmRkZGQwODRkM2Vh
N2Y4NjMwHhcNMjUwNzI2MTYwMDU3WhcNMjUwNzI3MTYwMDU3WjAzMTEwLwYDVQQD
Eyg3MTQ5MzMyMjMyZjg1MGFkYTE0ODJjNmJlNDQ3OTVhYzM4NTU1MjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq6QU9jHHyzpevBYldEn3xB+27k/
nfq2uXRb/NghbugOBocEhvF6jZEYZ2Icm+Xc0MwQ/EJgMBXLy8EHxRCT8VXDRTqz
l6yhNK4kQGymC7dMsjrs2RhwcO9D9cXvQQDkuF9QLmtcYoGfqC/b5YYA6nAsEC2+
PFJNMBr5Ka/NJDt+g+nvFCL+ZM7h7srtMplKD72eZeCaW8f5ViArbVyfr0q90qRR
CkhpYTCQuPRX8WgR9RFxEYxQKjMCZwy8sMpX1O5upljPo+kf5dG1aazFfhPg4xIo
bIiiO6hcEqP47wlYnxVmrKsQkwAwMds6j/h6YrdJD3B+RI5r/XnVR78iBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFJMyIy+FCtoUgsa+RHlaw4VVJAMB8GA1UdIwQY
MBaAFL+l8OdlR1dZV7ySxt3dCE0+p/hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjZYdzUyVkhWMWxYdkpMRzNkMElUVDZuLUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iY2NjYjgtNmM3NC00ZDBhLTg5NWYt
MDFkMTlhNzRiZTIzLzEvdjZYdzUyVkhWMWxYdkpMRzNkMElUVDZuLUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iY2NjYjgtNmM3NC00ZDBhLTg5NWYtMDFkMTlhNzRiZTIz
LzEvdjZYdzUyVkhWMWxYdkpMRzNkMElUVDZuLUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUbGgvO1
qG8waXKTsfwLSzOsCwJ6IRBAbl4Ms/GW+UA0cy8kzUDbg/00JlngR++lVU2lpKAC
nTZ092bLNZ9yDlMWZHl8akKVUkA8jea4U/TFDLtrJ8+a0taZKKQqnFzSDtvdkp1P
QeOzFwz74bi9UOrnC3qQdSpS+lwRfauKYVHsiPZfB73ikuGPCqMdCCWDLPaM2ekJ
99MIb8Lv/X48d4vEjOCrRFOz8YQTfddqryv9HFZ4URUSOZ8GkzTnv5T4BxzJHBcp
tqya2vgKRZg1OEemDaG6a2RR4fm/qIYoNYYV1Smfr05KYGbyWaBbRzD1nAIFELAQ
cO+yuo3SP57zJg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:15:21 2025 by rpki-client