Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: oy8ZxmtFcXofHPERlgL1bqsT2LykvJL3XasRjAabzew=
Subject key identifier: AB:F8:9A:10:B2:8F:A4:D9:5F:57:B8:83:B0:53:E1:58:7E:D3:CB:30
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 0197488D4963C86A2720620837C4C531A508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 04:01:48 +0000
Manifest this update: Sat 07 Jun 2025 04:01:48 +0000
Manifest next update: Sun 08 Jun 2025 04:01:48 +0000
Files and hashes: 1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: N3vwu6ektKDWkeIVqET3w+fGOPsePt59W2gCUlZ8KiU=)
3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:49:63:c8:6a:27:20:62:08:37:c4:c5:31:a5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Jun 7 04:01:48 2025 GMT
Not After : Jun 8 04:01:48 2025 GMT
Subject: CN=abf89a10b28fa4d95f57b883b053e1587ed3cb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:18:89:2b:1a:ec:26:a8:ab:9b:8a:cf:8b:
50:bb:b3:dc:f0:cd:b1:61:04:b0:f4:59:81:e0:61:
81:4f:dc:73:87:1a:64:15:96:26:ca:ee:87:57:7b:
b0:7c:d9:8e:21:96:bb:2b:b8:04:42:0c:aa:0c:51:
9e:5a:3c:df:f6:4d:f7:96:4c:0a:db:69:3c:40:bd:
c2:98:63:48:07:3b:e5:c3:76:c0:12:19:87:53:1d:
17:df:d1:64:00:20:a9:86:06:9e:68:bf:36:e9:e8:
da:7b:a4:fe:74:a9:83:9f:cb:1a:d2:41:94:d8:33:
7d:f6:b5:e4:4f:de:69:46:b4:e1:f1:07:85:46:29:
b4:61:1f:6f:ba:b0:26:da:c5:e9:60:df:2c:da:fd:
87:de:76:6e:0d:26:64:41:f1:ac:85:eb:c0:b8:0e:
99:be:2f:b2:6e:aa:eb:d9:17:51:76:82:c3:70:2e:
21:70:a8:17:28:6d:22:35:37:01:d1:05:e7:63:9e:
46:d3:d2:2b:71:bd:49:d7:32:ba:e9:83:84:62:17:
22:88:93:54:2c:2e:2d:58:ae:45:cf:ab:ac:dc:ce:
5d:0a:b1:70:5c:94:76:df:5e:d4:97:f8:7c:e2:34:
92:d2:9a:39:ac:c2:70:b1:31:bb:7b:f9:ab:d4:2c:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F8:9A:10:B2:8F:A4:D9:5F:57:B8:83:B0:53:E1:58:7E:D3:CB:30
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:cb:9a:ab:2b:54:e0:74:a4:90:1b:d6:83:e3:04:f1:0e:0b:
87:88:f7:e0:54:d3:f4:56:99:aa:8a:70:41:32:bf:2c:fc:e4:
96:54:60:00:94:bf:a7:f9:7f:ab:68:a8:ae:1b:f7:b8:01:9d:
98:66:99:79:0a:a2:59:c6:8e:41:d5:89:22:a0:4e:89:d9:69:
4f:0a:6a:66:29:c3:aa:d7:44:3f:2d:87:40:8f:bf:da:b5:2f:
a2:97:0d:4e:b9:f3:7f:0a:4b:a8:06:1a:56:79:b6:8b:fb:4c:
f6:5b:02:79:c2:dd:ac:75:d1:1e:e9:bb:58:ff:52:55:04:44:
1f:e3:19:f8:4b:f5:83:bc:0d:64:e9:66:90:f9:e9:10:22:4a:
67:42:4b:c4:ec:2b:fb:c1:c3:05:b5:95:09:b7:f9:f8:62:57:
89:ca:ce:4f:2f:fb:97:ec:fb:42:80:1b:fa:61:cd:c8:8c:cb:
56:ac:93:b6:44:fc:af:1d:8d:6c:3c:1c:e1:5a:41:7c:e4:18:
84:f5:88:61:ae:06:fd:ea:6a:79:a0:b7:86:68:f1:07:b4:f7:
0e:f7:49:d2:5e:0a:ef:af:ba:3d:93:a8:3a:a7:ea:2c:ba:1c:
31:6b:f9:50:fe:af:ad:f9:7a:ab:f1:11:45:85:30:b4:70:62:
8b:41:a5:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjUljyGonIGIIN8TFMaUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYjQ1NzQ0YTU0MTI4NWVlYTBlNGUwNGU1ZGU3NjZhOWM4
MjNiNTMwHhcNMjUwNjA3MDQwMTQ4WhcNMjUwNjA4MDQwMTQ4WjAzMTEwLwYDVQQD
EyhhYmY4OWExMGIyOGZhNGQ5NWY1N2I4ODNiMDUzZTE1ODdlZDNjYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0IYiSsa7Caoq5uKz4tQu7Pc8M2x
YQSw9FmB4GGBT9xzhxpkFZYmyu6HV3uwfNmOIZa7K7gEQgyqDFGeWjzf9k33lkwK
22k8QL3CmGNIBzvlw3bAEhmHUx0X39FkACCphgaeaL826ejae6T+dKmDn8sa0kGU
2DN99rXkT95pRrTh8QeFRim0YR9vurAm2sXpYN8s2v2H3nZuDSZkQfGshevAuA6Z
vi+ybqrr2RdRdoLDcC4hcKgXKG0iNTcB0QXnY55G09Ircb1J1zK66YOEYhciiJNU
LC4tWK5Fz6us3M5dCrFwXJR2317Ul/h84jSS0po5rMJwsTG7e/mr1CymhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKv4mhCyj6TZX1e4g7BT4Vh+08swMB8GA1UdIwQY
MBaAFBu0V0SlQShe6g5OBOXedmqcgjtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNjNmOWUtOWU3Yi00NmRjLWE0MDIt
ODc5OTc5ZDI5ZTFlLzEvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jNjNmOWUtOWU3Yi00NmRjLWE0MDItODc5OTc5ZDI5ZTFl
LzEvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwMuaqytU
4HSkkBvWg+ME8Q4Lh4j34FTT9FaZqopwQTK/LPzkllRgAJS/p/l/q2iorhv3uAGd
mGaZeQqiWcaOQdWJIqBOidlpTwpqZinDqtdEPy2HQI+/2rUvopcNTrnzfwpLqAYa
Vnm2i/tM9lsCecLdrHXRHum7WP9SVQREH+MZ+Ev1g7wNZOlmkPnpECJKZ0JLxOwr
+8HDBbWVCbf5+GJXicrOTy/7l+z7QoAb+mHNyIzLVqyTtkT8rx2NbDwc4VpBfOQY
hPWIYa4G/epqeaC3hmjxB7T3DvdJ0l4K76+6PZOoOqfqLLocMWv5UP6vrfl6q/ER
RYUwtHBii0GlGg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:29 2025 by rpki-client