Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier: UuGlO/+MQ952L0Eso14I12KRgCLfzus/EGCbh48Oxlw=
Subject key identifier: BD:41:EC:5D:FB:F0:23:DD:22:F1:60:9F:49:DA:4F:C7:92:50:D7:03
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 01974666C25CF4301EC49866685AD84B5DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 18:00:28 +0000
Manifest this update: Fri 06 Jun 2025 18:00:28 +0000
Manifest next update: Sat 07 Jun 2025 18:00:28 +0000
Files and hashes: 1: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: oVoOqWpVOcaV004COd9fxWYliMZ8F49LYjv//r16YAY=)
2: YJHXZeNag-cu70_fJht-ZOpxnGk.roa (hash: 2m1tn0x6o3pfXUEVzS2q6AJtU601h1r6TeqXWLsErHU=)
3: lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa (hash: jZwRIN2ogKpi/MzaP8NmIeUVW4yffrhHB5Fsd5XJEE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:c2:5c:f4:30:1e:c4:98:66:68:5a:d8:4b:5d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Jun 6 18:00:28 2025 GMT
Not After : Jun 7 18:00:28 2025 GMT
Subject: CN=bd41ec5dfbf023dd22f1609f49da4fc79250d703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:9c:a2:6d:d3:de:41:15:df:5c:79:72:fa:
df:ed:80:4c:41:31:76:de:a8:1f:57:a1:60:5c:2f:
83:08:a3:c0:0c:10:87:6a:84:8b:f4:d7:63:5a:03:
0e:1a:74:bc:4d:77:63:3d:49:a0:f5:3d:b7:ad:a8:
7a:8d:40:cd:fb:da:12:cf:09:80:ab:8b:ff:5f:ad:
a0:57:3d:0e:c9:93:1b:79:9f:4e:8c:5c:5f:aa:43:
b6:61:74:b2:9e:60:ed:f6:3f:14:b5:a0:2e:b8:2b:
a6:9d:2d:f7:f5:bb:3e:a8:a5:9d:b3:90:9b:a5:bf:
ae:95:f3:71:25:7e:48:b2:19:52:bc:c3:ea:0e:0a:
bf:a5:f2:bd:78:06:54:17:39:56:56:5b:6e:25:ef:
ca:85:3a:4f:1f:7b:bb:f0:ca:94:63:ce:59:b1:f1:
1b:00:57:5f:d9:be:40:4b:e2:92:86:2c:db:40:ef:
c4:e8:ab:f3:f4:ee:ef:77:44:52:d5:a8:47:34:28:
b6:da:ea:3a:b3:a1:91:49:41:34:30:4d:5b:e4:4f:
64:c2:03:7a:38:48:3a:0c:6a:4a:6d:66:ea:b4:eb:
fc:1c:4b:5b:df:20:b8:b8:7b:ce:dc:c8:51:15:13:
db:9c:35:e0:17:5c:6e:93:74:8f:f6:04:fc:6b:c6:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:41:EC:5D:FB:F0:23:DD:22:F1:60:9F:49:DA:4F:C7:92:50:D7:03
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f4:1f:55:79:60:94:2c:b6:e9:67:62:18:aa:22:f6:86:40:
3f:bc:69:da:42:8e:f4:bb:b8:09:13:2c:b0:c2:6c:42:31:60:
a0:f2:b8:45:14:f2:9e:a0:ed:ff:e0:57:44:eb:ea:8d:a2:91:
af:70:8e:be:c0:f6:29:ac:c7:0a:59:55:6e:d6:f7:68:d0:a8:
90:ce:ba:b2:93:16:c1:dc:68:3d:58:d7:a3:70:27:67:4f:f6:
51:4a:8c:48:68:4d:d7:5d:60:06:b8:aa:32:4e:e6:86:f2:20:
51:ca:b2:5d:88:39:f9:90:67:6e:60:50:eb:8f:8b:31:4c:c6:
52:22:69:cc:1a:ee:70:73:61:f9:1c:d3:e2:cc:dd:a5:d6:26:
01:c6:46:a9:ab:01:35:28:36:5f:ca:86:64:30:2e:96:86:34:
77:c5:5b:8c:a3:13:29:81:32:30:8d:19:e5:84:82:46:97:7c:
8e:a8:44:b8:3d:49:27:c2:2a:56:e9:d0:ac:a8:ce:0a:e0:52:
51:d8:a3:1d:46:aa:00:96:0f:9a:31:9b:b6:18:83:aa:b0:4a:
01:1f:fb:34:3b:2a:fd:2e:cc:84:e8:93:fa:4b:7d:9e:65:dd:
ff:7c:59:e9:46:4a:56:d4:09:0e:64:32:7e:4b:33:89:fb:61:
87:59:1f:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZsJc9DAexJhmaFrYS13qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmRmMGJjMDkzZjI5OGIwNDM1MjJlYmQ0ZWRlMTk3OTMw
ODFhMjkwHhcNMjUwNjA2MTgwMDI4WhcNMjUwNjA3MTgwMDI4WjAzMTEwLwYDVQQD
EyhiZDQxZWM1ZGZiZjAyM2RkMjJmMTYwOWY0OWRhNGZjNzkyNTBkNzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+Ocom3T3kEV31x5cvrf7YBMQTF2
3qgfV6FgXC+DCKPADBCHaoSL9NdjWgMOGnS8TXdjPUmg9T23rah6jUDN+9oSzwmA
q4v/X62gVz0OyZMbeZ9OjFxfqkO2YXSynmDt9j8UtaAuuCumnS339bs+qKWds5Cb
pb+ulfNxJX5IshlSvMPqDgq/pfK9eAZUFzlWVltuJe/KhTpPH3u78MqUY85ZsfEb
AFdf2b5AS+KShizbQO/E6Kvz9O7vd0RS1ahHNCi22uo6s6GRSUE0ME1b5E9kwgN6
OEg6DGpKbWbqtOv8HEtb3yC4uHvO3MhRFRPbnDXgF1xuk3SP9gT8a8YxRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1B7F378CPdIvFgn0naT8eSUNcDMB8GA1UdIwQY
MBaAFBtt8LwJPymLBDUi69Tt4ZeTCBopMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYt
NWFjNmZkZmRjMGNjLzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYtNWFjNmZkZmRjMGNj
LzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifQfVXlg
lCy26WdiGKoi9oZAP7xp2kKO9Lu4CRMssMJsQjFgoPK4RRTynqDt/+BXROvqjaKR
r3COvsD2KazHCllVbtb3aNCokM66spMWwdxoPVjXo3AnZ0/2UUqMSGhN111gBriq
Mk7mhvIgUcqyXYg5+ZBnbmBQ64+LMUzGUiJpzBrucHNh+RzT4szdpdYmAcZGqasB
NSg2X8qGZDAuloY0d8VbjKMTKYEyMI0Z5YSCRpd8jqhEuD1JJ8IqVunQrKjOCuBS
UdijHUaqAJYPmjGbthiDqrBKAR/7NDsq/S7MhOiT+kt9nmXd/3xZ6UZKVtQJDmQy
fkszifthh1kfcA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:37 2025 by rpki-client