
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
File: g_65rfwvZVEiBb1IETJMnX9qAiI.mft (raw, json)
Hash identifier: 130KESJbutnvwJyhg0+jZg1NEfolz0Nx2YbKUbrkTTc=
Subject key identifier: 63:5F:F4:BE:7B:C2:FA:26:EF:B6:9A:4A:E2:4D:74:85:D5:BD:52:E1
Authority key identifier: 83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
Certificate issuer: /CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Certificate serial: 01974E2050A1FA7F6692493C5738066C5949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
Manifest number: 0378
Signing time: Sun 08 Jun 2025 06:00:29 +0000
Manifest this update: Sun 08 Jun 2025 06:00:29 +0000
Manifest next update: Mon 09 Jun 2025 06:00:29 +0000
Files and hashes: 1: g_65rfwvZVEiBb1IETJMnX9qAiI.crl (hash: O73JUKXjb9RIjwy4dy/cXGbhyyPmZ3Z1B4LIu6byNVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:50:a1:fa:7f:66:92:49:3c:57:38:06:6c:59:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Validity
Not Before: Jun 8 06:00:29 2025 GMT
Not After : Jun 9 06:00:29 2025 GMT
Subject: CN=635ff4be7bc2fa26efb69a4ae24d7485d5bd52e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:9d:b2:42:17:68:7e:b5:4b:e9:34:e1:87:
8c:98:1b:00:b8:a3:da:2b:48:14:b7:49:96:cd:aa:
69:f4:f2:4f:be:4b:6d:14:be:5c:01:b8:cc:48:a5:
3e:28:b6:31:67:8b:5f:93:c2:8a:f1:6c:7f:ce:13:
19:3e:93:73:02:ee:7e:03:aa:75:53:62:a7:e5:ff:
54:31:2e:31:97:6e:e9:68:89:32:eb:90:69:4b:54:
44:70:64:3b:bb:bc:a7:2a:0e:30:56:45:5c:6f:a5:
5c:e3:5f:83:88:eb:8a:74:4f:84:ba:c9:b3:c6:8f:
4c:86:b0:d1:9b:e3:56:43:7e:c1:ee:ad:3f:fe:ad:
bf:b9:0b:60:61:9e:a3:c6:b5:a3:74:03:1e:d7:dd:
c6:a4:05:16:d3:5e:07:7c:01:d2:3a:42:c1:7c:f2:
28:16:8b:aa:04:54:15:ae:92:a7:4a:03:72:46:50:
f9:4f:c9:70:b3:a0:31:ef:9f:cb:d3:86:81:9e:e8:
6d:c9:84:22:5b:2f:0a:4d:26:38:9a:92:70:62:10:
e5:21:e8:79:af:41:fd:40:91:30:c1:35:ee:66:a5:
d7:f9:d9:8d:0d:3b:42:a6:89:97:5d:d6:46:e8:6f:
bf:be:b1:7d:47:25:73:89:89:f5:5f:2e:7b:85:13:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5F:F4:BE:7B:C2:FA:26:EF:B6:9A:4A:E2:4D:74:85:D5:BD:52:E1
X509v3 Authority Key Identifier:
keyid:83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:25:51:d6:e9:a1:d0:ce:d3:09:8b:71:67:c1:08:04:cd:f8:
27:ec:80:63:23:ee:d2:56:e7:35:30:d5:d1:8b:c1:1d:7d:a8:
e0:1e:ee:06:af:11:2f:92:6a:3d:f6:e3:de:87:12:e1:0a:8b:
