Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: ELbfTHntvZ6RZaPZTmitiYbyhIwi3HkSVaoD54fhAbg=
Subject key identifier: 2E:6A:D1:EA:9B:F4:46:BD:10:80:06:FA:DF:2A:D4:C3:01:49:C2:75
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 01984AE59BEC2A03BA9B5A4194C0EB14E300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 04FF
Signing time: Sun 27 Jul 2025 08:00:18 +0000
Manifest this update: Sun 27 Jul 2025 08:00:18 +0000
Manifest next update: Mon 28 Jul 2025 08:00:18 +0000
Files and hashes: 1: 5hNBi4pOh8tuQ2-hbUmZAAcoj0g.roa (hash: bvf6+FGQm47HOMj5UevrWk1RDXzOnQeu8ZcjR9Z2g1E=)
2: VnV_NALClcugVnJ8tM0-ssB-Wvo.roa (hash: i5vFppJbIjgrNIbkedUgagHC+ZhmU+v4i2sVl3277z4=)
3: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: dx//AmePZhzOAvLFNj+EE3ab6p3sZF5mxAc6RXjzWvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:9b:ec:2a:03:ba:9b:5a:41:94:c0:eb:14:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Jul 27 08:00:18 2025 GMT
Not After : Jul 28 08:00:18 2025 GMT
Subject: CN=2e6ad1ea9bf446bd108006fadf2ad4c30149c275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:27:0a:02:b2:3f:4b:35:db:d9:97:15:88:
3f:85:9a:44:53:ed:ef:c5:bb:7b:63:58:fa:d5:8a:
8a:13:ed:ae:79:bc:f3:a1:e8:16:b0:16:1c:7c:ff:
aa:27:9c:c6:23:9c:3e:27:bf:b8:11:d3:6d:86:44:
b3:fd:78:ab:af:a0:dc:98:8b:85:3f:26:72:9f:29:
07:c5:80:69:83:8e:00:ba:26:72:87:4d:f1:96:41:
e0:6a:01:8b:61:2b:15:ab:8b:50:f4:51:e7:3b:a3:
74:c5:bb:9e:c9:6d:62:15:49:6b:cd:91:40:0d:16:
bd:c0:6e:91:24:01:df:fd:4e:21:b8:36:c0:73:3e:
00:71:b2:e5:d4:87:a0:b6:1b:49:11:71:91:91:88:
7f:d6:6a:5f:c9:fc:c6:45:8a:f9:2c:e2:4a:53:d4:
1a:33:63:a3:9d:2d:3f:70:3f:9b:67:09:c7:26:85:
e6:fe:25:29:09:95:a8:c9:0e:8c:fb:2f:77:2a:f9:
f9:84:d4:e3:a3:10:fa:ba:bb:2d:c3:32:ff:1a:d5:
5a:16:4a:83:51:81:fe:ec:6f:f8:87:b1:c3:d8:bc:
85:ed:7a:ea:05:28:e1:50:22:6d:09:e4:bd:b0:c4:
6a:5b:7d:b9:7c:3a:7f:bb:6f:26:ad:3d:5a:e4:de:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6A:D1:EA:9B:F4:46:BD:10:80:06:FA:DF:2A:D4:C3:01:49:C2:75
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:90:6e:01:14:8b:0c:c3:a5:d3:63:bc:13:95:15:15:aa:59:
1e:d3:ec:c0:56:91:46:41:a5:c5:0c:e7:63:dc:4b:8a:da:8d:
78:29:20:8f:3b:ed:d6:e4:24:03:40:b8:a3:b8:7f:4e:1c:80:
6d:20:88:d2:d6:0d:29:4e:16:61:62:b8:f4:eb:d4:f8:1a:89:
