Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
File: g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json)
Hash identifier: oYtHlU490/F8nr5adodIG7e6w9NVKACNETmUDU54ais=
Subject key identifier: 8A:43:D8:46:86:7B:E3:F0:24:E1:8A:A1:A9:AA:8F:78:29:20:0A:B2
Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
Certificate issuer: /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Certificate serial: 01976E1915FF4EB2EF66DE5C99570EBEA17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
Manifest number: 1297
Signing time: Sat 14 Jun 2025 11:00:27 +0000
Manifest this update: Sat 14 Jun 2025 11:00:27 +0000
Manifest next update: Sun 15 Jun 2025 11:00:27 +0000
Files and hashes: 1: DobE_GDwj6LglTHnTGTNO49HHQg.roa (hash: BUWVPFb7JdXBEYo3ia6vx/6Nxlayi+TmF4VDb5fiITc=)
2: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: Ppg351sZP0Zbo3Tc3GFNdyE6aL6nLpD6Ue8U4IrrwNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:15:ff:4e:b2:ef:66:de:5c:99:57:0e:be:a1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Validity
Not Before: Jun 14 11:00:27 2025 GMT
Not After : Jun 15 11:00:27 2025 GMT
Subject: CN=8a43d846867be3f024e18aa1a9aa8f7829200ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:ca:95:bb:d0:7d:c0:5b:a7:21:26:2f:fe:
13:fa:80:60:d7:1b:d4:17:a4:15:85:c4:4e:f4:76:
2a:7c:f4:3b:e9:7b:66:08:6d:1b:f4:65:3a:d4:4a:
e1:ff:fc:c0:89:82:f1:b3:c2:f5:86:13:21:1f:59:
8b:0d:3f:86:78:55:bf:9e:42:e8:a2:ed:fa:06:0c:
e2:d0:ec:58:ef:37:ff:96:4c:bb:f3:2c:39:20:ed:
e8:91:15:77:28:df:c7:36:b1:1a:47:fd:46:2c:5a:
42:8e:d9:b7:0e:ec:f9:04:73:3d:4c:22:f9:aa:ef:
5b:07:45:97:88:4d:5a:1b:b4:b3:44:74:85:c0:70:
61:e5:3a:35:1a:34:e9:e0:4c:ed:cd:73:f4:3e:60:
f1:9c:53:23:79:4e:03:1d:09:f3:c5:6e:87:84:02:
0a:27:f2:a8:31:5a:be:3c:22:f0:81:f2:45:0c:22:
61:2f:40:4a:3b:32:d3:1b:f5:ea:7b:07:e7:ee:6a:
ea:c5:f4:af:75:9e:45:6e:ba:e2:a8:62:3f:41:98:
dd:15:60:e0:18:c9:5d:be:b5:83:5c:97:dc:8b:2a:
b4:15:63:23:dc:7c:39:c3:2d:db:fb:48:79:7a:c5:
9e:7f:83:1f:e5:37:f7:d9:4f:da:cd:e3:cc:67:13:
8b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:43:D8:46:86:7B:E3:F0:24:E1:8A:A1:A9:AA:8F:78:29:20:0A:B2
X509v3 Authority Key Identifier:
keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b6:fd:0a:04:0c:92:88:87:41:1c:04:0b:c5:97:e4:22:f5:
17:39:16:83:2b:1b:ce:16:a6:c6:8c:0a:6c:32:1c:79:99:52:
b6:c2:79:42:fc:a5:6d:96:ef:e2:4a:3b:81:d9:ce:6e:19:ea:
8e:83:53:69:da:cc:5c:40:22:50:8d:2e:f4:31:96:2c:f9:12:
d7:02:e4:ca:11:07:17:dc:57:27:3d:7e:90:d7:16:cc:18:2d:
93:3b:87:a6:d4:7f:fc:fd:ea:be:40:fa:6e:b0:4f:33:9a:97:
0b:b1:65:e1:86:40:aa:78:1a:97:75:75:93:e9:8c:18:91:2b:
1b:df:75:d6:e8:95:e6:57:b4:14:e2:ab:8d:61:ab:a9:b4:77:
2a:7e:62:b9:d4:0c:e1:85:b3:e8:3f:73:ad:2a:f4:65:a8:17:
d6:99:9d:1f:d5:68:be:92:35:8a:d6:dd:c9:0f:42:89:cd:5a:
01:60:68:3b:df:3e:73:3b:5a:ee:c0:06:49:5a:64:9c:a1:b8:
93:c7:35:db:fa:55:fc:f7:52:c6:96:3d:6d:16:e8:92:ff:5c:
84:c8:70:56:ce:39:d6:6d:25:8c:04:75:01:ed:e2:07:57:84:
e5:34:42:17:cb:71:01:cd:b2:20:05:ef:cb:05:57:39:fe:0b:
e2:de:d0:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduGRX/TrLvZt5cmVcOvqF6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZmIzNGIyMWEwZWY4YzQwMTkxYzBlMDdjM2I0NTI0ZTMy
M2IyY2YwHhcNMjUwNjE0MTEwMDI3WhcNMjUwNjE1MTEwMDI3WjAzMTEwLwYDVQQD
Eyg4YTQzZDg0Njg2N2JlM2YwMjRlMThhYTFhOWFhOGY3ODI5MjAwYWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/vKlbvQfcBbpyEmL/4T+oBg1xvU
F6QVhcRO9HYqfPQ76XtmCG0b9GU61Erh//zAiYLxs8L1hhMhH1mLDT+GeFW/nkLo
ou36Bgzi0OxY7zf/lky78yw5IO3okRV3KN/HNrEaR/1GLFpCjtm3Duz5BHM9TCL5
qu9bB0WXiE1aG7SzRHSFwHBh5To1GjTp4EztzXP0PmDxnFMjeU4DHQnzxW6HhAIK
J/KoMVq+PCLwgfJFDCJhL0BKOzLTG/Xqewfn7mrqxfSvdZ5FbrriqGI/QZjdFWDg
GMldvrWDXJfciyq0FWMj3Hw5wy3b+0h5esWef4Mf5Tf32U/azePMZxOL/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpD2EaGe+PwJOGKoamqj3gpIAqyMB8GA1UdIwQY
MBaAFIP7NLIaDvjEAZHA4Hw7RSTjI7LPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wMDQyODQtZDRhNy00OTYyLTk2OTct
ZjIzYjA3N2VkYjk2LzEvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8wMDQyODQtZDRhNy00OTYyLTk2OTctZjIzYjA3N2VkYjk2
LzEvZ19zMHNob08tTVFCa2NEZ2ZEdEZKT01qc3M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrb9CgQM
koiHQRwEC8WX5CL1FzkWgysbzhamxowKbDIceZlStsJ5QvylbZbv4ko7gdnObhnq
joNTadrMXEAiUI0u9DGWLPkS1wLkyhEHF9xXJz1+kNcWzBgtkzuHptR//P3qvkD6
brBPM5qXC7Fl4YZAqngal3V1k+mMGJErG9911uiV5le0FOKrjWGrqbR3Kn5iudQM
4YWz6D9zrSr0ZagX1pmdH9VovpI1itbdyQ9Cic1aAWBoO98+czta7sAGSVpknKG4
k8c12/pV/PdSxpY9bRbokv9chMhwVs451m0ljAR1Ae3iB1eE5TRCF8txAc2yIAXv
ywVXOf4L4t7Qrw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 14:04:05 2025 by rpki-client