9d:3b:7b:3c:ef:58:c9:9d:48:eb:32:ae:b4:a8:57:61:8b:59:
67:33:8d:c6:87:3b:2d:e5:76:c8:be:a2:71:22:4a:7d:44:e1:
8d:b1:b5:14:12:c7:0a:80:79:42:e8:e3:56:12:18:18:b3:36:
9b:d6:4c:d6:7e:e4:fa:70:c4:69:f7:53:b6:dd:da:d3:e4:98:
a8:d3:5d:1d:56:38:97:f2:28:0a:a2:2c:f8:a5:20:dd:30:bb:
c2:0b:2b:76:85:6b:62:f2:11:96:d3:98:e7:12:47:74:cd:07:
7b:3d:7a:ad:bd:9c:8e:30:a2:21:0c:94:24:be:79:5b:36:12:
dc:3d:51:e4:eb:b2:0d:d5:18:8b:3f:e1:5b:39:ba:fd:29:62:
a7:c6:0a:f1:ee:63:5e:b0:b3:2f:10:db:98:c3:1a:68:ac:22:
b4:7e:da:e3:7b:e4:00:3e:19:fa:88:74:06:32:a2:6d:d7:99:
09:e5:92:4b:5b:16:43:2c:6a:4d:d6:7b:48:2f:5a:2c:5f:9f:
80:59:8d:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIFCh+n9mkkk8VzgGbFlJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZmViOWFkZmMyZjY1NTEyMjA1YmQ0ODExMzI0YzlkN2Y2
YTAyMjIwHhcNMjUwNjA4MDYwMDI5WhcNMjUwNjA5MDYwMDI5WjAzMTEwLwYDVQQD
Eyg2MzVmZjRiZTdiYzJmYTI2ZWZiNjlhNGFlMjRkNzQ4NWQ1YmQ1MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviSdskIXaH61S+k04YeMmBsAuKPa
K0gUt0mWzapp9PJPvkttFL5cAbjMSKU+KLYxZ4tfk8KK8Wx/zhMZPpNzAu5+A6p1
U2Kn5f9UMS4xl27paIky65BpS1REcGQ7u7ynKg4wVkVcb6Vc41+DiOuKdE+Eusmz
xo9MhrDRm+NWQ37B7q0//q2/uQtgYZ6jxrWjdAMe193GpAUW014HfAHSOkLBfPIo
FouqBFQVrpKnSgNyRlD5T8lws6Ax75/L04aBnuhtyYQiWy8KTSY4mpJwYhDlIeh5
r0H9QJEwwTXuZqXX+dmNDTtCpomXXdZG6G+/vrF9RyVziYn1Xy57hRMXqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNf9L57wvom77aaSuJNdIXVvVLhMB8GA1UdIwQY
MBaAFIP+ua38L2VRIgW9SBEyTJ1/agIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ182NXJmd3ZaVkVpQmIxSUVUSk1uWDlxQWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kYzUxNTktNDVmMC00MjZmLTllZjEt
OTZlMGMxYzQ0NDgzLzEvZ182NXJmd3ZaVkVpQmIxSUVUSk1uWDlxQWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9kYzUxNTktNDVmMC00MjZmLTllZjEtOTZlMGMxYzQ0NDgz
LzEvZ182NXJmd3ZaVkVpQmIxSUVUSk1uWDlxQWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyVR1umh
0M7TCYtxZ8EIBM34J+yAYyPu0lbnNTDV0YvBHX2o4B7uBq8RL5JqPfbj3ocS4QqL
nTt7PO9YyZ1I6zKutKhXYYtZZzONxoc7LeV2yL6icSJKfUThjbG1FBLHCoB5Qujj
VhIYGLM2m9ZM1n7k+nDEafdTtt3a0+SYqNNdHVY4l/IoCqIs+KUg3TC7wgsrdoVr
YvIRltOY5xJHdM0Hez16rb2cjjCiIQyUJL55WzYS3D1R5OuyDdUYiz/hWzm6/Sli
p8YK8e5jXrCzLxDbmMMaaKwitH7a43vkAD4Z+oh0BjKibdeZCeWSS1sWQyxqTdZ7
SC9aLF+fgFmNwA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:01:20 2025 by rpki-client