Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: MWfpkAGBRVGuR/z0RAye4z0hH8mcjCoq+l69h/A051c=
Subject key identifier: 63:B0:F3:F3:84:FD:74:1D:18:98:33:08:C3:D5:E8:B2:35:C7:D5:A6
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 01973C51634FD20291628C34A27E94EA9C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 0F10
Signing time: Wed 04 Jun 2025 19:00:56 +0000
Manifest this update: Wed 04 Jun 2025 19:00:56 +0000
Manifest next update: Thu 05 Jun 2025 19:00:56 +0000
Files and hashes: 1: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (hash: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=)
2: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (hash: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: x55jTemMrjoy1qH0AffVXz9XcKdPo4uU4D6Cn9fJXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3c:51:63:4f:d2:02:91:62:8c:34:a2:7e:94:ea:9c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Jun 4 19:00:56 2025 GMT
Not After : Jun 5 19:00:56 2025 GMT
Subject: CN=63b0f3f384fd741d18983308c3d5e8b235c7d5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:da:a6:f1:68:47:a3:47:bc:12:6c:0b:49:
5d:d7:be:59:85:91:50:de:28:d0:0e:63:00:d2:65:
c1:7a:53:7b:8d:41:ea:71:27:9e:9d:5c:94:68:f7:
e0:ed:5c:7f:fd:e3:16:fb:5b:5e:9d:da:80:f7:0d:
82:ff:3c:5c:37:dd:a8:c5:65:f5:0b:94:ec:ad:ad:
de:0f:10:54:27:9c:0d:87:cb:4d:af:ef:9e:74:5a:
c4:dd:40:a1:09:cc:01:eb:17:03:11:13:27:0b:ca:
72:58:e9:39:77:19:e8:bc:d0:80:8f:54:41:ff:5e:
79:23:d7:aa:da:91:e5:29:39:42:8c:2f:0b:94:b0:
71:70:71:75:2e:68:9e:9f:55:8d:c5:3a:2c:ad:0f:
22:14:96:7c:25:d3:c4:48:f3:8e:9d:03:97:60:92:
23:6f:0b:f4:15:58:97:70:e0:f1:79:1f:86:3f:b3:
1a:1e:2b:32:f8:3b:d8:a4:5f:23:20:4f:f0:ee:75:
7e:95:80:62:07:70:f9:32:64:a8:cf:47:9c:a9:25:
aa:8d:d7:c0:fe:0a:81:b8:57:bd:39:cd:4d:fa:3e:
c6:97:93:4e:81:55:02:7b:88:8b:d0:56:47:eb:45:
a2:67:3b:9b:42:b8:1a:3d:53:e2:b3:a7:07:c1:9e:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B0:F3:F3:84:FD:74:1D:18:98:33:08:C3:D5:E8:B2:35:C7:D5:A6
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:33:10:26:0b:d8:eb:11:df:c6:d8:67:66:67:a8:8d:6d:a9:
1d:fd:41:4f:25:27:9c:a0:4d:f1:df:8f:90:ff:dc:38:4c:10:
2d:a3:09:fe:37:70:df:a4:00:8d:f0:19:17:96:11:b0:d6:e4:
78:2c:04:3b:9e:52:80:33:40:16:e0:b4:b1:6c:d9:8e:96:61:
24:bb:61:45:9c:49:a1:a9:89:2b:81:30:7d:d0:06:18:ff:4e:
50:5a:bc:3b:95:6b:b4:8b:79:6f:0b:6c:90:9c:20:4f:a7:ea:
ab:e5:37:98:5e:90:86:99:9d:26:ee:84:5c:f0:83:2c:4d:dc:
0e:a5:d7:6a:e3:a6:de:95:eb:54:eb:0b:ec:ca:7f:ed:4d:45:
a9:c8:77:b7:dd:c9:4c:30:bc:21:85:46:19:d1:f6:55:a7:58:
9f:44:fb:3a:51:7d:e0:21:d5:48:c6:da:ca:09:7b:3f:1f:e5:
dc:0a:9a:5c:48:b4:e3:2e:62:0f:b5:b8:c5:fc:90:a7:ff:3e:
3d:6f:a7:56:63:21:99:0b:1f:04:55:ce:33:68:b8:a4:8c:a9:
e5:5a:58:ab:23:1d:4d:69:90:f5:7b:9c:2c:9d:77:6e:ca:2d:
95:73:16:ca:27:50:20:a4:21:41:24:12:bf:aa:a6:12:b6:90:
86:cc:16:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc8UWNP0gKRYow0on6U6pyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZTIzNDBlZjVjNGE0OTUyZWI0MTNkMjg4YzI5ZDkzNzgz
NDIyMzIwHhcNMjUwNjA0MTkwMDU2WhcNMjUwNjA1MTkwMDU2WjAzMTEwLwYDVQQD
Eyg2M2IwZjNmMzg0ZmQ3NDFkMTg5ODMzMDhjM2Q1ZThiMjM1YzdkNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss3apvFoR6NHvBJsC0ld175ZhZFQ
3ijQDmMA0mXBelN7jUHqcSeenVyUaPfg7Vx//eMW+1tendqA9w2C/zxcN92oxWX1
C5Tsra3eDxBUJ5wNh8tNr++edFrE3UChCcwB6xcDERMnC8pyWOk5dxnovNCAj1RB
/155I9eq2pHlKTlCjC8LlLBxcHF1Lmien1WNxTosrQ8iFJZ8JdPESPOOnQOXYJIj
bwv0FViXcODxeR+GP7MaHisy+DvYpF8jIE/w7nV+lYBiB3D5MmSoz0ecqSWqjdfA
/gqBuFe9Oc1N+j7Gl5NOgVUCe4iL0FZH60WiZzubQrgaPVPis6cHwZ4QEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOw8/OE/XQdGJgzCMPV6LI1x9WmMB8GA1UdIwQY
MBaAFIPiNA71xKSVLrQT0ojCnZN4NCIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2Ut
YTZjZWMwNDU5NWY4LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2UtYTZjZWMwNDU5NWY4
LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTMQJgvY
6xHfxthnZmeojW2pHf1BTyUnnKBN8d+PkP/cOEwQLaMJ/jdw36QAjfAZF5YRsNbk
eCwEO55SgDNAFuC0sWzZjpZhJLthRZxJoamJK4EwfdAGGP9OUFq8O5VrtIt5bwts
kJwgT6fqq+U3mF6QhpmdJu6EXPCDLE3cDqXXauOm3pXrVOsL7Mp/7U1Fqch3t93J
TDC8IYVGGdH2VadYn0T7OlF94CHVSMbaygl7Px/l3AqaXEi04y5iD7W4xfyQp/8+
PW+nVmMhmQsfBFXOM2i4pIyp5VpYqyMdTWmQ9XucLJ13bsotlXMWyidQIKQhQSQS
v6qmEraQhswWyA==
-----END CERTIFICATE-----
Generated at Wed Jun 4 22:47:48 2025 by rpki-client