Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: iFwenBc0GRwefgiu7Nr2gKcO/UxTaHbthSfjXBVnDIE=
Subject key identifier: B8:9A:F9:6E:1B:46:AC:8B:91:C5:5D:63:CA:01:5B:EF:B9:F7:A6:3F
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 019748FA405D9A07E939B261DAC49D52A741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 0D8A
Signing time: Sat 07 Jun 2025 06:00:49 +0000
Manifest this update: Sat 07 Jun 2025 06:00:49 +0000
Manifest next update: Sun 08 Jun 2025 06:00:49 +0000
Files and hashes: 1: V6KVY7G6GgYfsN-YsqV35GGJJzk.roa (hash: eItdy8LiVFAx1foSIby+xCbrZCjTXV9gcCfQg6telps=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: 93oMIVtKpHluDki2XqmgcGN2U0hpJLwM6Wt3QzGodkw=)
3: va7G1Etlo6KFOzv3RXEcOofD7SM.roa (hash: rBy+ju7usynwUPKEj3xmeZHIvCFI48Q0Gca4wzYHCUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:40:5d:9a:07:e9:39:b2:61:da:c4:9d:52:a7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Jun 7 06:00:49 2025 GMT
Not After : Jun 8 06:00:49 2025 GMT
Subject: CN=b89af96e1b46ac8b91c55d63ca015befb9f7a63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f7:36:09:09:f6:95:72:f8:01:32:95:a2:14:
65:be:cf:bb:69:fc:47:0d:48:d2:e0:f4:50:72:e9:
18:8a:f0:7c:e7:fe:c5:05:5e:fc:ed:07:8c:59:7a:
e5:f8:2a:16:46:1a:d1:1d:61:3f:79:3c:e8:12:6d:
eb:9a:b5:3a:49:17:3c:56:17:d8:e4:b0:51:82:86:
36:24:61:0c:35:88:2c:40:4a:29:f4:be:da:88:da:
cb:23:a3:8c:dd:f5:4b:24:dd:58:ca:e1:2b:11:8a:
cb:cb:8f:bf:99:a2:ff:71:d2:6f:c5:dd:c4:12:35:
0b:ab:bf:54:a7:5a:d4:34:2a:f9:3c:f8:89:bb:68:
75:84:6f:0d:86:9f:7f:12:42:09:d9:e3:67:fc:53:
eb:e1:74:7a:b6:a7:c1:4a:c5:ff:14:85:d9:dc:bf:
29:0a:17:a2:89:9c:84:9a:1e:81:0e:87:5f:ea:01:
8e:0f:8d:0f:74:c7:3a:5a:09:85:4b:dd:bb:e7:d4:
d6:1c:41:07:66:a3:d3:0d:53:1d:31:6d:eb:2d:82:
26:b9:08:64:b6:10:1b:e2:ca:3c:5a:c3:d9:5a:f2:
7e:f3:4a:84:bd:84:d7:31:b3:16:29:00:90:2d:97:
b0:0f:67:e6:66:41:79:f7:47:29:15:9e:95:0f:b1:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9A:F9:6E:1B:46:AC:8B:91:C5:5D:63:CA:01:5B:EF:B9:F7:A6:3F
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:be:99:6d:70:36:23:c8:a2:f0:8b:a1:70:d1:55:35:64:48:
f6:90:07:68:92:47:de:66:53:7a:c9:31:26:bc:4c:8c:b0:ea:
9d:96:f6:b6:c1:f1:17:67:05:d6:2e:4b:19:bf:ed:53:95:74:
a8:59:fa:db:60:d6:1a:1b:00:56:1c:ed:9b:1e:52:da:d5:29:
55:3c:04:76:b2:39:1f:b1:7f:ed:c6:87:cf:62:1f:8b:0d:28:
b5:6e:1d:bc:82:c5:36:32:cc:29:39:a4:76:b2:6e:fe:b9:be:
00:4c:21:8c:a0:0f:1b:c2:2e:7f:79:4c:8c:8f:0a:6f:84:a7:
c1:1e:24:20:04:8d:85:5f:f7:76:77:02:8a:c8:b7:00:8a:20:
e9:62:8e:1c:5a:74:49:4e:37:39:8d:7a:f7:43:69:b6:60:48:
36:a9:a7:47:eb:6a:6e:19:17:3b:fe:88:3b:a0:3b:45:91:9e:
4f:b3:5d:72:bc:c2:fd:ba:4c:0d:3c:5c:ba:0a:2c:d9:10:e4:
23:d0:1d:ec:80:f1:76:0b:34:4d:d3:45:2d:a3:fa:ab:e7:4e:
56:a9:fc:4e:4d:d7:4a:08:e2:6b:7e:a5:55:d6:f8:14:e9:71:
c0:8b:1c:29:c7:c4:bb:04:8e:ad:1c:c5:37:ca:ac:d5:e7:3c:
38:db:72:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+kBdmgfpObJh2sSdUqdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl
NGU0NjEwHhcNMjUwNjA3MDYwMDQ5WhcNMjUwNjA4MDYwMDQ5WjAzMTEwLwYDVQQD
EyhiODlhZjk2ZTFiNDZhYzhiOTFjNTVkNjNjYTAxNWJlZmI5ZjdhNjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/c2CQn2lXL4ATKVohRlvs+7afxH
DUjS4PRQcukYivB85/7FBV787QeMWXrl+CoWRhrRHWE/eTzoEm3rmrU6SRc8VhfY
5LBRgoY2JGEMNYgsQEop9L7aiNrLI6OM3fVLJN1YyuErEYrLy4+/maL/cdJvxd3E
EjULq79Up1rUNCr5PPiJu2h1hG8Nhp9/EkIJ2eNn/FPr4XR6tqfBSsX/FIXZ3L8p
CheiiZyEmh6BDodf6gGOD40PdMc6WgmFS92759TWHEEHZqPTDVMdMW3rLYImuQhk
thAb4so8WsPZWvJ+80qEvYTXMbMWKQCQLZewD2fmZkF590cpFZ6VD7EfJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLia+W4bRqyLkcVdY8oBW++596Y/MB8GA1UdIwQY
MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt
YmM5MWMwNjcwZDAzLzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz
LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAL6ZbXA2
I8ii8IuhcNFVNWRI9pAHaJJH3mZTeskxJrxMjLDqnZb2tsHxF2cF1i5LGb/tU5V0
qFn622DWGhsAVhztmx5S2tUpVTwEdrI5H7F/7caHz2Ifiw0otW4dvILFNjLMKTmk
drJu/rm+AEwhjKAPG8Iuf3lMjI8Kb4SnwR4kIASNhV/3dncCisi3AIog6WKOHFp0
SU43OY1690NptmBINqmnR+tqbhkXO/6IO6A7RZGeT7NdcrzC/bpMDTxcugos2RDk
I9Ad7IDxdgs0TdNFLaP6q+dOVqn8Tk3XSgjia36lVdb4FOlxwIscKcfEuwSOrRzF
N8qs1ec8ONtykQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:53 2025 by rpki-client