Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: nOR6Sg3hS+FdqRRRiSdR2R+FWYEvR/vOPtQxrTLg3Hc=
Subject key identifier: 68:1B:6E:3E:C4:19:1A:15:F7:0D:97:C5:AD:E4:08:E2:B1:4F:3F:FE
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 01974A0CD72C8CC1D429E8FF69A57F015338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 1456
Signing time: Sat 07 Jun 2025 11:00:44 +0000
Manifest this update: Sat 07 Jun 2025 11:00:44 +0000
Manifest next update: Sun 08 Jun 2025 11:00:44 +0000
Files and hashes: 1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=)
2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: yryhn53U0oloZrNXVW6C1z4Hz2JLQ+gInMTqjUhXW+A=)
3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:d7:2c:8c:c1:d4:29:e8:ff:69:a5:7f:01:53:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Jun 7 11:00:44 2025 GMT
Not After : Jun 8 11:00:44 2025 GMT
Subject: CN=681b6e3ec4191a15f70d97c5ade408e2b14f3ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:4c:60:99:ec:5b:17:99:45:ad:e1:0a:46:
42:94:35:31:1b:bf:30:c9:67:85:7f:a7:0d:ac:70:
43:5e:56:69:41:bb:cd:06:d5:75:ad:91:1a:0f:3e:
1b:e7:89:30:3e:91:d8:ab:29:9f:f5:4e:7a:d7:19:
44:09:b8:5c:ed:bb:4b:38:87:ea:40:19:7d:46:5a:
b0:c3:0b:29:59:08:f7:35:18:ea:e6:66:f6:08:5d:
6a:28:74:b1:6f:71:78:80:a5:e1:86:d0:5e:e1:15:
dd:40:86:81:9c:e0:db:35:97:d7:40:f0:c6:0c:9b:
eb:e5:f0:d7:70:9c:7b:df:c7:eb:e2:08:5e:b2:27:
26:7d:ac:25:c1:9a:61:6e:0f:dd:fc:43:8b:b5:c1:
22:74:c1:f2:f7:05:7c:12:b9:da:85:bd:81:35:30:
0d:26:13:19:31:6c:02:be:2a:95:0a:85:72:5d:f9:
d4:28:66:0a:05:14:ee:9e:fe:8c:37:41:21:2c:ad:
cf:44:06:4a:7f:eb:9f:74:1a:9f:84:9c:8f:cd:c1:
12:44:86:71:43:ec:dd:ff:a1:05:57:62:7a:16:ba:
bf:c6:eb:f2:bd:58:62:6e:86:7d:d3:5d:a6:e3:fa:
c2:00:ef:21:f1:c6:a2:a4:45:9b:3e:74:f9:50:b8:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1B:6E:3E:C4:19:1A:15:F7:0D:97:C5:AD:E4:08:E2:B1:4F:3F:FE
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:df:e3:86:2b:89:a4:29:b9:aa:3e:66:11:00:83:4b:92:d8:
66:2c:ad:d5:54:21:9e:7b:44:cc:d4:ec:e6:2a:cb:9a:36:08:
90:d8:77:e3:e0:cf:2b:fa:bd:07:82:77:36:8e:97:b9:14:aa:
41:33:3c:2a:62:7a:79:99:1a:2d:6e:b1:9e:62:64:36:0e:72:
c3:a7:79:ed:22:68:8c:f1:c1:d7:5f:87:5a:d2:2e:52:45:3c:
2a:c0:75:86:e3:99:ef:ec:56:ac:59:72:d9:34:60:89:0d:53:
1e:43:c0:fc:13:21:84:73:3b:60:7b:84:4f:83:18:c1:57:b5:
e9:54:2a:3f:cb:8b:3a:d3:ce:1c:b7:9e:51:e8:c2:e4:1a:34:
74:0f:eb:e1:d2:76:71:39:59:af:62:b7:59:4f:88:ac:52:ce:
b5:a8:d2:0b:f4:2e:db:e0:fe:a0:fa:8e:78:12:78:ce:68:ed:
dd:8b:54:69:36:3b:df:d3:3d:a4:d1:88:47:fc:ce:10:af:5e:
37:c0:d4:49:b7:b5:e0:0f:a0:39:cd:08:d7:93:82:40:f5:4d:
1e:31:e2:59:39:c7:1a:04:e5:cb:e0:ae:2d:08:d0:76:34:bc:
67:40:d4:8a:73:53:1b:6c:33:65:03:7a:48:95:b3:bd:03:b2:
09:74:7c:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDNcsjMHUKej/aaV/AVM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZGJhMDEzNjU1YjliYjBjYWEyODVkNzVjMTQyYzFlZTMw
Zjg4NTQwHhcNMjUwNjA3MTEwMDQ0WhcNMjUwNjA4MTEwMDQ0WjAzMTEwLwYDVQQD
Eyg2ODFiNmUzZWM0MTkxYTE1ZjcwZDk3YzVhZGU0MDhlMmIxNGYzZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwdMYJnsWxeZRa3hCkZClDUxG78w
yWeFf6cNrHBDXlZpQbvNBtV1rZEaDz4b54kwPpHYqymf9U561xlECbhc7btLOIfq
QBl9RlqwwwspWQj3NRjq5mb2CF1qKHSxb3F4gKXhhtBe4RXdQIaBnODbNZfXQPDG
DJvr5fDXcJx738fr4ghesicmfawlwZphbg/d/EOLtcEidMHy9wV8Ernahb2BNTAN
JhMZMWwCviqVCoVyXfnUKGYKBRTunv6MN0EhLK3PRAZKf+ufdBqfhJyPzcESRIZx
Q+zd/6EFV2J6Frq/xuvyvVhiboZ9012m4/rCAO8h8caipEWbPnT5ULis/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgbbj7EGRoV9w2Xxa3kCOKxTz/+MB8GA1UdIwQY
MBaAFBvboBNlW5uwyqKF11wULB7jD4hUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUt
ZDRlZGYxNmUwOTc4LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUtZDRlZGYxNmUwOTc4
LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAid/jhiuJ
pCm5qj5mEQCDS5LYZiyt1VQhnntEzNTs5irLmjYIkNh34+DPK/q9B4J3No6XuRSq
QTM8KmJ6eZkaLW6xnmJkNg5yw6d57SJojPHB11+HWtIuUkU8KsB1huOZ7+xWrFly
2TRgiQ1THkPA/BMhhHM7YHuET4MYwVe16VQqP8uLOtPOHLeeUejC5Bo0dA/r4dJ2
cTlZr2K3WU+IrFLOtajSC/Qu2+D+oPqOeBJ4zmjt3YtUaTY739M9pNGIR/zOEK9e
N8DUSbe14A+gOc0I15OCQPVNHjHiWTnHGgTly+CuLQjQdjS8Z0DUinNTG2wzZQN6
SJWzvQOyCXR8+A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:02 2025 by rpki-client