Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: zgnpNpy2vS+f2JHIdeClJ9Fo3cspwzlLAwDszgkentg=
Subject key identifier: EB:47:0E:8C:1F:D1:09:EC:BB:7A:58:E0:B4:17:5A:CC:F8:9A:FE:5D
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 019752D8D7F18BBFD4BBAFA0F081B19E4A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0879
Signing time: Mon 09 Jun 2025 04:00:32 +0000
Manifest this update: Mon 09 Jun 2025 04:00:32 +0000
Manifest next update: Tue 10 Jun 2025 04:00:32 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: bM/GuxxDtoIchpGu8ap4DbXgII9sx0IJYRI/Dm6Bhvs=)
2: zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa (hash: haMcqGD9VuWSxs2wPMo5yLhdGqSHCO1AnFtOfllpTYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:d7:f1:8b:bf:d4:bb:af:a0:f0:81:b1:9e:4a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Jun 9 04:00:32 2025 GMT
Not After : Jun 10 04:00:32 2025 GMT
Subject: CN=eb470e8c1fd109ecbb7a58e0b4175accf89afe5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:65:ca:14:7e:75:ee:51:c4:9f:c3:4f:d7:
6f:61:7f:af:dc:b3:d2:e6:0f:c7:a4:9f:b3:23:1a:
37:f3:9d:3c:68:6f:94:3a:fb:bb:8d:ea:9d:69:c1:
30:f8:38:d2:8d:16:bc:11:81:b5:26:7a:e3:f3:9b:
c7:dc:af:28:d7:10:19:fc:4f:c2:c3:a4:d8:d9:90:
d0:64:74:56:22:b9:77:88:56:77:f4:09:ec:57:c8:
75:bb:4c:70:20:15:69:9d:b7:4f:69:49:b7:f4:bc:
cd:64:89:b8:34:0e:a1:0e:9a:ea:34:c4:95:b5:bc:
48:60:5e:64:f6:84:e9:c2:e1:73:5a:65:86:93:7e:
81:4c:37:bc:3d:db:48:5d:03:0c:dd:9f:64:75:21:
12:ec:e0:74:02:50:53:2a:f6:da:93:92:ae:f7:a5:
bc:9f:4e:1e:82:87:af:07:94:2f:ef:6b:68:f9:d6:
96:ac:af:a6:94:2d:f9:b8:27:5e:86:db:79:09:a2:
ce:1c:21:f6:22:6e:63:47:07:7a:56:b6:72:f6:25:
61:7f:65:04:f9:b6:10:06:27:fb:df:02:29:fa:17:
da:fe:b8:23:c6:c8:37:63:77:04:b9:8b:1a:60:9e:
6f:c2:02:55:96:07:1d:02:ff:cf:f4:f7:ba:02:2e:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:47:0E:8C:1F:D1:09:EC:BB:7A:58:E0:B4:17:5A:CC:F8:9A:FE:5D
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8d:2e:17:94:75:c8:aa:ab:ad:a0:f5:05:92:38:ad:af:ef:
6d:d3:a7:b9:d5:33:38:d4:2a:ea:65:9c:53:9b:0f:10:82:9a:
a4:a8:a2:e3:2a:2c:b6:54:df:88:ff:86:99:ed:76:00:4f:cb:
5f:f3:5e:66:f3:fe:aa:ba:a0:e7:d5:9e:89:4f:73:61:dd:50:
4d:1a:b5:1f:a0:d3:b0:ea:c7:08:0a:00:36:31:9b:6b:02:d8:
9c:fd:88:0f:50:87:bb:a5:bc:85:35:46:67:76:b4:41:25:34:
e8:60:98:76:95:ac:63:b8:18:a6:39:d7:f7:9a:36:f9:d3:23:
e1:3d:31:e2:09:86:97:61:19:41:0d:3d:8e:0e:0a:3c:eb:ca:
b4:82:a2:8e:fb:bc:62:81:e9:e0:d3:41:cb:66:51:f9:2f:b1:
0b:86:71:eb:df:9f:68:e6:a4:bc:e1:9c:f3:a9:95:a9:91:31:
52:dd:80:4c:ae:47:15:7c:3b:a8:cb:2a:28:eb:4f:c7:cf:5c:
7e:cf:25:6c:99:4e:c8:d8:5e:d9:5c:ed:ab:90:55:1f:e7:20:
ee:3c:83:fc:60:1d:fa:3f:3e:e8:9d:c0:ac:97:e1:41:a0:99:
c1:d2:7c:bf:3d:e2:36:b5:93:94:f2:76:ea:69:e6:19:8e:a9:
bf:db:21:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdS2Nfxi7/Uu6+g8IGxnkoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjE0ZThkMGIzZGVmYjAzMDQyNzAxMzBkMTE0N2FlMGRk
OTJkOGIwHhcNMjUwNjA5MDQwMDMyWhcNMjUwNjEwMDQwMDMyWjAzMTEwLwYDVQQD
EyhlYjQ3MGU4YzFmZDEwOWVjYmI3YTU4ZTBiNDE3NWFjY2Y4OWFmZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu5lyhR+de5RxJ/DT9dvYX+v3LPS
5g/HpJ+zIxo38508aG+UOvu7jeqdacEw+DjSjRa8EYG1Jnrj85vH3K8o1xAZ/E/C
w6TY2ZDQZHRWIrl3iFZ39AnsV8h1u0xwIBVpnbdPaUm39LzNZIm4NA6hDprqNMSV
tbxIYF5k9oTpwuFzWmWGk36BTDe8PdtIXQMM3Z9kdSES7OB0AlBTKvbak5Ku96W8
n04egoevB5Qv72to+daWrK+mlC35uCdehtt5CaLOHCH2Im5jRwd6VrZy9iVhf2UE
+bYQBif73wIp+hfa/rgjxsg3Y3cEuYsaYJ5vwgJVlgcdAv/P9Pe6Ai5uxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtHDowf0Qnsu3pY4LQXWsz4mv5dMB8GA1UdIwQY
MBaAFBvxTo0LPe+wMEJwEw0RR64N2S2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYWRhZmUtNmM5ZC00YWUwLTg3MzMt
ODE5YTI1MzIyNWNjLzEvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lYWRhZmUtNmM5ZC00YWUwLTg3MzMtODE5YTI1MzIyNWNj
LzEvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc40uF5R1
yKqrraD1BZI4ra/vbdOnudUzONQq6mWcU5sPEIKapKii4yostlTfiP+Gme12AE/L
X/NeZvP+qrqg59WeiU9zYd1QTRq1H6DTsOrHCAoANjGbawLYnP2ID1CHu6W8hTVG
Z3a0QSU06GCYdpWsY7gYpjnX95o2+dMj4T0x4gmGl2EZQQ09jg4KPOvKtIKijvu8
YoHp4NNBy2ZR+S+xC4Zx69+faOakvOGc86mVqZExUt2ATK5HFXw7qMsqKOtPx89c
fs8lbJlOyNhe2Vztq5BVH+cg7jyD/GAd+j8+6J3ArJfhQaCZwdJ8vz3iNrWTlPJ2
6mnmGY6pv9shEA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:34:48 2025 by rpki-client