Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
File: g9gpJjs8X2OWgDf56GP9D9AeeGk.mft (raw, json)
Hash identifier: BrYl9Y4H5+16lN02g0EhKTaB0a4mXhnCa10LP2WATsM=
Subject key identifier: 30:0E:00:5F:31:94:49:31:EB:B9:4F:2D:96:72:23:71:6F:95:75:43
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Certificate issuer: /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial: 0197470BCE56853CA9643DE170AD960ACAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
Manifest number: 113C
Signing time: Fri 06 Jun 2025 21:00:45 +0000
Manifest this update: Fri 06 Jun 2025 21:00:45 +0000
Manifest next update: Sat 07 Jun 2025 21:00:45 +0000
Files and hashes: 1: KyWdAlshbj0x1AA1uUx-ZQPp9Zk.roa (hash: WDABDJxxu4elmiEAWMv89c2ma+ic8Jsi7E3Q6vmgEYc=)
2: g9gpJjs8X2OWgDf56GP9D9AeeGk.crl (hash: wEq9M+50J3tiLxgKSFgn6qRsNNvZGtfSunPcdntoU+M=)
3: hkjDx-2GOhGp7IPuQmrLBkkB_0U.roa (hash: 4gfS7chtfvvAEHSEdJQzQiuhcE63Qr3QGw7uAtNLDMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:ce:56:85:3c:a9:64:3d:e1:70:ad:96:0a:ca:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Validity
Not Before: Jun 6 21:00:45 2025 GMT
Not After : Jun 7 21:00:45 2025 GMT
Subject: CN=300e005f31944931ebb94f2d967223716f957543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:c0:10:2a:23:42:24:e3:ce:cb:9a:33:50:
33:75:ba:b4:bc:a1:b8:2f:b8:ac:61:fb:d0:de:10:
70:7c:bb:76:22:20:0a:c3:15:98:7f:5c:bf:50:b1:
94:31:99:f4:b5:a4:1b:3c:f5:96:5c:73:7f:95:93:
b8:12:09:0b:1b:4d:dd:e9:cc:0a:a8:87:b6:79:56:
fa:63:af:93:8d:15:29:cf:45:3f:38:ae:c8:3a:1b:
ce:b1:11:59:5a:d2:8c:27:ca:49:94:4a:03:5f:22:
c2:5a:0e:42:f6:6c:b9:bc:63:47:c9:b1:51:5d:67:
78:13:cc:13:f5:fe:1e:66:fe:4a:f4:7f:99:b5:8b:
8f:51:be:8d:83:2a:32:0a:22:2c:1d:be:70:e5:e9:
08:db:1f:99:6d:a9:28:cc:a3:fc:33:dc:c6:31:27:
20:6b:01:43:cc:8a:41:89:a3:50:b2:26:4d:57:44:
14:3c:1f:4f:59:26:9b:cd:6e:07:a2:31:66:ef:bd:
bd:c2:ad:76:ca:8d:8b:b3:a6:fd:d6:27:eb:6a:0a:
89:c8:e1:3b:c4:c9:7a:cf:21:c1:eb:fd:6b:05:22:
e0:7d:1d:c6:10:0c:96:c8:ca:dc:cb:25:9f:84:29:
6b:58:ed:8b:81:e8:79:c7:c8:7e:b3:71:66:7e:61:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:00:5F:31:94:49:31:EB:B9:4F:2D:96:72:23:71:6F:95:75:43
X509v3 Authority Key Identifier:
keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d2:5b:ea:c2:25:1e:ee:3a:65:aa:74:7d:d0:92:f1:96:92:
6c:0d:bd:9b:35:86:df:fc:1e:a8:df:a2:d6:71:68:33:db:f5:
