Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
File: g_j9dJOi_gViIttB7Wkwg7UOzPs.mft (raw, json)
Hash identifier: bceuKcVVglFz8xtIve4/Hlbrpnr4v3vXLmNjm6cBGKo=
Subject key identifier: B8:95:00:7A:3C:A2:60:3C:35:8A:B9:50:5D:C0:AF:07:E7:60:CE:40
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Certificate issuer: /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial: 01974967F5AAD971530333981C4BD004AF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
Manifest number: 0728
Signing time: Sat 07 Jun 2025 08:00:39 +0000
Manifest this update: Sat 07 Jun 2025 08:00:39 +0000
Manifest next update: Sun 08 Jun 2025 08:00:39 +0000
Files and hashes: 1: g_j9dJOi_gViIttB7Wkwg7UOzPs.crl (hash: bArXdJbgWiPVrutEEDJF68TztEXXnCCQUj2lEQdXGcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:f5:aa:d9:71:53:03:33:98:1c:4b:d0:04:af:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Validity
Not Before: Jun 7 08:00:39 2025 GMT
Not After : Jun 8 08:00:39 2025 GMT
Subject: CN=b895007a3ca2603c358ab9505dc0af07e760ce40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:c8:83:d1:8d:ee:32:89:d2:58:3a:a6:33:
d1:90:c7:68:77:98:30:2b:a9:f8:c7:15:fc:7c:56:
78:fc:cb:92:67:44:39:44:1c:5a:c6:0a:7f:6b:39:
1c:ad:6f:5c:65:76:89:ea:28:a7:60:bc:36:4d:9a:
e9:35:9f:d8:eb:63:77:b7:08:2f:d1:43:27:2e:d4:
15:6b:1c:f5:a0:0e:f2:04:38:4b:2d:95:0b:e7:a2:
a5:20:72:f3:2e:74:0f:a5:ec:fe:25:fa:75:2b:b7:
37:21:b9:a2:ad:c8:ee:61:c0:5b:83:c6:2f:09:46:
e7:14:3d:37:e4:93:11:0a:54:ff:63:74:88:42:6a:
55:28:e9:b2:0f:91:7f:27:3c:e1:0e:c0:e5:4d:33:
80:87:e6:f0:5c:64:dc:c0:db:51:f5:de:db:d3:eb:
ba:6a:24:67:c4:c7:3f:13:71:b1:4a:a2:1d:47:69:
86:58:1a:34:09:09:b5:55:fa:4e:9d:26:35:cf:d9:
f8:e5:9b:8a:ca:1c:93:3e:b6:f5:c6:8b:43:55:b1:
54:d5:88:0c:3f:15:f6:16:93:84:73:19:ac:86:0a:
04:37:f3:59:9b:25:31:5b:af:ba:6b:f2:4f:47:b2:
cc:17:43:dc:f2:68:cd:96:36:1a:10:00:3d:b1:df:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:95:00:7A:3C:A2:60:3C:35:8A:B9:50:5D:C0:AF:07:E7:60:CE:40
X509v3 Authority Key Identifier:
keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3b:34:fc:f3:40:e6:46:be:54:55:a5:d0:f5:e4:c3:b5:b8:
ca:3a:ed:0c:5e:75:3e:66:0b:47:0f:35:a1:06:7f:91:6f:2e:
b2:42:bb:1f:4a:b8:c9:f2:c7:7f:9c:3b:f5:9c:bc:c8:ef:81:
07:27:0e:3d:be:8a:02:4f:78:21:55:b9:0b:28:ba:8b:59:18:
04:8c:41:5c:a3:7d:5a:6f:51:2e:d5:bf:c4:45:dc:cf:3f:de:
5e:38:53:5a:86:0c:a5:ac:2f:dd:f9:7f:94:f6:50:c2:5a:aa:
4a:3d:08:ae:f5:ec:13:96:55:3a:06:33:41:99:2c:b3:7f:6d:
12:50:b1:67:8a:05:3a:ad:f4:29:f0:f7:e2:e6:eb:4a:48:65:
eb:33:7a:f8:1b:8d:93:4b:0b:f8:95:b4:ba:2f:52:cc:28:ab:
05:d0:65:3b:5e:67:a9:36:fb:ae:c2:83:97:e2:f6:ed:3f:20:
08:4d:ee:dd:8a:3e:3c:c6:eb:dc:08:3c:28:3f:bf:87:71:cd:
88:6a:88:18:3b:9c:29:17:44:a5:80:e1:55:a6:6d:b2:4e:b5:
77:33:0a:d5:7f:3f:51:2e:46:33:c8:b0:03:8a:a9:88:c8:46:
49:5f:31:c8:e0:85:ad:9b:8a:70:a7:99:b2:06:97:ba:0f:81:
c9:07:a1:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ/Wq2XFTAzOYHEvQBK8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZjhmZDc0OTNhMmZlMDU2MjIyZGI0MWVkNjkzMDgzYjUw
ZWNjZmIwHhcNMjUwNjA3MDgwMDM5WhcNMjUwNjA4MDgwMDM5WjAzMTEwLwYDVQQD
EyhiODk1MDA3YTNjYTI2MDNjMzU4YWI5NTA1ZGMwYWYwN2U3NjBjZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgLIg9GN7jKJ0lg6pjPRkMdod5gw
K6n4xxX8fFZ4/MuSZ0Q5RBxaxgp/azkcrW9cZXaJ6iinYLw2TZrpNZ/Y62N3twgv
0UMnLtQVaxz1oA7yBDhLLZUL56KlIHLzLnQPpez+Jfp1K7c3IbmircjuYcBbg8Yv
CUbnFD035JMRClT/Y3SIQmpVKOmyD5F/JzzhDsDlTTOAh+bwXGTcwNtR9d7b0+u6
aiRnxMc/E3GxSqIdR2mGWBo0CQm1VfpOnSY1z9n45ZuKyhyTPrb1xotDVbFU1YgM
PxX2FpOEcxmshgoEN/NZmyUxW6+6a/JPR7LMF0Pc8mjNljYaEAA9sd/4GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiVAHo8omA8NYq5UF3ArwfnYM5AMB8GA1UdIwQY
MBaAFIP4/XSTov4FYiLbQe1pMIO1Dsz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xMmQ2ZjItZjQ4MS00OWZkLThmMjAt
YTA0M2MyMzBmMzBkLzEvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8xMmQ2ZjItZjQ4MS00OWZkLThmMjAtYTA0M2MyMzBmMzBk
LzEvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzs0/PNA
5ka+VFWl0PXkw7W4yjrtDF51PmYLRw81oQZ/kW8uskK7H0q4yfLHf5w79Zy8yO+B
BycOPb6KAk94IVW5Cyi6i1kYBIxBXKN9Wm9RLtW/xEXczz/eXjhTWoYMpawv3fl/
lPZQwlqqSj0IrvXsE5ZVOgYzQZkss39tElCxZ4oFOq30KfD34ubrSkhl6zN6+BuN
k0sL+JW0ui9SzCirBdBlO15nqTb7rsKDl+L27T8gCE3u3Yo+PMbr3Ag8KD+/h3HN
iGqIGDucKRdEpYDhVaZtsk61dzMK1X8/US5GM8iwA4qpiMhGSV8xyOCFrZuKcKeZ
sgaXug+ByQehCw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:36:05 2025 by rpki-client