Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier: tA6Nqt7wTQf1xJLIHhRNoFVxU2XgtjghCQy3yM7c15w=
Subject key identifier: 53:63:A9:88:25:CB:0A:17:67:4D:C4:A9:6B:B8:1A:60:87:B5:27:45
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 019749316A0EA1B6C579687C833B316A5BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number: 1221
Signing time: Sat 07 Jun 2025 07:01:04 +0000
Manifest this update: Sat 07 Jun 2025 07:01:04 +0000
Manifest next update: Sun 08 Jun 2025 07:01:04 +0000
Files and hashes: 1: 1ISrUMvXtY8idtkbmSmcNCBmXOs.roa (hash: JdzcjRC1qPASLJAyKXCJZ2jvTuTxM21yeidKZ9A5IsQ=)
2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: Imc/7Wx/87Okc2opUGXgeOcymPOzEgoXiyrR3G31lTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:6a:0e:a1:b6:c5:79:68:7c:83:3b:31:6a:5b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Jun 7 07:01:04 2025 GMT
Not After : Jun 8 07:01:04 2025 GMT
Subject: CN=5363a98825cb0a17674dc4a96bb81a6087b52745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:78:d5:ef:3d:ca:98:5e:6d:1c:e2:78:97:
e1:79:62:bd:b8:43:c7:df:8b:aa:cb:1b:6c:7e:16:
9a:2d:5c:e1:e0:43:e2:c0:7a:19:cb:72:a0:b4:45:
39:1c:6b:06:7c:bb:f1:12:93:c2:c3:92:37:97:bb:
cf:51:f1:1b:09:b5:d8:11:b4:57:26:9a:60:3e:b0:
8e:5b:dd:ea:7e:a3:5b:a0:56:cc:2a:3f:da:18:94:
84:87:e1:62:1c:ea:49:39:82:bf:93:91:c7:0e:8a:
e7:bf:f8:f1:93:44:2c:d6:5a:80:80:74:37:f1:c1:
14:91:36:f2:4d:cb:c3:6c:72:fe:82:48:8d:53:da:
06:9f:9d:75:0b:76:57:28:a9:d5:90:f6:f2:42:4b:
8e:86:46:2f:a5:4e:7f:44:a0:34:c1:93:17:02:eb:
4b:7d:be:a3:fd:97:33:80:cb:d8:c7:7d:9f:1b:2a:
a8:a5:66:68:3c:5e:f8:5c:28:3b:19:81:3a:6e:d1:
1d:26:31:93:21:54:a8:a9:47:5d:a9:95:33:6d:df:
42:72:dd:7a:7c:88:64:7e:d9:ba:a5:40:e7:4f:57:
88:c2:30:c8:6a:97:64:23:ef:20:11:66:5c:c3:19:
83:ea:5c:33:37:87:47:8b:7f:e5:32:46:80:59:20:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:63:A9:88:25:CB:0A:17:67:4D:C4:A9:6B:B8:1A:60:87:B5:27:45
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:86:83:2b:d2:85:c1:ed:70:73:88:91:76:06:15:44:5c:d8:
1d:47:dc:8a:7e:22:be:41:bb:24:30:e4:9a:b6:5f:05:d1:4f:
4b:8f:6a:40:0f:57:47:7f:7c:cd:23:8a:9f:78:af:4a:4c:b4:
4c:a9:41:f9:b9:a0:05:f2:ec:f2:c1:12:37:80:d3:59:06:32:
ed:56:62:5a:1a:24:79:3a:10:48:78:06:1e:01:69:62:9e:1f:
cf:dc:fb:6f:64:3e:f6:4a:0e:19:e2:df:77:2f:51:06:fc:28:
85:86:a6:b3:45:6a:f1:25:96:ad:6a:e3:37:1d:fe:d2:29:e8:
8c:2c:32:90:3f:f4:de:65:98:9f:aa:2c:4f:ae:66:5c:89:0d:
79:9e:49:12:96:21:30:2b:6f:65:b9:1f:52:77:55:1a:4f:7c:
37:ce:45:1c:86:b5:d3:92:ab:32:ee:c6:0a:17:05:33:21:26:
5b:93:8c:16:b6:9f:d7:b3:4c:8c:58:d7:6e:a8:1a:83:f8:5a:
5d:50:eb:c2:7e:64:fe:d6:d2:29:73:15:c2:61:2b:6f:ef:e3:
a6:ea:c9:6c:f1:f5:d8:30:87:15:02:c6:0c:bf:2b:06:a3:51:
94:26:da:73:d3:18:38:93:29:63:91:ce:01:08:f5:63:02:a4:
e9:41:23:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMWoOobbFeWh8gzsxalu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmI5NDNiOWEzZGZmNjk2ODAxNTE2YmU4NDcxYmM0NTg4
NTY2ZTgwHhcNMjUwNjA3MDcwMTA0WhcNMjUwNjA4MDcwMTA0WjAzMTEwLwYDVQQD
Eyg1MzYzYTk4ODI1Y2IwYTE3Njc0ZGM0YTk2YmI4MWE2MDg3YjUyNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5941e89yphebRzieJfheWK9uEPH
34uqyxtsfhaaLVzh4EPiwHoZy3KgtEU5HGsGfLvxEpPCw5I3l7vPUfEbCbXYEbRX
JppgPrCOW93qfqNboFbMKj/aGJSEh+FiHOpJOYK/k5HHDornv/jxk0Qs1lqAgHQ3
8cEUkTbyTcvDbHL+gkiNU9oGn511C3ZXKKnVkPbyQkuOhkYvpU5/RKA0wZMXAutL
fb6j/ZczgMvYx32fGyqopWZoPF74XCg7GYE6btEdJjGTIVSoqUddqZUzbd9Cct16
fIhkftm6pUDnT1eIwjDIapdkI+8gEWZcwxmD6lwzN4dHi3/lMkaAWSAfiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNjqYglywoXZ03EqWu4GmCHtSdFMB8GA1UdIwQY
MBaAFBtrlDuaPf9paAFRa+hHG8RYhWboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zZDYxMDctNWJjZS00NzgwLWFlMTAt
MjJkMzcxZDZjZGVlLzEvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zZDYxMDctNWJjZS00NzgwLWFlMTAtMjJkMzcxZDZjZGVl
LzEvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIaDK9KF
we1wc4iRdgYVRFzYHUfcin4ivkG7JDDkmrZfBdFPS49qQA9XR398zSOKn3ivSky0
TKlB+bmgBfLs8sESN4DTWQYy7VZiWhokeToQSHgGHgFpYp4fz9z7b2Q+9koOGeLf
dy9RBvwohYams0Vq8SWWrWrjNx3+0inojCwykD/03mWYn6osT65mXIkNeZ5JEpYh
MCtvZbkfUndVGk98N85FHIa105KrMu7GChcFMyEmW5OMFraf17NMjFjXbqgag/ha
XVDrwn5k/tbSKXMVwmErb+/jpurJbPH12DCHFQLGDL8rBqNRlCbac9MYOJMpY5HO
AQj1YwKk6UEjnA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:48 2025 by rpki-client