0a:fe:6b:04:0e:d5:c8:76:cc:af:00:ce:37:8d:61:31:93:6f:
d5:ef:8c:5e:38:49:e9:78:fc:f2:32:d0:db:b1:9c:a0:83:bf:
7d:4b:30:40:95:db:b2:bc:2e:59:a8:ae:a6:52:a1:d3:5b:03:
4f:c1:06:43:13:93:5e:b5:f5:82:93:dc:8f:17:8d:dc:a5:96:
47:ae:da:48:b6:bb:2c:07:38:4a:d4:c5:fc:69:3e:ca:fc:74:
30:7a:b3:23:92:21:8b:46:2a:fb:36:4d:b6:aa:ec:1e:26:09:
62:7d:03:b7:b0:79:30:b4:4a:ee:5b:95:90:20:a3:c7:81:3b:
fa:46:24:6a:92:60:4c:0b:8b:8c:16:fd:1a:df:1d:d2:36:55:
43:9e:b1:42:b2:b8:d7:b1:2a:01:d7:78:3f:39:81:32:d9:54:
ec:1c:88:58:0b:de:d9:e2:d6:6f:9c:dd:62:71:d5:30:80:fd:
e4:a0:73:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5ZvsKgO6m1pBlMDrFOMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDg2ODQxYjRmNGFkYzU2MjY0YzU5NjMwODUxODJhMjIw
ZTQ2ZDQwHhcNMjUwNzI3MDgwMDE4WhcNMjUwNzI4MDgwMDE4WjAzMTEwLwYDVQQD
EygyZTZhZDFlYTliZjQ0NmJkMTA4MDA2ZmFkZjJhZDRjMzAxNDljMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrYnCgKyP0s129mXFYg/hZpEU+3v
xbt7Y1j61YqKE+2uebzzoegWsBYcfP+qJ5zGI5w+J7+4EdNthkSz/Xirr6DcmIuF
PyZynykHxYBpg44AuiZyh03xlkHgagGLYSsVq4tQ9FHnO6N0xbueyW1iFUlrzZFA
DRa9wG6RJAHf/U4huDbAcz4AcbLl1IegthtJEXGRkYh/1mpfyfzGRYr5LOJKU9Qa
M2OjnS0/cD+bZwnHJoXm/iUpCZWoyQ6M+y93Kvn5hNTjoxD6urstwzL/GtVaFkqD
UYH+7G/4h7HD2LyF7XrqBSjhUCJtCeS9sMRqW325fDp/u28mrT1a5N62kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5q0eqb9Ea9EIAG+t8q1MMBScJ1MB8GA1UdIwQY
MBaAFINIaEG09K3FYmTFljCFGCoiDkbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBob1FiVDByY1ZpWk1XV01JVVlLaUlPUnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81N2NiMDQtNThjZS00MzNiLTkzYWIt
MTBiYzU5ZDhmZjhkLzEvZzBob1FiVDByY1ZpWk1XV01JVVlLaUlPUnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81N2NiMDQtNThjZS00MzNiLTkzYWItMTBiYzU5ZDhmZjhk
LzEvZzBob1FiVDByY1ZpWk1XV01JVVlLaUlPUnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJBuARSL
DMOl02O8E5UVFapZHtPswFaRRkGlxQznY9xLitqNeCkgjzvt1uQkA0C4o7h/ThyA
bSCI0tYNKU4WYWK49OvU+BqJCv5rBA7VyHbMrwDON41hMZNv1e+MXjhJ6Xj88jLQ
27GcoIO/fUswQJXbsrwuWaiuplKh01sDT8EGQxOTXrX1gpPcjxeN3KWWR67aSLa7
LAc4StTF/Gk+yvx0MHqzI5Ihi0Yq+zZNtqrsHiYJYn0Dt7B5MLRK7luVkCCjx4E7
+kYkapJgTAuLjBb9Gt8d0jZVQ56xQrK417EqAdd4PzmBMtlU7ByIWAve2eLWb5zd
YnHVMID95KBzaw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:15 2025 by rpki-client