Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier: 6uHe8KRYIynL/QaBDZSBNyzDThJ0fa+5YrQpPhyhJsI=
Subject key identifier: F0:38:CA:85:73:E9:57:C4:82:69:5F:D9:48:77:8D:4D:B0:FB:56:36
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 0197488C28E41AF7D0C5EB5E450BD28455F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 04:00:34 +0000
Manifest this update: Sat 07 Jun 2025 04:00:34 +0000
Manifest next update: Sun 08 Jun 2025 04:00:34 +0000
Files and hashes: 1: OSPVEMKxRvS3K2S9RynwSClpPy0.roa (hash: I2dq/kcaAdZwjzuTK1RJZZE0wsjKNorsCYjqSblF2e4=)
2: UqiuKqTQR1pyHUIwfSaJuTVkwgM.roa (hash: /daQ84/IlyKQccK8HNvLp9yZzU3eH5Tw2SuorEVY8WU=)
3: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: zSOzg60DBosbeLCcQUriJlMdWTdpEwEmrQNYbSxVtlY=)
4: hg2Ps6LFSparyJWx3GTYmUPm3pA.roa (hash: QXdyI8bAesp03A33q/sHoHZRnlP3monnDF28zjvU5M8=)
5: uQl0h3i3b202uiSsE2ql_r0wnXQ.roa (hash: RIkzFeAhN9PoylnIf3cZdxJ8xVemWn5y0Bu19U5kI84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:28:e4:1a:f7:d0:c5:eb:5e:45:0b:d2:84:55:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Jun 7 04:00:34 2025 GMT
Not After : Jun 8 04:00:34 2025 GMT
Subject: CN=f038ca8573e957c482695fd948778d4db0fb5636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:d6:e2:92:1e:b6:a1:7a:08:13:59:a6:75:
30:42:de:54:72:53:7d:17:f0:7e:d7:29:d6:70:66:
29:9e:56:70:56:9a:f4:6a:a8:35:65:a5:bd:fb:d9:
b4:fe:bb:f4:08:72:06:34:7a:61:f7:39:96:d6:3e:
b8:54:14:ba:82:e3:4c:38:1d:c4:d2:db:dd:34:68:
38:0f:3d:48:66:0a:fd:97:b1:bd:dd:0f:1e:98:3b:
e4:20:0a:7d:17:5d:cd:71:64:3e:02:76:8d:70:e9:
bf:aa:86:73:5f:e9:83:4d:5a:52:d4:61:64:2a:6a:
9e:7d:f0:cc:ed:83:22:51:48:e3:cd:69:35:dc:dc:
b5:91:e7:f1:2f:cf:f5:4f:51:08:09:70:cc:9d:c8:
1f:0b:f8:78:2e:23:f2:32:4d:15:19:1c:21:3a:d0:
ce:73:68:7e:da:18:39:a0:d9:02:b4:41:9a:ed:56:
53:92:04:21:0a:1f:e5:d9:eb:43:9e:93:31:d1:0b:
f6:0b:ec:93:59:c2:70:4a:41:0f:b5:61:91:66:5e:
ef:f3:82:6d:63:0a:5a:ae:74:d5:bd:45:3c:84:fa:
48:9e:28:64:dc:e2:28:dd:f3:7c:e7:03:68:3e:1c:
67:5d:f0:75:f5:45:1a:57:ad:90:f6:64:db:06:8e:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:38:CA:85:73:E9:57:C4:82:69:5F:D9:48:77:8D:4D:B0:FB:56:36
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:af:6c:e2:86:84:f0:9b:de:47:e7:77:72:21:db:94:2d:df:
5b:43:6e:6c:49:cb:59:82:1a:23:11:dc:f3:dc:2b:73:e5:bb:
94:3e:dd:94:31:4d:1f:3c:e5:22:fe:1d:f1:60:da:c7:f9:a0:
20:17:2b:bc:72:c5:8d:e0:ff:be:42:b0:0c:51:12:60:a3:22:
f1:7f:57:68:8d:01:6f:52:a4:fb:1d:7a:6a:c1:8b:a1:4b:a1:
05:65:95:25:62:de:d9:6d:ec:8d:d6:cc:24:91:3c:df:4c:d3:
91:57:bb:a5:32:ae:71:44:43:c6:72:aa:d3:9f:40:b8:6e:37:
4f:47:e4:4a:02:95:a9:06:b7:cd:23:35:25:d3:4b:e7:e2:1b:
6a:e2:df:27:e6:82:22:fd:7b:7a:00:e6:0f:34:f7:af:e8:98:
5a:1b:fd:5d:bf:3d:54:00:84:0a:ec:3e:cc:7c:05:89:3e:ae:
63:2e:bb:68:99:18:ad:7a:23:43:7f:ca:a0:3f:b3:3d:e5:d1:
5f:8a:0b:e9:cd:ed:c7:62:70:28:ee:e8:c8:d6:9a:62:50:6b:
c8:80:cf:03:3b:bf:f7:b4:34:8a:d9:4b:24:2d:e8:7e:11:59:
1e:be:24:eb:80:88:54:7c:ba:32:60:88:91:47:b1:17:53:91:
c1:ca:f9:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjCjkGvfQxeteRQvShFX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyN2FmMTdmMDQ5OTYyN2U0YjNjOGNjNWMzMzNlYzRiOGU3
NjM1ZTAwHhcNMjUwNjA3MDQwMDM0WhcNMjUwNjA4MDQwMDM0WjAzMTEwLwYDVQQD
EyhmMDM4Y2E4NTczZTk1N2M0ODI2OTVmZDk0ODc3OGQ0ZGIwZmI1NjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rLW4pIetqF6CBNZpnUwQt5UclN9
F/B+1ynWcGYpnlZwVpr0aqg1ZaW9+9m0/rv0CHIGNHph9zmW1j64VBS6guNMOB3E
0tvdNGg4Dz1IZgr9l7G93Q8emDvkIAp9F13NcWQ+AnaNcOm/qoZzX+mDTVpS1GFk
KmqeffDM7YMiUUjjzWk13Ny1kefxL8/1T1EICXDMncgfC/h4LiPyMk0VGRwhOtDO
c2h+2hg5oNkCtEGa7VZTkgQhCh/l2etDnpMx0Qv2C+yTWcJwSkEPtWGRZl7v84Jt
YwparnTVvUU8hPpInihk3OIo3fN85wNoPhxnXfB19UUaV62Q9mTbBo582wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPA4yoVz6VfEgmlf2Uh3jU2w+1Y2MB8GA1UdIwQY
MBaAFIJ68X8EmWJ+SzyMxcMz7EuOdjXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgt
NzMxM2M3ZjNjYTNmLzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgtNzMxM2M3ZjNjYTNm
LzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWa9s4oaE
8JveR+d3ciHblC3fW0NubEnLWYIaIxHc89wrc+W7lD7dlDFNHzzlIv4d8WDax/mg
IBcrvHLFjeD/vkKwDFESYKMi8X9XaI0Bb1Kk+x16asGLoUuhBWWVJWLe2W3sjdbM
JJE830zTkVe7pTKucURDxnKq059AuG43T0fkSgKVqQa3zSM1JdNL5+IbauLfJ+aC
Iv17egDmDzT3r+iYWhv9Xb89VACECuw+zHwFiT6uYy67aJkYrXojQ3/KoD+zPeXR
X4oL6c3tx2JwKO7oyNaaYlBryIDPAzu/97Q0itlLJC3ofhFZHr4k64CIVHy6MmCI
kUexF1ORwcr5pQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:48 2025 by rpki-client