Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: OQaEfbYMoj2b+VO2K5ToIh8Mp3kdMkYTTuMOxLg4Ng4=
Subject key identifier: C6:ED:B3:A8:89:59:3F:4E:F5:29:C8:A2:96:8F:42:67:1D:FD:C3:1F
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 01974A7B108AA1279547B03E496D7E5FBBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:01:08 +0000
Manifest this update: Sat 07 Jun 2025 13:01:08 +0000
Manifest next update: Sun 08 Jun 2025 13:01:08 +0000
Files and hashes: 1: I9UcyFkxclyQfZHhVQikKNPSVgY.roa (hash: xTi80oKD/t5UjogmPH/rk43vPfKlVZ63gwaMGRnVoxM=)
2: KUeSunFIk48S0xFjDtY2TFss-TE.roa (hash: J/IARmd2LJ7EVJ23zEUrZq3QktpdZue4SY7AhlJReKQ=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: cNTVDfmbXCrspsvmDhwMcrspWet0SqfQQgpZOY9Mg+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:10:8a:a1:27:95:47:b0:3e:49:6d:7e:5f:bb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Jun 7 13:01:08 2025 GMT
Not After : Jun 8 13:01:08 2025 GMT
Subject: CN=c6edb3a889593f4ef529c8a2968f42671dfdc31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:89:b4:ec:a3:94:37:bb:0d:fc:4b:5c:c7:
00:57:1f:d8:95:ed:d4:9f:41:c1:7a:f2:c0:c5:ab:
3c:d6:51:7b:e0:1e:22:93:33:eb:32:4c:9a:31:c4:
9f:bf:f9:ba:4a:a6:b6:d2:98:8d:a6:eb:f0:d3:57:
26:63:16:b0:11:1d:f1:3d:af:b0:29:49:c7:2f:9e:
d0:79:e5:92:91:87:9f:09:ef:a8:b5:43:d5:62:ad:
62:fe:c7:43:ba:68:18:df:4f:3a:37:cf:e5:c2:ca:
17:b6:55:26:94:7d:17:cd:88:78:e9:39:22:16:3c:
27:3e:87:64:7b:c0:25:1f:5a:23:cd:84:dc:7d:a7:
ff:a4:5c:b3:7c:66:9a:f4:54:18:95:df:eb:cd:46:
d9:9d:49:67:5d:04:0d:aa:3b:81:6c:fa:ef:4e:a7:
fc:88:4b:50:85:3a:36:fa:07:42:f5:56:2a:7e:8d:
c2:6f:eb:b5:d7:9e:b2:d2:d1:71:19:39:93:ac:d9:
2f:85:9c:e9:46:c7:b1:03:bf:b4:05:19:38:1d:b7:
fc:4f:be:78:1c:5a:db:c0:dc:b7:e1:14:f1:9c:40:
06:97:75:bd:2a:6c:c4:18:52:a2:ab:98:3f:8a:b0:
bb:61:66:2d:b3:d5:52:ce:4e:7d:51:9a:c3:92:81:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:ED:B3:A8:89:59:3F:4E:F5:29:C8:A2:96:8F:42:67:1D:FD:C3:1F
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:82:2c:9c:0e:e5:60:4b:8c:33:3f:6e:e6:ad:e0:26:b2:09:
13:82:de:7e:f8:e9:ea:c5:26:44:66:76:62:67:0e:92:54:32:
9b:0e:a4:65:46:65:47:97:14:2e:f8:2c:cb:0e:1c:34:f5:a5:
a5:f2:ff:29:0c:ef:f9:08:91:6c:33:3c:b9:28:fb:5b:d1:9d:
50:a6:7f:96:77:d5:0d:7e:c7:f3:d0:10:d0:5b:40:cf:d3:b2:
d8:ee:cd:eb:2c:1b:cf:35:15:7f:60:e6:67:ff:ca:19:4e:00:
53:26:c5:05:ba:01:7d:85:8b:6e:00:bd:97:4d:a4:35:95:68:
d9:6b:04:bd:df:f7:dd:30:13:48:7f:d2:b6:03:1e:31:89:f4:
85:05:d2:2a:61:ae:1d:ac:46:c3:10:89:96:27:f8:a3:4f:12:
70:35:f0:e2:ba:89:2b:75:d6:6e:74:a3:55:67:6f:72:6f:f2:
8a:db:b2:cb:74:fa:3c:37:0f:7c:3c:c6:5f:bf:61:2b:ed:7e:
8c:85:51:b5:c2:a9:b0:16:3c:19:98:08:ab:4e:ab:30:bf:35:
81:96:f2:e0:9a:d4:bd:70:6e:fe:03:87:c7:35:f3:87:86:69:
56:1a:da:81:8f:ca:47:0c:b1:f0:d1:39:87:93:33:46:c3:07:
3e:a4:6b:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKexCKoSeVR7A+SW1+X7v1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDYwOGExNDExOGIxYThkY2RkZWJiYjQwZjk2ZWNkNDhm
ODVjNzEwHhcNMjUwNjA3MTMwMTA4WhcNMjUwNjA4MTMwMTA4WjAzMTEwLwYDVQQD
EyhjNmVkYjNhODg5NTkzZjRlZjUyOWM4YTI5NjhmNDI2NzFkZmRjMzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PKJtOyjlDe7DfxLXMcAVx/Yle3U
n0HBevLAxas81lF74B4ikzPrMkyaMcSfv/m6Sqa20piNpuvw01cmYxawER3xPa+w
KUnHL57QeeWSkYefCe+otUPVYq1i/sdDumgY3086N8/lwsoXtlUmlH0XzYh46Tki
FjwnPodke8AlH1ojzYTcfaf/pFyzfGaa9FQYld/rzUbZnUlnXQQNqjuBbPrvTqf8
iEtQhTo2+gdC9VYqfo3Cb+u1156y0tFxGTmTrNkvhZzpRsexA7+0BRk4Hbf8T754
HFrbwNy34RTxnEAGl3W9KmzEGFKiq5g/irC7YWYts9VSzk59UZrDkoEqnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbts6iJWT9O9SnIopaPQmcd/cMfMB8GA1UdIwQY
MBaAFIDWCKFBGLGo3N3ru0D5bs1I+FxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEt
OTkyOGRkM2YyZjgyLzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEtOTkyOGRkM2YyZjgy
LzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4IsnA7l
YEuMMz9u5q3gJrIJE4Lefvjp6sUmRGZ2YmcOklQymw6kZUZlR5cULvgsyw4cNPWl
pfL/KQzv+QiRbDM8uSj7W9GdUKZ/lnfVDX7H89AQ0FtAz9Oy2O7N6ywbzzUVf2Dm
Z//KGU4AUybFBboBfYWLbgC9l02kNZVo2WsEvd/33TATSH/StgMeMYn0hQXSKmGu
HaxGwxCJlif4o08ScDXw4rqJK3XWbnSjVWdvcm/yituyy3T6PDcPfDzGX79hK+1+
jIVRtcKpsBY8GZgIq06rML81gZby4JrUvXBu/gOHxzXzh4ZpVhragY/KRwyx8NE5
h5MzRsMHPqRrCA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:28:57 2025 by rpki-client