Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier: dEKcBoDeONkfBiKpKqKLZVyuIbQVNrYjlR6xAWi7R9U=
Subject key identifier: 74:AD:92:BB:9F:76:60:06:2D:75:B0:1E:BF:F3:CD:B2:50:E1:05:90
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 019848C070687B438E38EF2C439DD8C2A501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number: 0C6F
Signing time: Sat 26 Jul 2025 22:00:27 +0000
Manifest this update: Sat 26 Jul 2025 22:00:27 +0000
Manifest next update: Sun 27 Jul 2025 22:00:27 +0000
Files and hashes: 1: 1-eVtiZIJZtejkcxnJZbMOuqtkvM.roa (hash: /dozujzBruht/lOgqwCLtQNFBrpieolWDy5kZ5Mel3s=)
2: 56FwlKZ7KIhARLPC6HlmmMABBnU.roa (hash: Z+1GZvGlxeBEP1crVQ4oVXjpJKgbOm4WDdf1clBCOOM=)
3: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: lOR2PMAbPSf8Osbd3JlqSo4JJleu80Bta9Xg7BtzcDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:70:68:7b:43:8e:38:ef:2c:43:9d:d8:c2:a5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Jul 26 22:00:27 2025 GMT
Not After : Jul 27 22:00:27 2025 GMT
Subject: CN=74ad92bb9f7660062d75b01ebff3cdb250e10590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9a:8f:64:10:ea:5e:98:8b:54:b4:74:ec:8d:
ad:36:09:a9:1f:f9:d5:44:45:25:9b:44:0d:15:7b:
b5:2e:2d:9f:ed:43:25:b7:13:b5:a0:8b:b0:69:09:
52:dc:97:a7:0a:e7:fd:2b:23:52:56:1f:92:7c:b9:
48:3a:97:d0:3d:61:39:7a:be:25:7b:4b:af:aa:eb:
90:f2:30:64:b1:aa:85:1e:1e:1a:ae:8f:11:23:50:
6b:33:04:73:e9:87:63:0e:3c:d7:b2:04:f3:17:25:
f7:61:2b:5b:a7:65:98:69:b2:03:51:10:99:f2:af:
2a:d5:c9:38:07:5d:2f:cd:2c:c9:6b:9a:d3:f8:8f:
3b:41:40:c6:2f:4f:dd:34:d2:4f:ae:af:42:16:3c:
a2:7b:a5:60:ca:2e:cc:15:99:03:93:6d:cb:28:1d:
75:24:26:26:51:bd:ab:4f:94:b1:77:fc:2f:91:64:
cc:58:7b:05:42:b1:9d:b7:9d:10:de:45:25:78:79:
55:01:f0:53:6d:5d:8e:88:91:4c:14:48:9f:38:c0:
16:5e:1e:db:b9:59:bd:63:3c:9f:b9:5f:98:33:44:
32:89:49:05:27:6b:b6:af:30:44:2a:1e:27:0c:a1:
db:fa:04:2c:99:29:b8:ff:03:c8:9c:bc:9a:c0:ab:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AD:92:BB:9F:76:60:06:2D:75:B0:1E:BF:F3:CD:B2:50:E1:05:90
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:57:ca:e8:a6:b0:17:a8:ee:47:d3:8b:32:ed:bd:d7:f4:ca:
72:cb:09:3e:53:76:99:e1:e3:b5:d4:67:34:b9:3e:84:8e:33:
5b:55:0a:b2:bb:ca:54:db:14:71:97:c3:9d:7b:01:b5:c8:0f:
c2:25:70:0a:f3:e0:5e:2a:22:eb:d8:d6:4e:0a:1d:d2:8e:ee:
54:79:87:e6:dd:76:b3:72:97:4b:92:29:76:89:02:e9:88:a7:
4c:4d:4f:24:e9:b8:60:6e:24:02:f7:31:49:4b:58:2f:25:0c:
97:22:f0:6e:d1:cc:04:fa:6e:7f:ea:d1:c3:5a:8a:a1:a6:63:
d0:8c:d7:ec:c9:2f:af:25:ea:44:08:b6:9c:5a:f2:01:73:c7:
21:35:5a:36:51:db:16:7a:f7:c4:f9:de:cf:b3:bf:b4:e7:1e:
86:9d:f1:53:e7:9c:2d:86:ae:eb:a0:9b:e8:01:78:ad:7f:59:
10:d7:5f:d6:55:c6:b0:69:2c:99:15:7f:95:2a:d4:5f:78:6e:
0d:c5:7e:c5:d8:a4:0e:81:50:02:2c:1d:64:9e:88:65:98:b0:
29:48:31:05:42:33:25:10:14:e1:61:86:03:a6:3f:76:b9:ca:
f9:1b:d4:a0:5d:ef:d7:29:13:3a:ea:8f:b0:7d:04:c4:a4:ee:
35:5a:bb:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwHBoe0OOOO8sQ53YwqUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZTVkOTAzMDFkM2NmNjdiODhmZWU0MmRkNTQ1YWZjZjE0
ZWE1NjEwHhcNMjUwNzI2MjIwMDI3WhcNMjUwNzI3MjIwMDI3WjAzMTEwLwYDVQQD
Eyg3NGFkOTJiYjlmNzY2MDA2MmQ3NWIwMWViZmYzY2RiMjUwZTEwNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZqPZBDqXpiLVLR07I2tNgmpH/nV
REUlm0QNFXu1Li2f7UMltxO1oIuwaQlS3JenCuf9KyNSVh+SfLlIOpfQPWE5er4l
e0uvquuQ8jBksaqFHh4aro8RI1BrMwRz6YdjDjzXsgTzFyX3YStbp2WYabIDURCZ
8q8q1ck4B10vzSzJa5rT+I87QUDGL0/dNNJPrq9CFjyie6Vgyi7MFZkDk23LKB11
JCYmUb2rT5Sxd/wvkWTMWHsFQrGdt50Q3kUleHlVAfBTbV2OiJFMFEifOMAWXh7b
uVm9YzyfuV+YM0QyiUkFJ2u2rzBEKh4nDKHb+gQsmSm4/wPInLyawKsqUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHStkrufdmAGLXWwHr/zzbJQ4QWQMB8GA1UdIwQY
MBaAFIPl2QMB089nuI/uQt1UWvzxTqVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2It
NzgyYjgyZWJjYWFlLzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2ItNzgyYjgyZWJjYWFl
LzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlfK6Kaw
F6juR9OLMu291/TKcssJPlN2meHjtdRnNLk+hI4zW1UKsrvKVNsUcZfDnXsBtcgP
wiVwCvPgXioi69jWTgod0o7uVHmH5t12s3KXS5IpdokC6YinTE1PJOm4YG4kAvcx
SUtYLyUMlyLwbtHMBPpuf+rRw1qKoaZj0IzX7MkvryXqRAi2nFryAXPHITVaNlHb
Fnr3xPnez7O/tOcehp3xU+ecLYau66Cb6AF4rX9ZENdf1lXGsGksmRV/lSrUX3hu
DcV+xdikDoFQAiwdZJ6IZZiwKUgxBUIzJRAU4WGGA6Y/drnK+RvUoF3v1ykTOuqP
sH0ExKTuNVq7dw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:43 2025 by rpki-client