Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: ijQqAyPr4YAACSOA2BCSrZ9a3Ze+dcoKxwhjEZ5wlp4=
Subject key identifier: C4:A1:E5:73:C5:95:CA:B7:7F:EB:42:85:5D:8A:0C:33:B8:7B:80:E0
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 01984A09D1044E4DD554A667C27DE34709C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 129B
Signing time: Sun 27 Jul 2025 04:00:13 +0000
Manifest this update: Sun 27 Jul 2025 04:00:13 +0000
Manifest next update: Mon 28 Jul 2025 04:00:13 +0000
Files and hashes: 1: O_Wh7DXILbeq2pJ7lbo670WPHcI.roa (hash: 9coM5+TGNwqDkXBfhIBTqYZ9wRzRhg/kPk42ppbDqL4=)
2: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: ibdT/U1VrugqAJwhZYhfaMYD29Kh5eGrTVDMwbhemzs=)
3: wurW9HScl5J6v9_HgJ6iitJiiYY.roa (hash: M+hjHy8mpb8e2lyHR4XP7A/L1pzrBL572LaM0RnZ+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d1:04:4e:4d:d5:54:a6:67:c2:7d:e3:47:09:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Jul 27 04:00:13 2025 GMT
Not After : Jul 28 04:00:13 2025 GMT
Subject: CN=c4a1e573c595cab77feb42855d8a0c33b87b80e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:e3:59:e4:d4:4f:ae:51:ea:88:2b:96:97:
e8:21:d3:7f:2b:07:3d:10:8a:9d:0c:6d:e5:45:19:
17:2d:5e:0d:0e:3e:46:65:db:2e:3f:f9:8f:97:27:
31:64:28:c5:21:2c:e5:0d:1d:f0:1f:ba:1d:04:51:
92:4e:23:01:1a:20:0a:50:3f:11:d4:a2:50:e5:e6:
90:bb:5a:17:1d:3b:cd:9a:aa:61:f2:3a:05:36:e2:
f0:21:75:2a:bd:31:7c:aa:e5:31:d5:d7:32:c0:f2:
84:e4:9e:1c:f7:85:df:a0:76:6c:27:1c:7d:da:48:
13:04:66:d5:35:c3:e3:82:1d:e2:09:7c:04:29:21:
4c:45:9d:70:72:d3:58:97:3d:81:2a:cc:fb:77:33:
43:bb:d8:45:a9:6a:4d:a0:c7:61:65:c5:e3:2e:53:
87:8a:a1:d6:95:15:5c:e6:4a:3e:17:ba:d9:c0:17:
e7:ed:f8:79:88:52:bf:18:40:c0:33:9a:6b:f4:0c:
a2:7a:1d:29:45:a9:cc:21:9d:93:39:5a:5d:98:ea:
05:bb:42:d5:16:3a:60:ff:b4:a8:b3:90:fb:04:88:
9d:1f:a5:f0:42:9a:ec:1a:8c:19:8b:06:9d:f8:ae:
e4:67:7f:cb:d7:68:a9:f6:b0:d3:b7:f7:3e:2f:05:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A1:E5:73:C5:95:CA:B7:7F:EB:42:85:5D:8A:0C:33:B8:7B:80:E0
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:27:e0:69:45:66:f7:16:a2:ed:8f:90:fa:9b:f7:53:df:4b:
87:98:51:23:ee:4f:69:18:3b:ee:1d:b6:a3:e1:74:5a:f4:37:
43:61:fb:fa:f2:25:ba:b0:43:54:ea:19:cf:4d:04:bf:4f:27:
02:4b:92:e0:f6:0b:71:33:c8:a7:a6:e1:7b:3f:3f:35:ab:d8:
6c:90:f9:03:78:28:36:d2:b1:c3:54:da:08:78:da:a6:10:51:
ae:18:6e:66:38:27:0d:57:4a:57:f0:bb:06:52:38:01:53:c6:
e0:6f:0a:1c:8d:b7:66:ef:3a:e1:96:ea:7c:4a:4f:1e:78:bc:
4e:d0:d6:ad:04:ee:e9:39:7c:fa:05:ed:22:41:44:8d:1b:38:
30:55:7b:58:61:48:dd:3f:63:4b:5f:d8:50:b2:6e:01:ee:17:
15:1d:56:a9:ab:9f:73:5a:21:be:68:ca:46:24:0b:37:95:73:
a4:0a:50:cb:e7:40:29:0e:bc:e5:7e:58:e9:c6:42:6b:21:39:
cd:8a:1c:59:0c:ef:4c:af:10:04:4b:9d:96:9f:a4:15:7e:e3:
3f:ad:8c:58:46:a6:af:e7:33:b3:3c:89:48:83:c8:b2:b6:59:
c7:14:55:1d:8c:5f:2e:c1:aa:89:39:56:06:90:d3:39:ba:3f:
40:1f:63:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCdEETk3VVKZnwn3jRwnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmNlMzU1NjFmNTQxYmRhOTdlNzc3ZTY4NzlhMWQ3MDRl
N2I0MmYwHhcNMjUwNzI3MDQwMDEzWhcNMjUwNzI4MDQwMDEzWjAzMTEwLwYDVQQD
EyhjNGExZTU3M2M1OTVjYWI3N2ZlYjQyODU1ZDhhMGMzM2I4N2I4MGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0njWeTUT65R6ogrlpfoIdN/Kwc9
EIqdDG3lRRkXLV4NDj5GZdsuP/mPlycxZCjFISzlDR3wH7odBFGSTiMBGiAKUD8R
1KJQ5eaQu1oXHTvNmqph8joFNuLwIXUqvTF8quUx1dcywPKE5J4c94XfoHZsJxx9
2kgTBGbVNcPjgh3iCXwEKSFMRZ1wctNYlz2BKsz7dzNDu9hFqWpNoMdhZcXjLlOH
iqHWlRVc5ko+F7rZwBfn7fh5iFK/GEDAM5pr9Ayieh0pRanMIZ2TOVpdmOoFu0LV
Fjpg/7Sos5D7BIidH6XwQprsGowZiwad+K7kZ3/L12ip9rDTt/c+LwUtIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSh5XPFlcq3f+tChV2KDDO4e4DgMB8GA1UdIwQY
MBaAFIO841Vh9UG9qX53fmh5odcE57QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMt
ZmQ4NjYwYzRmZDZlLzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMtZmQ4NjYwYzRmZDZl
LzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSfgaUVm
9xai7Y+Q+pv3U99Lh5hRI+5PaRg77h22o+F0WvQ3Q2H7+vIlurBDVOoZz00Ev08n
AkuS4PYLcTPIp6bhez8/NavYbJD5A3goNtKxw1TaCHjaphBRrhhuZjgnDVdKV/C7
BlI4AVPG4G8KHI23Zu864ZbqfEpPHni8TtDWrQTu6Tl8+gXtIkFEjRs4MFV7WGFI
3T9jS1/YULJuAe4XFR1Wqaufc1ohvmjKRiQLN5VzpApQy+dAKQ685X5Y6cZCayE5
zYocWQzvTK8QBEudlp+kFX7jP62MWEamr+czszyJSIPIsrZZxxRVHYxfLsGqiTlW
BpDTObo/QB9jPw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:31 2025 by rpki-client