Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier: uIWueHc7QuAo+yHJBbmH45ot0H5w2fxLuQdK8OfeHQM=
Subject key identifier: C8:86:A3:A7:5F:79:08:31:D5:FE:50:F2:3B:25:7C:D4:39:09:25:5A
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial: 019752A1FBEA027598348C8A1A0DD62D1108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number: 157F
Signing time: Mon 09 Jun 2025 03:00:36 +0000
Manifest this update: Mon 09 Jun 2025 03:00:36 +0000
Manifest next update: Tue 10 Jun 2025 03:00:36 +0000
Files and hashes: 1: A4PQ0gQ7q04XkXEWkOpsFcG55U0.roa (hash: BlIGTUdhWCkztoNKbN33qtlZGYIZKP+ZzvO3VxYHAQ8=)
2: S1ukHOQHwZ5FXTblgAJkMrxdPMo.roa (hash: nsbro8MsYnPkoUuF8RjKDn+GAEU45Dqsh1VzCFmduco=)
3: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: v6nfu8nWuc1SPoVmef2iRM5mWn7BbM2XvyWb3jdFyXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a1:fb:ea:02:75:98:34:8c:8a:1a:0d:d6:2d:11:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Validity
Not Before: Jun 9 03:00:36 2025 GMT
Not After : Jun 10 03:00:36 2025 GMT
Subject: CN=c886a3a75f790831d5fe50f23b257cd43909255a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:e1:54:6e:c2:b9:ec:19:06:81:03:72:41:
f3:cc:97:b7:78:d8:c5:cc:ee:72:3c:0d:2d:6f:b1:
16:62:84:5f:9c:01:c4:42:11:ef:28:33:e2:fe:d7:
09:74:d2:d6:be:79:88:5d:31:d0:82:ed:29:e1:32:
cf:a9:8c:3f:5b:10:68:fd:4a:75:a9:ce:ef:5a:3f:
b8:de:8a:f8:85:2b:d5:e6:df:cd:99:8b:c4:e2:b7:
6f:87:3d:a6:e5:a5:68:76:17:ce:1d:fa:07:a6:25:
45:af:79:9d:f4:f5:fa:33:ff:bf:18:67:68:d1:27:
63:20:8b:a5:37:3b:c3:90:2e:2b:77:5a:57:9b:37:
fe:49:c9:1a:2e:d1:a1:5d:56:42:ee:17:1a:d6:0e:
ed:83:fb:52:3a:6f:64:85:9d:f4:46:33:64:f1:fc:
ab:43:b5:43:9a:0b:2e:85:a7:f8:23:07:d3:3d:47:
78:64:30:12:98:e2:41:d9:24:c7:a9:2f:30:1a:38:
53:2e:98:e4:af:ed:d0:15:2f:ee:e9:44:fd:44:80:
b9:84:6d:64:e8:d9:6c:0c:2d:13:10:b4:8d:66:e6:
fa:63:eb:c8:65:d1:50:e9:f5:d0:20:ad:99:42:30:
37:71:55:a5:78:14:cb:08:f3:cc:59:43:41:c5:55:
6b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:86:A3:A7:5F:79:08:31:D5:FE:50:F2:3B:25:7C:D4:39:09:25:5A
X509v3 Authority Key Identifier:
keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:40:3f:e9:a2:62:33:92:48:d1:16:51:45:96:5d:2a:85:1f:
6c:f0:3d:3c:65:54:78:c3:6f:8f:c0:a5:9b:2d:d4:03:06:f9:
82:d8:ad:89:00:79:0a:30:f0:e5:6b:76:31:22:0e:a7:b8:12:
cc:33:81:d5:59:7a:f3:a0:4b:a2:9e:5a:93:d3:e4:0e:44:3a:
85:19:1c:5c:5e:22:c9:55:65:a7:64:55:a1:51:8f:a4:c0:ad:
c6:7d:57:37:3e:35:86:75:39:07:f3:7e:0c:68:2d:c4:5c:f3:
74:6e:e0:4a:09:e1:a3:53:5b:8e:bb:7f:60:8d:1c:55:df:91:
ad:a7:1d:66:3c:32:66:34:62:85:a5:40:2b:f0:30:73:88:5a:
9c:df:2d:78:33:ff:e0:3a:e6:a0:61:54:02:07:3f:1f:1c:17:
e1:29:20:9e:90:ca:35:74:43:ad:b4:47:21:0b:b5:7d:e4:2e:
aa:ac:c2:10:a2:7c:c7:f5:ba:fc:bf:0f:3c:d3:13:16:8b:d5:
db:98:e5:77:00:92:54:65:46:77:fb:f1:a8:47:ac:69:bd:7f:
39:e0:a6:d9:32:d6:06:23:91:9c:88:61:e6:50:4f:82:96:9f:
da:1f:b6:92:d0:87:b6:31:be:34:d4:49:02:06:c1:a9:cf:51:
c4:a3:20:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSofvqAnWYNIyKGg3WLREIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNDZkZThjZWMwMWQwNTI1MzZjMGYwOGRmZTdhOGI1M2Y5
YWFlYzIwHhcNMjUwNjA5MDMwMDM2WhcNMjUwNjEwMDMwMDM2WjAzMTEwLwYDVQQD
EyhjODg2YTNhNzVmNzkwODMxZDVmZTUwZjIzYjI1N2NkNDM5MDkyNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXPhVG7CuewZBoEDckHzzJe3eNjF
zO5yPA0tb7EWYoRfnAHEQhHvKDPi/tcJdNLWvnmIXTHQgu0p4TLPqYw/WxBo/Up1
qc7vWj+43or4hSvV5t/NmYvE4rdvhz2m5aVodhfOHfoHpiVFr3md9PX6M/+/GGdo
0SdjIIulNzvDkC4rd1pXmzf+SckaLtGhXVZC7hca1g7tg/tSOm9khZ30RjNk8fyr
Q7VDmgsuhaf4IwfTPUd4ZDASmOJB2STHqS8wGjhTLpjkr+3QFS/u6UT9RIC5hG1k
6NlsDC0TELSNZub6Y+vIZdFQ6fXQIK2ZQjA3cVWleBTLCPPMWUNBxVVrbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiGo6dfeQgx1f5Q8jslfNQ5CSVaMB8GA1UdIwQY
MBaAFIFG3ozsAdBSU2wPCN/nqLU/mq7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjhkOWEtOGRkYi00NGIzLTlhYzAt
Y2Q1NzJmZDA0NGVlLzEvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kZjhkOWEtOGRkYi00NGIzLTlhYzAtY2Q1NzJmZDA0NGVl
LzEvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEA/6aJi
M5JI0RZRRZZdKoUfbPA9PGVUeMNvj8Clmy3UAwb5gtitiQB5CjDw5Wt2MSIOp7gS
zDOB1Vl686BLop5ak9PkDkQ6hRkcXF4iyVVlp2RVoVGPpMCtxn1XNz41hnU5B/N+
DGgtxFzzdG7gSgnho1Nbjrt/YI0cVd+RracdZjwyZjRihaVAK/Awc4hanN8teDP/
4DrmoGFUAgc/HxwX4SkgnpDKNXRDrbRHIQu1feQuqqzCEKJ8x/W6/L8PPNMTFovV
25jldwCSVGVGd/vxqEesab1/OeCm2TLWBiORnIhh5lBPgpaf2h+2ktCHtjG+NNRJ
AgbBqc9RxKMg1g==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:00:47 2025 by rpki-client