7a:5d:d5:81:8b:ae:8c:69:32:fa:12:34:39:34:d1:07:4f:2d:
1a:87:3f:78:1c:f8:1e:ba:52:ef:5c:6c:ff:a1:7f:9e:d6:22:
fe:6c:6a:53:52:ee:65:74:b3:2d:09:cc:25:00:42:6c:ed:4f:
bb:5d:78:83:5b:62:92:9c:25:80:b7:01:d1:1a:31:45:ca:9d:
b9:45:ce:59:51:60:3b:f0:b7:b0:e6:6c:8a:27:04:dc:f4:8e:
56:a6:6a:d1:29:34:ce:b4:4e:44:83:d4:3b:64:4a:f8:bf:63:
7d:f2:d1:da:0b:b0:9a:81:6e:36:82:90:58:6c:d6:1a:3e:ea:
a1:32:13:a1:e8:69:67:7f:71:e7:e9:76:7c:17:2b:67:48:ee:
ac:cd:57:23:24:f5:fd:87:a8:0a:f7:5e:62:de:89:74:f2:04:
7f:38:93:cd:d6:18:74:e8:c4:74:24:7c:e7:f4:e9:ac:07:28:
4a:dd:05:16:fe:ac:26:ff:41:4b:ca:b1:85:51:42:1f:7d:a7:
52:53:36:28:1f:d3:6e:df:05:a9:c8:fc:d9:67:fb:48:a5:c4:
cf:7d:d7:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC85WhTypZD3hcK2WCsqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZDgyOTI2M2IzYzVmNjM5NjgwMzdmOWU4NjNmZDBmZDAx
ZTc4NjkwHhcNMjUwNjA2MjEwMDQ1WhcNMjUwNjA3MjEwMDQ1WjAzMTEwLwYDVQQD
EygzMDBlMDA1ZjMxOTQ0OTMxZWJiOTRmMmQ5NjcyMjM3MTZmOTU3NTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRDAECojQiTjzsuaM1Azdbq0vKG4
L7isYfvQ3hBwfLt2IiAKwxWYf1y/ULGUMZn0taQbPPWWXHN/lZO4EgkLG03d6cwK
qIe2eVb6Y6+TjRUpz0U/OK7IOhvOsRFZWtKMJ8pJlEoDXyLCWg5C9my5vGNHybFR
XWd4E8wT9f4eZv5K9H+ZtYuPUb6NgyoyCiIsHb5w5ekI2x+ZbakozKP8M9zGMScg
awFDzIpBiaNQsiZNV0QUPB9PWSabzW4HojFm7729wq12yo2Ls6b91ifragqJyOE7
xMl6zyHB6/1rBSLgfR3GEAyWyMrcyyWfhClrWO2Lgeh5x8h+s3FmfmFEowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAOAF8xlEkx67lPLZZyI3FvlXVDMB8GA1UdIwQY
MBaAFIPYKSY7PF9jloA3+ehj/Q/QHnhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzlncEpqczhYMk9XZ0RmNTZHUDlEOUFlZUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hMzZhMjItNDk1NS00MDkwLTk3ZDYt
M2MzNGE4YzI4Y2ExLzEvZzlncEpqczhYMk9XZ0RmNTZHUDlEOUFlZUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9hMzZhMjItNDk1NS00MDkwLTk3ZDYtM2MzNGE4YzI4Y2Ex
LzEvZzlncEpqczhYMk9XZ0RmNTZHUDlEOUFlZUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNJb6sIl
Hu46Zap0fdCS8ZaSbA29mzWG3/weqN+i1nFoM9v1el3VgYuujGky+hI0OTTRB08t
Goc/eBz4HrpS71xs/6F/ntYi/mxqU1LuZXSzLQnMJQBCbO1Pu114g1tikpwlgLcB
0RoxRcqduUXOWVFgO/C3sOZsiicE3PSOVqZq0Sk0zrRORIPUO2RK+L9jffLR2guw
moFuNoKQWGzWGj7qoTIToehpZ39x5+l2fBcrZ0jurM1XIyT1/YeoCvdeYt6JdPIE
fziTzdYYdOjEdCR85/TprAcoSt0FFv6sJv9BS8qxhVFCH32nUlM2KB/Tbt8Fqcj8
2Wf7SKXEz33X8w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:05 2025 by rpki-client