Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier: 0/e7vjdSoD77ZJASHS5eyzHHaQRz33gsm+dgxCPezDc=
Subject key identifier: 3C:53:74:B9:EE:65:22:B6:87:8E:27:55:77:15:8D:F0:71:8E:89:17
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 01974AE87BCD8AA31AE22AD4D33F8E5C66CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number: 1584
Signing time: Sat 07 Jun 2025 15:00:39 +0000
Manifest this update: Sat 07 Jun 2025 15:00:39 +0000
Manifest next update: Sun 08 Jun 2025 15:00:39 +0000
Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=)
2: bTDx6BY2_bieAYAIiAFgdyKIF9k.roa (hash: qCwMntOeFKqowJO7prWM5i0O+TccBmu2GDJdiZbI22w=)
3: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: IFDGXMCybVWm3b0aOkfZpkiQyCn9gm+Oiecnq02caYo=)
4: kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa (hash: eW1HiHgHjju0NsKcsTSvzT72THKILOyyGeew75G0SSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:7b:cd:8a:a3:1a:e2:2a:d4:d3:3f:8e:5c:66:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Jun 7 15:00:39 2025 GMT
Not After : Jun 8 15:00:39 2025 GMT
Subject: CN=3c5374b9ee6522b6878e275577158df0718e8917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:36:78:cc:f8:98:cc:f6:ac:2d:e6:2e:cc:
3b:21:cc:83:46:c6:fc:34:6d:be:59:9b:30:6c:e7:
02:f2:96:e8:ec:39:c6:13:75:b7:f4:c8:eb:aa:dc:
ae:7a:6e:64:13:6c:86:1e:58:f9:80:f4:04:fb:44:
8a:d2:1a:74:1c:b2:67:f5:1a:8d:7f:ec:2b:03:61:
4f:51:72:25:23:2a:c2:fe:a7:89:43:fa:1b:e1:58:
b8:35:4e:37:ee:7c:77:79:46:9f:14:83:6a:58:13:
04:20:1c:20:7f:9a:09:97:8d:9b:9c:d7:7a:8d:6e:
5f:5e:78:e3:f2:a2:1a:05:17:23:de:1d:36:ec:03:
12:78:cd:57:0e:dd:48:17:ed:d5:6b:0c:17:73:56:
5c:aa:d3:a5:30:e2:ea:18:ae:dc:fe:47:b8:28:e4:
44:b5:19:5c:7d:4f:27:2d:b9:f5:7e:65:8b:2d:c9:
c1:f2:06:7c:09:2e:78:c3:3b:8d:39:c7:6b:bf:3c:
4c:e8:91:5f:86:b9:e9:05:79:49:a1:8c:18:4d:5f:
46:9f:cc:d8:aa:58:d1:51:e8:bb:2f:ce:59:f7:88:
21:73:78:4e:fb:84:0c:e8:c3:e6:19:4f:23:2c:3a:
60:94:0e:c8:ec:f3:f3:28:d4:44:30:db:7d:3f:fa:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:53:74:B9:EE:65:22:B6:87:8E:27:55:77:15:8D:F0:71:8E:89:17
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fb:7e:dd:e0:0a:f5:f7:a7:4e:75:4a:b3:14:f7:99:74:08:
3a:76:72:7d:e4:f2:49:d9:b4:c9:09:07:73:8a:b9:b1:6d:ca:
55:41:14:f6:e9:1b:5f:f3:e4:6e:94:68:f7:02:5c:0b:b1:74:
71:0e:28:39:31:58:d4:6b:f7:5a:e2:25:0a:f0:22:a7:03:61:
ad:a6:13:db:89:97:32:ad:16:b1:f1:75:e1:59:25:07:b4:60:
8f:22:0a:0d:a1:19:b6:e3:ea:94:96:49:86:f4:2c:69:04:f6:
69:b3:41:4b:e8:3c:d1:76:d0:54:06:14:91:fd:2a:02:3f:5d:
6a:d0:dd:38:50:7b:ea:af:d1:8d:fc:d5:eb:68:7d:0c:b9:9d:
9a:26:0a:cb:a1:56:d2:0b:e4:76:36:6e:09:fd:ab:de:ba:8c:
1f:ab:68:8b:1d:96:7d:a7:40:79:73:8b:9d:ca:28:98:e2:4d:
83:ae:91:7a:e5:e7:b2:66:fe:ae:18:59:28:df:de:fe:1a:b3:
42:bf:ce:f9:d6:1b:20:8e:7d:74:3a:b2:2c:23:54:fe:2c:da:
63:5f:72:69:9d:54:2b:99:1d:9e:59:8a:51:37:ad:a0:00:b8:
c1:97:c1:ce:74:2e:c0:df:e1:ea:ae:41:78:98:cc:02:06:75:
28:77:c1:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6HvNiqMa4irU0z+OXGbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjA5ZjJiOWQyNDg2ZjM2ZThjZDI5ZGZhMmE3NTZhNDhk
ZTdjNTEwHhcNMjUwNjA3MTUwMDM5WhcNMjUwNjA4MTUwMDM5WjAzMTEwLwYDVQQD
EygzYzUzNzRiOWVlNjUyMmI2ODc4ZTI3NTU3NzE1OGRmMDcxOGU4OTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMs2eMz4mMz2rC3mLsw7IcyDRsb8
NG2+WZswbOcC8pbo7DnGE3W39Mjrqtyuem5kE2yGHlj5gPQE+0SK0hp0HLJn9RqN
f+wrA2FPUXIlIyrC/qeJQ/ob4Vi4NU437nx3eUafFINqWBMEIBwgf5oJl42bnNd6
jW5fXnjj8qIaBRcj3h027AMSeM1XDt1IF+3VawwXc1ZcqtOlMOLqGK7c/ke4KORE
tRlcfU8nLbn1fmWLLcnB8gZ8CS54wzuNOcdrvzxM6JFfhrnpBXlJoYwYTV9Gn8zY
qljRUei7L85Z94ghc3hO+4QM6MPmGU8jLDpglA7I7PPzKNREMNt9P/qbBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxTdLnuZSK2h44nVXcVjfBxjokXMB8GA1UdIwQY
MBaAFINgnyudJIbzbozSnfoqdWpI3nxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUt
NWU2MGY2ZGEyYjA5LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUtNWU2MGY2ZGEyYjA5
LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUft+3eAK
9fenTnVKsxT3mXQIOnZyfeTySdm0yQkHc4q5sW3KVUEU9ukbX/PkbpRo9wJcC7F0
cQ4oOTFY1Gv3WuIlCvAipwNhraYT24mXMq0WsfF14VklB7RgjyIKDaEZtuPqlJZJ
hvQsaQT2abNBS+g80XbQVAYUkf0qAj9datDdOFB76q/RjfzV62h9DLmdmiYKy6FW
0gvkdjZuCf2r3rqMH6toix2WfadAeXOLncoomOJNg66ReuXnsmb+rhhZKN/e/hqz
Qr/O+dYbII59dDqyLCNU/izaY19yaZ1UK5kdnlmKUTetoAC4wZfBznQuwN/h6q5B
eJjMAgZ1KHfB5w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:49 2025 by rpki-client