Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
File: G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json)
Hash identifier: WTdSZNWqI+gbmPc3Lz5RhpZzX0R0MNhl8wd5M3Tiul0=
Subject key identifier: 6B:DB:88:DD:2B:FE:60:B9:F7:15:03:49:59:8D:C6:91:12:9B:88:F4
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial: 019753B4F83EF6C43F45637E149F83671BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 08:00:58 +0000
Manifest this update: Mon 09 Jun 2025 08:00:58 +0000
Manifest next update: Tue 10 Jun 2025 08:00:58 +0000
Files and hashes: 1: 2iBSszmMQqmiQ3uytPa6Rj5usVw.roa (hash: uKmKRGw9bMp+kTA7Ddvynf7WAl8sh27c2GAtM3UsdJQ=)
2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: azBtT7RttWH56kFa0BqF/198SBDWnsjKB7oL5ZZuUmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:f8:3e:f6:c4:3f:45:63:7e:14:9f:83:67:1b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
Validity
Not Before: Jun 9 08:00:58 2025 GMT
Not After : Jun 10 08:00:58 2025 GMT
Subject: CN=6bdb88dd2bfe60b9f7150349598dc691129b88f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:6f:b2:82:ef:55:fb:32:4f:86:92:94:d4:
dc:c1:50:e8:ee:78:2e:3b:ff:5f:9f:fe:45:25:6f:
15:45:f4:f8:1d:8d:ab:ea:0f:86:62:8d:37:7b:86:
69:b7:38:a5:dd:a8:8d:f3:c3:ea:9f:26:50:ce:bf:
90:2c:9b:e1:2f:8b:81:37:82:5b:bf:bb:a4:05:ad:
49:bb:00:83:9a:a0:72:cb:e6:38:99:f4:a1:84:2d:
d3:0e:59:66:fb:3c:1e:d5:c2:a4:78:9a:42:ab:3b:
cf:67:e3:6a:aa:13:e6:7d:26:6d:f4:6f:fd:bf:52:
37:0f:24:41:bc:73:b3:fb:9e:f5:52:75:f3:91:a5:
c8:4d:d9:65:65:78:44:0b:a5:13:82:ad:be:84:b2:
78:a0:5d:b6:04:c6:d8:c4:01:49:1b:2c:1b:3e:c7:
e0:9a:f0:e3:24:99:30:fe:19:c1:16:e6:5c:5b:f0:
2b:95:39:ce:21:75:f5:6f:30:bc:61:7c:10:00:91:
cb:8a:cf:b2:c6:3f:9d:3d:0a:37:cb:da:22:91:7b:
73:e4:96:1d:e6:20:a5:3d:bd:b7:5b:98:72:05:17:
6a:42:ad:34:3c:f2:7a:e9:5f:a4:e9:6c:54:ce:32:
58:c3:80:00:f7:03:fd:c7:eb:83:b4:51:1f:ce:0c:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DB:88:DD:2B:FE:60:B9:F7:15:03:49:59:8D:C6:91:12:9B:88:F4
X509v3 Authority Key Identifier:
keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f6:9f:7d:ff:01:ac:f7:0c:8c:6a:73:a3:e2:87:57:d1:48:
7c:72:93:73:20:c7:28:3b:2e:a1:6d:87:fb:c5:5f:f9:7e:67:
70:4e:83:a2:97:29:81:05:8f:4a:e1:30:91:23:64:6f:4c:58:
de:51:0c:2b:76:09:29:5c:7f:0d:7f:08:cb:ae:e9:d5:48:c4:
4e:26:e3:fb:48:f3:d7:5b:d8:be:5a:f2:6c:ba:7e:df:e1:87:
3c:11:46:ba:92:b6:f2:a7:1b:19:dd:3d:6b:23:bf:bd:50:4c:
a3:64:e2:ee:e5:95:4c:7a:ac:b2:8b:c7:8b:2d:63:f5:5d:6f:
59:a6:f0:c3:fb:6d:95:ea:e5:fd:e2:65:e1:fa:13:57:68:25:
12:9d:58:08:86:26:36:bd:07:9d:28:95:34:aa:b1:ab:a9:68:
01:46:59:ec:90:d1:8b:26:86:22:34:f4:69:ac:e9:13:3d:a3:
22:bc:d1:60:75:93:62:64:cd:d8:a8:8d:1a:96:58:84:83:4a:
bd:70:a9:11:66:4c:04:77:3b:38:51:2b:fc:c3:7f:95:f5:98:
34:5f:f6:49:6f:aa:58:96:4c:03:a3:ea:25:6c:a6:ad:84:a0:
ec:5f:be:25:91:0f:37:25:a4:ec:d5:9c:a8:05:f0:3d:96:62:
66:4c:4e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTtPg+9sQ/RWN+FJ+DZxvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjgyODExM2JiYTM0MjNkMTU3MzE5NjRmZTU3YjVmMjUy
YmZkZTYwHhcNMjUwNjA5MDgwMDU4WhcNMjUwNjEwMDgwMDU4WjAzMTEwLwYDVQQD
Eyg2YmRiODhkZDJiZmU2MGI5ZjcxNTAzNDk1OThkYzY5MTEyOWI4OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9VvsoLvVfsyT4aSlNTcwVDo7ngu
O/9fn/5FJW8VRfT4HY2r6g+GYo03e4Zptzil3aiN88PqnyZQzr+QLJvhL4uBN4Jb
v7ukBa1JuwCDmqByy+Y4mfShhC3TDllm+zwe1cKkeJpCqzvPZ+NqqhPmfSZt9G/9
v1I3DyRBvHOz+571UnXzkaXITdllZXhEC6UTgq2+hLJ4oF22BMbYxAFJGywbPsfg
mvDjJJkw/hnBFuZcW/ArlTnOIXX1bzC8YXwQAJHLis+yxj+dPQo3y9oikXtz5JYd
5iClPb23W5hyBRdqQq00PPJ66V+k6WxUzjJYw4AA9wP9x+uDtFEfzgzXcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvbiN0r/mC59xUDSVmNxpESm4j0MB8GA1UdIwQY
MBaAFBtoKBE7ujQj0Vcxlk/le18lK/3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEt
MDNiYzYzY2EyNWEzLzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEtMDNiYzYzY2EyNWEz
LzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/afff8B
rPcMjGpzo+KHV9FIfHKTcyDHKDsuoW2H+8Vf+X5ncE6DopcpgQWPSuEwkSNkb0xY
3lEMK3YJKVx/DX8Iy67p1UjETibj+0jz11vYvlrybLp+3+GHPBFGupK28qcbGd09
ayO/vVBMo2Ti7uWVTHqssovHiy1j9V1vWabww/ttlerl/eJl4foTV2glEp1YCIYm
Nr0HnSiVNKqxq6loAUZZ7JDRiyaGIjT0aazpEz2jIrzRYHWTYmTN2KiNGpZYhINK
vXCpEWZMBHc7OFEr/MN/lfWYNF/2SW+qWJZMA6PqJWymrYSg7F++JZEPNyWk7NWc
qAXwPZZiZkxOmw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:34:12 2025 by rpki-client