Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: I3GswcBJgKL8nNJwIOcuzcd6zyil2JM4DxEIALteGF0=
Subject key identifier: 8E:0F:29:D5:19:57:FF:F7:8D:65:3E:A6:70:48:AC:35:FB:79:C3:A9
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 0198CB01C07ACE9BAEAAB64CEEBD5B7B2C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 0846
Signing time: Thu 21 Aug 2025 05:02:26 +0000
Manifest this update: Thu 21 Aug 2025 05:02:26 +0000
Manifest next update: Fri 22 Aug 2025 05:02:26 +0000
Files and hashes: 1: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: McIZQDRly9v1KVR5mXSIrE/fE7oAjdt81mCF52LVy48=)
2: j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa (hash: qcMICYRSrbrQRjk9ZR+9VL6T/3wI6mHE1uL2fvOP8p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 05:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:01:c0:7a:ce:9b:ae:aa:b6:4c:ee:bd:5b:7b:2c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: Aug 21 05:02:26 2025 GMT
Not After : Aug 22 05:02:26 2025 GMT
Subject: CN=8e0f29d51957fff78d653ea67048ac35fb79c3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:f0:da:7b:68:a9:51:1d:b5:7f:a5:ea:d8:
5c:f9:35:cc:22:f2:74:ef:15:d8:e3:86:e1:04:d4:
8a:83:6d:a3:28:b7:97:15:24:c3:68:b9:96:b8:35:
fc:f0:27:d7:05:ed:7b:71:88:b0:62:e4:97:ff:d0:
60:85:34:2c:a1:18:ab:99:bd:00:c0:d2:08:eb:bb:
e6:bd:03:6f:17:20:e1:78:96:30:1e:b2:d3:5a:94:
5d:09:35:61:34:0a:98:5e:42:7b:d2:2e:09:28:a9:
81:4c:75:38:ec:29:3e:8e:e4:00:73:12:40:1c:35:
23:5d:64:f0:25:ce:a3:e8:3e:c1:5b:a0:24:8c:38:
98:b7:37:ce:27:59:be:09:bc:ec:84:d0:d9:53:78:
0e:dd:22:bf:ff:d9:07:bf:87:71:4c:f3:bf:a6:f6:
d1:ad:6f:86:e1:d8:ff:24:f0:f2:83:97:67:eb:13:
e7:53:bf:fa:36:66:3c:75:42:ee:69:dc:72:40:af:
ae:6b:a0:3d:2f:59:a6:e5:ce:31:a5:20:71:93:f6:
9e:aa:13:e7:bc:6c:b6:b2:45:7f:93:a6:06:fd:16:
84:4e:66:b8:14:93:32:90:a1:4c:6e:4c:90:06:1d:
62:cb:9c:04:b5:b3:37:c5:18:e5:32:66:d8:f7:5a:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0F:29:D5:19:57:FF:F7:8D:65:3E:A6:70:48:AC:35:FB:79:C3:A9
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1e:de:88:04:9c:ee:a0:d3:e1:65:f0:7b:3b:85:7e:d9:c5:
d4:86:6b:5c:30:16:dd:ff:18:fc:8f:b7:97:5c:75:13:86:92:
98:77:ba:fe:25:7b:30:85:0a:c1:dd:33:a0:b8:7f:76:bf:70:
b8:e1:10:b2:2a:31:c7:17:57:c5:15:f1:ea:aa:f5:0d:7f:77:
7a:89:61:89:97:c9:75:2f:78:7c:e8:eb:1a:ae:50:ee:a0:fb:
a7:c5:a7:ea:92:93:68:71:47:9e:76:3f:83:ca:03:28:2c:ac:
4c:db:16:78:a6:d8:59:ba:b5:bc:93:57:72:0d:7a:bf:6e:5c:
ad:ee:0a:28:83:19:89:fc:15:c8:dd:76:7a:52:b0:0e:d1:f6:
70:47:47:cd:51:f6:a6:eb:d5:1d:6c:87:6b:af:50:64:81:6b:
97:a0:83:cb:9c:6b:30:55:0a:50:34:61:91:a9:2e:a4:85:d3:
77:af:b5:d1:15:98:5a:a2:cf:79:22:d2:32:72:e6:e7:ff:1f:
51:9f:0f:a9:10:43:6a:9b:af:51:1a:96:ca:b3:03:71:63:41:
43:93:1b:11:fa:99:11:d2:2f:81:e7:13:73:91:03:5e:33:7b:
0a:af:42:45:d9:f3:70:cb:5c:81:f6:df:8d:f2:42:fd:cd:9e:
ec:06:f8:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjLAcB6zpuuqrZM7r1beyxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNDIwYjc5OWM1MjA2YTE5ZWY3NzE3ZWUzYzczMTJmZDg4
MzMwYWUwHhcNMjUwODIxMDUwMjI2WhcNMjUwODIyMDUwMjI2WjAzMTEwLwYDVQQD
Eyg4ZTBmMjlkNTE5NTdmZmY3OGQ2NTNlYTY3MDQ4YWMzNWZiNzljM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzajw2ntoqVEdtX+l6thc+TXMIvJ0
7xXY44bhBNSKg22jKLeXFSTDaLmWuDX88CfXBe17cYiwYuSX/9BghTQsoRirmb0A
wNII67vmvQNvFyDheJYwHrLTWpRdCTVhNAqYXkJ70i4JKKmBTHU47Ck+juQAcxJA
HDUjXWTwJc6j6D7BW6AkjDiYtzfOJ1m+CbzshNDZU3gO3SK//9kHv4dxTPO/pvbR
rW+G4dj/JPDyg5dn6xPnU7/6NmY8dULuadxyQK+ua6A9L1mm5c4xpSBxk/aeqhPn
vGy2skV/k6YG/RaETma4FJMykKFMbkyQBh1iy5wEtbM3xRjlMmbY91p9sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4PKdUZV//3jWU+pnBIrDX7ecOpMB8GA1UdIwQY
MBaAFBtCC3mcUgahnvdxfuPHMS/YgzCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTdkNzctMGU5ZS00MDkxLWI1MTAt
OTQ2MDE4MjQxYzUxLzEvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80MTdkNzctMGU5ZS00MDkxLWI1MTAtOTQ2MDE4MjQxYzUx
LzEvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfh7eiASc
7qDT4WXwezuFftnF1IZrXDAW3f8Y/I+3l1x1E4aSmHe6/iV7MIUKwd0zoLh/dr9w
uOEQsioxxxdXxRXx6qr1DX93eolhiZfJdS94fOjrGq5Q7qD7p8Wn6pKTaHFHnnY/
g8oDKCysTNsWeKbYWbq1vJNXcg16v25cre4KKIMZifwVyN12elKwDtH2cEdHzVH2
puvVHWyHa69QZIFrl6CDy5xrMFUKUDRhkakupIXTd6+10RWYWqLPeSLSMnLm5/8f
UZ8PqRBDapuvURqWyrMDcWNBQ5MbEfqZEdIvgecTc5EDXjN7Cq9CRdnzcMtcgfbf
jfJC/c2e7Ab4xQ==
-----END CERTIFICATE-----
Generated at Thu Aug 21 12:57:40 2025 by rpki-client