
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: W5Uoy2WGu1Lxa9Ja/s7ExXa63FJKA7rLf0jf6U3iPHk=
Subject key identifier: C0:7B:34:9C:15:BE:B9:A9:54:B5:A8:F9:2A:AB:C7:22:66:FF:74:71
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 01984B8A500A0AA87DEB9825580F49134BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 0E29
Signing time: Sun 27 Jul 2025 11:00:12 +0000
Manifest this update: Sun 27 Jul 2025 11:00:12 +0000
Manifest next update: Mon 28 Jul 2025 11:00:12 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: YaJjskz6aP6+CxUGuFUDCpLCQHxrJ8hrOZiKsca8caE=)
2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:50:0a:0a:a8:7d:eb:98:25:58:0f:49:13:4b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Jul 27 11:00:12 2025 GMT
Not After : Jul 28 11:00:12 2025 GMT
Subject: CN=c07b349c15beb9a954b5a8f92aabc72266ff7471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:f1:d6:15:67:6a:e5:b6:87:e6:e6:27:c3:
fa:15:0e:a7:e3:1c:15:14:81:1e:29:15:44:3b:bb:
c2:ec:5b:dc:a0:cc:9c:f9:c1:c1:ae:64:83:71:f0:
b2:11:fa:62:b8:07:42:f3:bf:40:97:b8:e7:90:90:
6d:6f:3d:3e:b2:26:c9:37:66:66:b6:4d:d1:fb:1a:
91:04:3f:a0:2c:32:21:2f:15:bf:d9:a0:09:6a:28:
39:4f:f6:fb:0b:e9:b5:27:5e:f5:1f:5d:cf:4b:db:
fd:80:65:17:39:ba:f6:d2:16:e9:78:73:cc:48:e7:
dc:2e:68:47:d8:95:96:71:3b:ee:11:10:d2:02:70:
13:7c:12:61:90:cf:63:ec:e1:a0:e3:9d:b1:0b:7e:
8b:b6:8c:a0:5e:11:d7:c5:01:a4:71:2e:10:1f:2d:
5e:07:2d:5f:46:67:02:e8:9b:1f:9e:e6:f9:a8:2d:
c5:ab:c9:a7:78:0b:df:d7:92:b7:08:7d:e5:79:ff:
97:9d:25:f1:2c:46:93:04:40:07:07:fd:da:6c:05:
7d:21:30:af:5c:a4:6b:64:fe:d3:03:2a:98:cb:5b:
95:04:3e:f0:6b:f3:61:4c:06:55:b3:16:83:f1:aa:
6a:dd:61:d4:f8:56:25:ae:cb:4d:09:0c:40:21:1e:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7B:34:9C:15:BE:B9:A9:54:B5:A8:F9:2A:AB:C7:22:66:FF:74:71
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b4:52:3f:90:74:b1:dc:e0:81:2a:32:d4:0c:da:d2:04:60:
c8:5a:86:a1:15:c8:25:ac:9f:12:74:d7:9b:2e:93:0a:f5:e3:
5b:49:06:d0:a1:ed:a6:71:cb:dd:3f:7e:50:75:09:80:be:37:
4f:b3:06:b4:45:15:1f:9d:d2:e2:82:7d:d1:99:89:0f:0c:d0:
8d:ce:ef:02:cc:56:d4:61:4e:c3:94:70:6c:4e:86:92:a6:25:
7e:b2:48:90:54:78:34:c1:07:48:ea:ad:02:b7:14:fc:71:c4:
9c:80:7e:1c:f0:b3:ef:c7:04:6b:ac:b8:68:83:85:c1:cd:84:
bb:08:8c:46:98:0c:11:67:7f:6f:3a:47:e0:40:9c:bd:ac:8d:
ee:81:a4:3b:30:d6:28:eb:d1:96:45:b7:25:ab:2f:85:bc:a1:
24:d3:22:b0:3e:4e:a4:26:74:01:ae:53:36:77:da:c0:aa:64:
b0:d5:98:5d:7a:21:e4:5f:63:60:b1:8a:79:6a:f8:2e:b9:a2:
11:48:9f:99:0a:d3:3c:94:70:19:8d:c7:92:8a:76:39:24:43:
64:b0:59:e1:f9:b8:d8:82:f9:6c:6c:ca:15:29:9b:6e:c0:34:
95:5c:a5:b1:90:b2:32:a4:5c:a9:be:3f:e5:eb:5e:81:df:aa:
3f:6f:67:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLilAKCqh965glWA9JE0vXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjQ2ZDQyY2U4OWQ0MDkzZTRhYzkyN2E3ZjIzNmYzN2E1
MWFiZTIwHhcNMjUwNzI3MTEwMDEyWhcNMjUwNzI4MTEwMDEyWjAzMTEwLwYDVQQD
EyhjMDdiMzQ5YzE1YmViOWE5NTRiNWE4ZjkyYWFiYzcyMjY2ZmY3NDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWbx1hVnauW2h+bmJ8P6FQ6n4xwV
FIEeKRVEO7vC7FvcoMyc+cHBrmSDcfCyEfpiuAdC879Al7jnkJBtbz0+sibJN2Zm
tk3R+xqRBD+gLDIhLxW/2aAJaig5T/b7C+m1J171H13PS9v9gGUXObr20hbpeHPM
SOfcLmhH2JWWcTvuERDSAnATfBJhkM9j7OGg452xC36LtoygXhHXxQGkcS4QHy1e
By1fRmcC6Jsfnub5qC3Fq8mneAvf15K3CH3lef+XnSXxLEaTBEAHB/3abAV9ITCv
XKRrZP7TAyqYy1uVBD7wa/NhTAZVsxaD8apq3WHU+FYlrstNCQxAIR66zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB7NJwVvrmpVLWo+SqrxyJm/3RxMB8GA1UdIwQY
MBaAFBtkbULOidQJPkrJJ6fyNvN6UaviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMt
NjYzNDBiYmZmMGI5LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMtNjYzNDBiYmZmMGI5
LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrRSP5B0
sdzggSoy1Aza0gRgyFqGoRXIJayfEnTXmy6TCvXjW0kG0KHtpnHL3T9+UHUJgL43
T7MGtEUVH53S4oJ90ZmJDwzQjc7vAsxW1GFOw5RwbE6GkqYlfrJIkFR4NMEHSOqt
ArcU/HHEnIB+HPCz78cEa6y4aIOFwc2EuwiMRpgMEWd/bzpH4ECcvayN7oGkOzDW
KOvRlkW3JasvhbyhJNMisD5OpCZ0Aa5TNnfawKpksNWYXXoh5F9jYLGKeWr4Lrmi
EUifmQrTPJRwGY3Hkop2OSRDZLBZ4fm42IL5bGzKFSmbbsA0lVylsZCyMqRcqb4/
5etegd+qP29njQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:04:32 2025 by rpki-client