
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File: gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier: Mrk8dF62csvkW9BxLi4fSTShoOptbooPU3yZhlJX26Y=
Subject key identifier: 9F:36:DF:D9:48:EE:CC:94:90:BC:B6:82:18:C3:4C:D4:ED:24:16:FF
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 01976B183D467EB3EBE151187546D8560FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number: 1465
Signing time: Fri 13 Jun 2025 21:00:39 +0000
Manifest this update: Fri 13 Jun 2025 21:00:39 +0000
Manifest next update: Sat 14 Jun 2025 21:00:39 +0000
Files and hashes: 1: 0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa (hash: MC7o/cX4pPB7bvBIXoJXRXlWLcMZbnHjOKF7ORQIp5Q=)
2: FIcaLo5Lkwo711cOwWKooXhLRhY.roa (hash: ouIyYU8i1Bc12QJ63/vjQssVyB/lGTByw+wFjtilEFk=)
3: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: YfR5qAaVp7dcOmpoOyu8KznQkqGeUPHtdZWzDi0rIH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:18:3d:46:7e:b3:eb:e1:51:18:75:46:d8:56:0f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: Jun 13 21:00:39 2025 GMT
Not After : Jun 14 21:00:39 2025 GMT
Subject: CN=9f36dfd948eecc9490bcb68218c34cd4ed2416ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:b9:51:e7:cf:6f:09:14:b2:d8:76:d8:59:
ee:5f:6b:29:08:03:2f:79:57:be:03:7f:eb:bd:ba:
0c:b9:de:db:db:f5:f1:15:a8:70:e0:c2:61:fa:ce:
c8:eb:ef:1b:c9:26:f0:0f:b4:67:c5:55:20:c6:e1:
b0:cb:2f:66:4f:d6:cd:b4:bc:8d:2b:38:ee:15:2a:
89:1d:8b:20:a2:32:5c:88:a5:5e:6b:6d:2b:9e:e5:
15:da:a1:3f:ee:b2:47:98:ae:4c:37:3d:70:56:69:
67:e7:87:b9:72:b8:a3:cb:f6:8d:01:9b:7e:fc:a9:
cc:00:46:ac:d3:c1:d7:25:18:a0:3d:1b:6d:62:39:
8d:3f:db:81:52:6c:e4:fb:52:27:f8:d8:69:3d:9e:
ea:9d:6d:46:62:98:dd:43:f5:3f:f9:19:8e:c4:fd:
89:5f:cf:00:da:3b:e1:22:0b:b5:e7:1e:78:47:9c:
6c:a5:07:88:6a:72:f5:53:d8:36:1e:b4:6c:a6:6f:
1b:a6:53:ae:f8:0c:25:32:22:16:16:8d:a5:40:1b:
4a:b2:0e:c1:bd:0d:4f:9b:66:d0:5d:0d:94:da:b9:
b7:b4:24:72:92:c2:2e:90:d6:5d:2e:5e:1d:e8:b0:
11:03:7c:15:b4:28:1d:b7:1a:f6:bd:e4:d4:5d:d1:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:36:DF:D9:48:EE:CC:94:90:BC:B6:82:18:C3:4C:D4:ED:24:16:FF
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5e:23:df:0a:0f:9c:93:9d:78:83:90:77:92:97:47:ad:a5:
cb:1b:fa:12:74:28:d1:80:17:3a:40:f1:6f:69:db:52:e2:d7:
c4:e7:39:00:ff:f4:da:47:c9:f4:9f:1a:6e:28:60:de:ad:db:
d6:3c:08:f2:25:ac:b9:d7:54:f9:07:c2:65:9c:1a:f1:e4:ee:
5b:07:1b:7f:5b:ea:66:12:8d:3d:2a:a8:2f:35:3a:38:1c:e5:
b5:ee:00:5e:56:c8:e8:12:c8:4b:1e:0f:d8:8c:e8:4e:b5:e9:
39:1b:61:9d:a0:d7:7a:66:f1:96:6e:a7:23:63:17:13:03:79:
bb:b3:eb:60:81:9c:6c:41:b6:67:5b:3d:1f:4e:64:23:31:13:
76:07:b0:79:80:71:bf:51:f6:b4:03:3a:dc:b8:0e:7a:4a:cc:
36:84:a1:e6:10:ff:3b:38:df:49:3e:07:e2:50:4e:6c:79:30:
37:2e:97:58:d8:1d:5c:a7:41:99:bb:2b:f0:0a:cc:d3:e9:ee:
c2:5a:aa:02:e7:cc:b5:e4:85:ff:8f:5d:91:ee:91:86:0c:4c:
86:ad:ee:9f:ea:64:d6:54:6c:9c:b6:d8:54:96:41:e6:fc:33:
c5:36:e3:3e:c6:9f:62:fd:54:df:51:d2:7c:de:fc:c0:21:e9:
5a:79:0f:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrGD1GfrPr4VEYdUbYVg/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZGYwY2JkZDU1NzFlNTgwZWE1N2UxOGE0NDBjYTJiZWE0
ODA2ZjgwHhcNMjUwNjEzMjEwMDM5WhcNMjUwNjE0MjEwMDM5WjAzMTEwLwYDVQQD
Eyg5ZjM2ZGZkOTQ4ZWVjYzk0OTBiY2I2ODIxOGMzNGNkNGVkMjQxNmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqra5UefPbwkUsth22FnuX2spCAMv
eVe+A3/rvboMud7b2/XxFahw4MJh+s7I6+8bySbwD7RnxVUgxuGwyy9mT9bNtLyN
KzjuFSqJHYsgojJciKVea20rnuUV2qE/7rJHmK5MNz1wVmln54e5crijy/aNAZt+
/KnMAEas08HXJRigPRttYjmNP9uBUmzk+1In+NhpPZ7qnW1GYpjdQ/U/+RmOxP2J
X88A2jvhIgu15x54R5xspQeIanL1U9g2HrRspm8bplOu+AwlMiIWFo2lQBtKsg7B
vQ1Pm2bQXQ2U2rm3tCRyksIukNZdLl4d6LARA3wVtCgdtxr2veTUXdGW5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8239lI7syUkLy2ghjDTNTtJBb/MB8GA1UdIwQY
MBaAFIDfDL3VVx5YDqV+GKRAyivqSAb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85MjkxZTEtNTdjYS00YzI5LTllOTMt
YmQ3NWVmOWI1Nzk4LzEvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85MjkxZTEtNTdjYS00YzI5LTllOTMtYmQ3NWVmOWI1Nzk4
LzEvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtF4j3woP
nJOdeIOQd5KXR62lyxv6EnQo0YAXOkDxb2nbUuLXxOc5AP/02kfJ9J8abihg3q3b
1jwI8iWsuddU+QfCZZwa8eTuWwcbf1vqZhKNPSqoLzU6OBzlte4AXlbI6BLISx4P
2IzoTrXpORthnaDXembxlm6nI2MXEwN5u7PrYIGcbEG2Z1s9H05kIzETdgeweYBx
v1H2tAM63LgOekrMNoSh5hD/OzjfST4H4lBObHkwNy6XWNgdXKdBmbsr8ArM0+nu
wlqqAufMteSF/49dke6RhgxMhq3un+pk1lRsnLbYVJZB5vwzxTbjPsafYv1U31HS
fN78wCHpWnkPnw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 00:45:56 2025 by rpki-client