Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
File: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft (raw, json)
Hash identifier: jZdFA+LNdg+wNltyj4teeFEKyWBmvCL8QVxWWMf2UWk=
Subject key identifier: 08:A2:96:FB:35:CD:A9:E7:69:03:6E:06:B5:10:73:21:FE:45:3F:D6
Authority key identifier: 83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
Certificate issuer: /CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Certificate serial: 019847E4BEFA7DA6FE301E8D231B08AB908D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
Manifest number: 0222
Signing time: Sat 26 Jul 2025 18:00:30 +0000
Manifest this update: Sat 26 Jul 2025 18:00:30 +0000
Manifest next update: Sun 27 Jul 2025 18:00:30 +0000
Files and hashes: 1: 0otUjOmrbrE-UtuXVDDSBPTMgt4.roa (hash: /6O4kder5Q4c9HIL3TM9q/fRb3AXNbQJDsO22/m8/9o=)
2: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl (hash: 7IxHSi1f8oCs2SjPG4kMo0UR4Cy04p3UJ8S9hU8SrBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:be:fa:7d:a6:fe:30:1e:8d:23:1b:08:ab:90:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Validity
Not Before: Jul 26 18:00:30 2025 GMT
Not After : Jul 27 18:00:30 2025 GMT
Subject: CN=08a296fb35cda9e769036e06b5107321fe453fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:3b:06:98:5a:aa:05:07:8d:f2:65:71:3c:
8e:d4:2d:77:b8:be:82:cd:ca:cd:c0:68:0f:8a:f7:
49:67:64:20:cf:f0:b1:7e:24:02:39:4e:7c:c6:8c:
c3:29:67:29:d8:4c:4a:73:1a:21:fc:27:c4:41:23:
30:ba:06:af:46:2b:29:6d:15:e7:1f:83:84:e3:10:
fa:20:b3:a8:e8:9b:85:84:f5:79:1d:60:d6:cd:6d:
72:72:e4:b2:ac:0f:6e:ec:7f:88:bc:16:6f:cd:b9:
af:f0:de:10:f0:c2:12:6b:6b:68:a2:c1:ea:4b:69:
42:eb:74:5f:b1:7f:a0:58:6c:df:a7:f3:78:75:7a:
db:88:a8:d1:5a:d2:77:4e:43:f6:de:f2:5e:70:41:
69:37:a5:cb:94:58:4b:01:e9:30:3b:2b:1c:80:ec:
7f:0a:58:dc:de:ee:33:42:e1:38:98:99:7e:da:12:
0c:7d:91:f8:ab:54:fc:2e:c4:18:5a:10:aa:21:31:
35:55:50:be:db:61:54:45:1f:bd:e6:09:4c:e6:14:
55:f3:6c:6c:b1:30:12:50:fd:6a:60:fc:dd:8e:c3:
90:d0:86:e5:99:93:df:23:46:9d:4a:dd:ed:1b:33:
af:1f:c5:34:05:89:19:3f:63:b7:4b:49:b4:44:a3:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A2:96:FB:35:CD:A9:E7:69:03:6E:06:B5:10:73:21:FE:45:3F:D6
X509v3 Authority Key Identifier:
keyid:83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0a:ef:98:f0:67:93:8e:3d:97:7c:fd:3b:42:43:5d:05:44:
a4:f9:29:50:1a:30:b8:9c:3d:d0:34:27:60:ee:ae:aa:4b:a9:
fe:3e:82:26:ec:e2:1b:61:8d:57:b6:45:72:d5:79:70:e6:16:
70:f7:7b:07:be:83:c4:96:7d:90:79:8e:af:08:1a:2e:65:e4:
da:26:d6:6a:10:fb:91:cb:59:9d:85:4d:90:0d:56:7d:fd:c5:
06:60:7d:60:0f:fc:8f:8c:97:7e:6f:48:4f:2b:2f:60:10:c2:
c1:f1:70:a7:3b:4d:7c:0f:3f:82:dd:a8:f1:88:e6:82:39:df:
f3:15:c6:36:ce:d8:63:98:8f:6b:03:ff:60:b7:0a:ff:ae:5e:
85:86:fc:99:c1:a3:6f:a4:0d:bc:bf:f7:0c:a4:ce:09:b8:7f:
83:94:b3:9d:0f:1b:d9:bb:4f:28:da:21:54:c0:3f:32:d8:66:
83:71:8b:43:2d:a9:a5:d6:a1:e4:23:02:86:47:e5:3a:64:f6:
79:48:8d:93:4d:f2:46:cf:b6:4c:84:6a:c5:9b:59:f9:9e:73:
41:46:ab:4f:eb:54:c1:05:05:97:bc:68:f3:94:a7:da:5e:61:
12:46:8e:00:48:43:5b:df:17:55:cb:cc:a0:d1:c0:5e:49:4c:
0b:d0:90:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5L76fab+MB6NIxsIq5CNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZWNmYjY0YmRhNTIxMzcwOGZmNjdiYWQ0YzgzOTUwYjFm
ZmRjMzgwHhcNMjUwNzI2MTgwMDMwWhcNMjUwNzI3MTgwMDMwWjAzMTEwLwYDVQQD
EygwOGEyOTZmYjM1Y2RhOWU3NjkwMzZlMDZiNTEwNzMyMWZlNDUzZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5w7BphaqgUHjfJlcTyO1C13uL6C
zcrNwGgPivdJZ2Qgz/CxfiQCOU58xozDKWcp2ExKcxoh/CfEQSMwugavRispbRXn
H4OE4xD6ILOo6JuFhPV5HWDWzW1ycuSyrA9u7H+IvBZvzbmv8N4Q8MISa2toosHq
S2lC63RfsX+gWGzfp/N4dXrbiKjRWtJ3TkP23vJecEFpN6XLlFhLAekwOyscgOx/
Cljc3u4zQuE4mJl+2hIMfZH4q1T8LsQYWhCqITE1VVC+22FURR+95glM5hRV82xs
sTASUP1qYPzdjsOQ0IblmZPfI0adSt3tGzOvH8U0BYkZP2O3S0m0RKPpzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiilvs1zannaQNuBrUQcyH+RT/WMB8GA1UdIwQY
MBaAFIPs+2S9pSE3CP9nutTIOVCx/9w4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wMzE0NjMtNThlNi00ZmNiLThjYTEt
MWZjZmQwYzhiZGY1LzEvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wMzE0NjMtNThlNi00ZmNiLThjYTEtMWZjZmQwYzhiZGY1
LzEvZy16N1pMMmxJVGNJXzJlNjFNZzVVTEhfM0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAogrvmPBn
k449l3z9O0JDXQVEpPkpUBowuJw90DQnYO6uqkup/j6CJuziG2GNV7ZFctV5cOYW
cPd7B76DxJZ9kHmOrwgaLmXk2ibWahD7kctZnYVNkA1Wff3FBmB9YA/8j4yXfm9I
TysvYBDCwfFwpztNfA8/gt2o8Yjmgjnf8xXGNs7YY5iPawP/YLcK/65ehYb8mcGj
b6QNvL/3DKTOCbh/g5SznQ8b2btPKNohVMA/Mthmg3GLQy2ppdah5CMChkflOmT2
eUiNk03yRs+2TIRqxZtZ+Z5zQUarT+tUwQUFl7xo85Sn2l5hEkaOAEhDW98XVcvM
oNHAXklMC9CQtg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:29:25 2025 by rpki-client