Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: ECRxaYmS0+jp78AriVh5o6r07jTICh2xApe2+D9whpI=
Subject key identifier: 63:42:6E:43:E8:A4:4F:BD:C7:B4:FB:66:34:8C:A1:64:5A:86:4C:45
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 019935A4D68680EB30E5362FC10121C73EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 0E8A
Signing time: Wed 10 Sep 2025 22:00:19 +0000
Manifest this update: Wed 10 Sep 2025 22:00:19 +0000
Manifest next update: Thu 11 Sep 2025 22:00:19 +0000
Files and hashes: 1: V6KVY7G6GgYfsN-YsqV35GGJJzk.roa (hash: eItdy8LiVFAx1foSIby+xCbrZCjTXV9gcCfQg6telps=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: lzGjqNp4e63gFjplThwxuVcNViiNrt3D7Y9jEpzLHKo=)
3: nSZCrrugGYgpV2kpSk3jqr2LzfM.roa (hash: dkF/IyzVuAY00yNMBcnlRNr+PlCabKVgpyDEF61J7y4=)
4: va7G1Etlo6KFOzv3RXEcOofD7SM.roa (hash: rBy+ju7usynwUPKEj3xmeZHIvCFI48Q0Gca4wzYHCUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a4:d6:86:80:eb:30:e5:36:2f:c1:01:21:c7:3e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Sep 10 22:00:19 2025 GMT
Not After : Sep 11 22:00:19 2025 GMT
Subject: CN=63426e43e8a44fbdc7b4fb66348ca1645a864c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5b:48:21:9d:fa:01:23:a6:06:3a:49:53:19:
92:e0:d5:36:8d:c2:f2:cb:ac:ac:9e:23:c8:dc:3c:
86:b1:5e:7f:b0:2b:f1:98:4d:9c:fe:fe:ef:3e:3d:
4e:47:41:a0:e6:6c:5a:cd:72:c6:dc:51:16:d8:e7:
63:cb:03:81:b0:47:29:b1:39:09:b0:9b:23:4e:1f:
9c:8d:27:4c:38:36:36:48:1e:f5:b6:ce:40:fa:c0:
05:f5:61:99:d3:ea:81:1a:10:0a:2e:f5:dd:5e:37:
eb:2b:0f:8e:63:50:5e:34:98:e5:80:d7:c8:e8:9a:
dc:e0:5c:7d:0f:0f:be:4b:bf:55:1c:20:65:cf:d0:
60:3f:e8:a9:ad:c9:71:ec:5b:a2:3e:40:3b:4b:c4:
3c:25:be:8b:33:2b:00:c1:3b:62:12:8a:ea:50:a0:
86:71:89:f4:4b:d7:55:66:5b:d1:05:03:3b:5e:c9:
bc:53:95:e7:da:52:67:4c:27:91:1a:ed:f7:b2:64:
75:f6:63:98:76:d1:82:9c:d9:01:03:0f:8e:52:18:
88:b9:88:63:c9:b8:d7:30:7d:f0:68:a9:92:e9:fc:
2d:25:7a:59:9d:de:7e:fa:60:fe:4f:4a:57:49:57:
43:e2:4f:c4:8e:ba:35:db:25:72:14:31:18:ea:b3:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:42:6E:43:E8:A4:4F:BD:C7:B4:FB:66:34:8C:A1:64:5A:86:4C:45
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a6:cf:49:d6:19:1a:62:8c:15:c6:a4:6d:00:a1:01:ec:38:
e6:a4:1f:bc:37:fd:9f:96:de:a3:94:cc:8a:ae:ef:62:03:bd:
28:f3:43:09:c7:02:88:29:f5:a8:db:7e:4f:da:3c:fd:2e:8f:
18:c5:9e:95:f6:d8:98:ff:02:c2:36:58:11:f1:82:41:f3:bb:
55:57:09:60:b3:6e:49:62:c7:b1:ab:77:85:d5:5e:30:39:8d:
4c:8c:1f:20:13:ee:3a:5b:58:fa:a0:cc:84:f0:ae:2f:d9:c9:
4c:53:fe:17:c8:c4:bd:4d:d2:45:bb:d3:50:06:7d:9d:c0:24:
04:99:20:f4:f4:52:c6:3f:9e:d9:6c:26:a8:d9:ed:6b:4f:21:
7f:e1:47:44:b1:10:88:a4:5a:33:8e:1b:cd:96:bf:ee:0f:3b:
02:4e:2b:66:30:25:66:36:5f:02:b4:20:67:ed:cd:2e:a3:bd:
7d:67:7d:5a:de:58:68:0a:f1:8b:eb:e9:ee:06:5b:2c:2f:dd:
b7:ab:76:2b:0a:a2:cc:ec:7e:91:b2:52:5e:75:1d:b9:4b:be:
1d:7b:28:2c:bb:9f:4b:3b:21:54:f6:fc:fe:c5:4f:45:f4:b5:
43:a5:79:0b:37:9e:fa:3f:f4:b2:ca:f5:50:39:49:97:46:bf:
c7:45:4d:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1pNaGgOsw5TYvwQEhxz6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl
NGU0NjEwHhcNMjUwOTEwMjIwMDE5WhcNMjUwOTExMjIwMDE5WjAzMTEwLwYDVQQD
Eyg2MzQyNmU0M2U4YTQ0ZmJkYzdiNGZiNjYzNDhjYTE2NDVhODY0YzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VtIIZ36ASOmBjpJUxmS4NU2jcLy
y6ysniPI3DyGsV5/sCvxmE2c/v7vPj1OR0Gg5mxazXLG3FEW2OdjywOBsEcpsTkJ
sJsjTh+cjSdMODY2SB71ts5A+sAF9WGZ0+qBGhAKLvXdXjfrKw+OY1BeNJjlgNfI
6Jrc4Fx9Dw++S79VHCBlz9BgP+iprclx7FuiPkA7S8Q8Jb6LMysAwTtiEorqUKCG
cYn0S9dVZlvRBQM7Xsm8U5Xn2lJnTCeRGu33smR19mOYdtGCnNkBAw+OUhiIuYhj
ybjXMH3waKmS6fwtJXpZnd5++mD+T0pXSVdD4k/Ejro12yVyFDEY6rM65QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNCbkPopE+9x7T7ZjSMoWRahkxFMB8GA1UdIwQY
MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt
YmM5MWMwNjcwZDAzLzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz
LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKbPSdYZ
GmKMFcakbQChAew45qQfvDf9n5beo5TMiq7vYgO9KPNDCccCiCn1qNt+T9o8/S6P
GMWelfbYmP8CwjZYEfGCQfO7VVcJYLNuSWLHsat3hdVeMDmNTIwfIBPuOltY+qDM
hPCuL9nJTFP+F8jEvU3SRbvTUAZ9ncAkBJkg9PRSxj+e2WwmqNnta08hf+FHRLEQ
iKRaM44bzZa/7g87Ak4rZjAlZjZfArQgZ+3NLqO9fWd9Wt5YaArxi+vp7gZbLC/d
t6t2KwqizOx+kbJSXnUduUu+HXsoLLufSzshVPb8/sVPRfS1Q6V5Czee+j/0ssr1
UDlJl0a/x0VNzA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 06:11:17 2025 by rpki-client