Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File: _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier: M5Ane0PPnSIr11GuST3tRFIRXhX6ITTgHjAW5cbPpXw=
Subject key identifier: C4:40:8A:09:08:26:74:32:DD:C1:D8:EF:CA:BD:94:48:9C:C5:31:79
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 0197526B4A5C3E07AC1F7CD00F40E614D5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number: 12CE
Signing time: Mon 09 Jun 2025 02:00:52 +0000
Manifest this update: Mon 09 Jun 2025 02:00:52 +0000
Manifest next update: Tue 10 Jun 2025 02:00:52 +0000
Files and hashes: 1: AIlfpG57oaa0IcaTUnoTGn0e-MU.roa (hash: doNG5v78wDg1ZSRUc5huAPyd+QjLPudy5eWVSUSR05g=)
2: HT7grAARmQeTl9rgD_I5_Dh0UNk.roa (hash: lbOrIFQ1pfBggQZzBgBo0lXjKP8U8v/LXvuvO53enSU=)
3: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: AeOOPUkrziMjtn5gzR5Szi9mXKB3brRDTTyuA3KTBbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:4a:5c:3e:07:ac:1f:7c:d0:0f:40:e6:14:d5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Jun 9 02:00:52 2025 GMT
Not After : Jun 10 02:00:52 2025 GMT
Subject: CN=c4408a0908267432ddc1d8efcabd94489cc53179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:17:7d:68:c1:c3:96:2f:77:1f:ea:0b:11:
6a:b8:b5:02:e6:87:d4:f4:d3:9b:02:b1:a5:53:0f:
27:6e:57:2f:1b:cc:db:1c:04:8b:12:d4:97:c1:7a:
64:fc:6d:ca:91:14:92:bb:c2:c4:ea:3a:29:2d:5f:
c2:e3:21:7d:6b:69:85:8a:db:66:3a:cc:22:cd:35:
6f:24:b9:b0:fd:08:11:83:ff:57:61:76:a5:4d:ed:
f4:06:fc:66:61:aa:d2:f4:7f:2e:73:d9:3e:ef:6c:
f2:bc:c7:5c:82:96:e9:d5:9a:d4:58:95:26:e4:a0:
52:1e:29:d5:2c:40:5c:de:2e:6e:ae:d6:91:bd:cb:
04:45:1c:fc:5d:5b:c3:81:67:ed:67:9a:64:2b:b6:
5a:fa:30:01:e8:f9:42:c3:ef:90:17:01:81:d5:48:
76:4d:13:eb:b0:8c:3b:da:ca:b2:32:be:1a:e5:3d:
87:2d:51:23:47:04:b8:af:b6:6b:a8:a7:8b:b7:3f:
f8:21:e4:0d:b5:65:fd:90:d9:7f:6d:25:41:86:14:
40:a1:11:66:4f:53:be:0b:c2:3d:59:f9:59:2a:08:
24:55:0b:8c:38:21:5a:57:f8:6d:95:1b:3c:82:78:
68:92:44:aa:f7:20:dd:45:bf:1e:e2:38:3c:7a:86:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:40:8A:09:08:26:74:32:DD:C1:D8:EF:CA:BD:94:48:9C:C5:31:79
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ba:f4:d8:be:85:28:ec:46:9c:ac:e1:b7:de:a3:27:d5:c5:
02:7c:cc:85:09:32:f0:d3:c8:46:fe:a7:00:a0:37:b2:ca:fc:
35:21:9d:87:22:58:c4:f8:01:74:c7:45:1d:b5:dc:89:bd:af:
0e:2d:b9:e5:a7:83:fa:dd:c4:b0:29:ca:6f:c3:42:21:ce:fc:
1d:45:19:2f:58:2b:76:5b:c1:92:3f:2c:04:13:4a:ab:00:cd:
16:d1:e6:9c:12:0d:e7:45:8a:20:84:63:02:08:c1:13:c1:36:
68:ce:3d:fd:4e:74:9f:f1:9d:d1:20:4e:9b:93:81:69:de:42:
6e:cb:61:a6:c6:45:dd:f3:62:a3:5e:9e:37:75:a2:d6:84:2e:
a6:bd:28:ff:31:d3:5f:f1:96:4a:26:70:43:aa:c5:72:dc:f3:
ba:67:e3:9f:82:da:7e:a9:c0:94:47:a6:d0:1d:ef:02:b8:4a:
72:f7:be:33:7c:e3:c1:0e:fb:e5:b0:2a:22:d1:87:34:51:35:
5d:f1:49:63:c1:6f:c1:73:2e:c4:ca:c5:a5:38:6d:26:98:56:
0a:2b:25:16:24:fc:06:39:7d:ad:95:3b:12:ff:2f:7c:85:d2:
97:86:82:f9:bb:78:87:2f:47:db:27:3b:26:5c:ac:68:f9:ca:
bd:32:32:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSa0pcPgesH3zQD0DmFNXIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMGE3OTE5YTNlZDdiMTNiNWRhYjM5Yzg2ZTA0YTdhOTcy
MzE0NzMwHhcNMjUwNjA5MDIwMDUyWhcNMjUwNjEwMDIwMDUyWjAzMTEwLwYDVQQD
EyhjNDQwOGEwOTA4MjY3NDMyZGRjMWQ4ZWZjYWJkOTQ0ODljYzUzMTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DkXfWjBw5Yvdx/qCxFquLUC5ofU
9NObArGlUw8nblcvG8zbHASLEtSXwXpk/G3KkRSSu8LE6jopLV/C4yF9a2mFittm
OswizTVvJLmw/QgRg/9XYXalTe30BvxmYarS9H8uc9k+72zyvMdcgpbp1ZrUWJUm
5KBSHinVLEBc3i5urtaRvcsERRz8XVvDgWftZ5pkK7Za+jAB6PlCw++QFwGB1Uh2
TRPrsIw72sqyMr4a5T2HLVEjRwS4r7ZrqKeLtz/4IeQNtWX9kNl/bSVBhhRAoRFm
T1O+C8I9WflZKggkVQuMOCFaV/htlRs8gnhokkSq9yDdRb8e4jg8eoYIeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRAigkIJnQy3cHY78q9lEicxTF5MB8GA1UdIwQY
MBaAFP4KeRmj7XsTtdqznIbgSnqXIxRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2dwNUdhUHRleE8xMnJPY2h1QktlcGNqRkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80ODUwNmEtMzNkYy00NTc0LTgwZjMt
YmRlMjRhMmE5ZmY1LzEvX2dwNUdhUHRleE8xMnJPY2h1QktlcGNqRkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80ODUwNmEtMzNkYy00NTc0LTgwZjMtYmRlMjRhMmE5ZmY1
LzEvX2dwNUdhUHRleE8xMnJPY2h1QktlcGNqRkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLr02L6F
KOxGnKzht96jJ9XFAnzMhQky8NPIRv6nAKA3ssr8NSGdhyJYxPgBdMdFHbXcib2v
Di255aeD+t3EsCnKb8NCIc78HUUZL1grdlvBkj8sBBNKqwDNFtHmnBIN50WKIIRj
AgjBE8E2aM49/U50n/Gd0SBOm5OBad5CbsthpsZF3fNio16eN3Wi1oQupr0o/zHT
X/GWSiZwQ6rFctzzumfjn4LafqnAlEem0B3vArhKcve+M3zjwQ775bAqItGHNFE1
XfFJY8FvwXMuxMrFpThtJphWCislFiT8Bjl9rZU7Ev8vfIXSl4aC+bt4hy9H2yc7
JlysaPnKvTIyDg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:58:39 2025 by rpki-client