Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: elFDMRnepSVUZOE9nP9Vppo3dpOzReKfK+NiYpz5qmY=
Subject key identifier: 95:6E:43:79:6D:CC:F2:20:D8:57:3C:54:8A:1F:08:A1:4F:97:8D:06
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 019921B12360FB96A6951CB01C48B063EB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0B7C
Signing time: Sun 07 Sep 2025 01:01:20 +0000
Manifest this update: Sun 07 Sep 2025 01:01:20 +0000
Manifest next update: Mon 08 Sep 2025 01:01:20 +0000
Files and hashes: 1: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: ZMn6ve3Ig5Se2J++heH65no81F7rh/FeaxPtQQkRAVY=)
2: TRfMCYgQom2qb1ltkPZ8pDFMPbw.roa (hash: B/bZzAE30Cbi1NKH6O3ZfRrv6UmAF6KTnp6VWp5movg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:23:60:fb:96:a6:95:1c:b0:1c:48:b0:63:eb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Sep 7 01:01:20 2025 GMT
Not After : Sep 8 01:01:20 2025 GMT
Subject: CN=956e43796dccf220d8573c548a1f08a14f978d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:15:24:7f:52:11:84:03:82:b5:5e:f9:6f:3a:
78:21:21:ff:4d:b3:96:66:bb:d4:84:b9:c1:88:d1:
84:01:d0:91:00:83:1f:cc:44:e9:7e:01:59:53:cb:
c3:fd:ec:68:77:76:ab:e7:73:cc:49:44:c0:ab:3b:
34:ce:1a:bc:8e:11:63:db:e6:6b:97:73:d7:fe:53:
6b:13:a0:a1:db:02:fb:1b:06:2a:56:34:3c:d9:2f:
3d:a8:49:b4:ab:6b:c5:14:3f:a6:fb:53:68:7e:86:
37:4e:28:a0:9c:25:90:52:ad:0d:55:a3:9d:80:6d:
22:b6:20:de:d4:df:d6:b0:4b:40:f2:5d:8e:47:e7:
82:3e:a7:fd:f3:64:f3:3f:a0:ef:e1:99:5e:fd:37:
55:5a:7a:bc:4b:4f:73:9d:82:bb:b5:11:e0:7a:e9:
71:58:7a:bb:11:4b:03:6b:e5:d6:0e:52:0b:ca:6d:
a6:97:3a:f1:44:a5:5e:4e:fb:c8:dd:ce:cb:88:58:
73:a6:aa:c5:85:72:09:1f:2d:39:90:2b:c3:08:be:
69:7f:79:ae:d7:0e:6f:62:92:14:22:cd:8d:d3:9a:
8c:e9:96:fd:cc:f0:ec:af:5c:8c:e0:aa:3a:ca:36:
6f:16:40:68:14:e5:1d:ac:f7:4e:05:19:3d:5f:3b:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6E:43:79:6D:CC:F2:20:D8:57:3C:54:8A:1F:08:A1:4F:97:8D:06
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4e:32:23:51:36:dc:5b:c7:0c:18:ac:c2:e5:4e:ab:32:0e:
0f:50:9c:2e:7a:6d:51:23:1d:18:ef:9e:e5:51:76:d1:39:09:
ef:3f:a2:0b:d4:e2:b6:8c:64:86:e8:6b:fe:da:bc:8a:f1:fb:
18:c3:1d:9e:cc:d6:88:b3:d5:b5:ff:8c:9c:76:0b:da:37:d4:
e0:0e:30:ca:39:ce:d9:c8:1e:4e:59:4d:16:b7:88:96:19:0f:
9e:84:34:72:ad:4f:72:d5:98:a3:58:f6:d6:f9:3f:0c:dc:08:
06:23:3e:2d:e9:36:a8:a2:00:07:3e:10:47:52:ec:37:27:36:
5a:52:a4:f8:b5:56:08:90:d3:86:2e:fa:2a:b1:61:d2:74:44:
b5:95:59:a4:4d:c1:57:c7:9e:e3:e7:24:1c:28:d3:21:25:71:
31:c1:99:cc:0d:e2:d2:6e:9b:da:ed:14:53:2a:28:99:42:e3:
c0:5d:6f:29:85:d4:48:03:ed:2a:ad:a1:40:96:1b:d0:ff:09:
47:59:ad:80:32:8f:b6:bd:63:ea:72:67:11:c0:7f:d1:8e:4b:
cc:ff:61:b6:51:61:95:95:11:d8:05:f0:d3:a8:ad:eb:71:4c:
e9:fd:2e:5a:b9:9e:37:e9:e2:34:a5:ff:ea:8a:26:5b:1e:2f:
45:be:24:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsSNg+5amlRywHEiwY+s+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZGU3MGFmMTUzNDk0MzU0OTQ2NjQ4YWNkNjQxMTYzZTJh
ZjFiMWQwHhcNMjUwOTA3MDEwMTIwWhcNMjUwOTA4MDEwMTIwWjAzMTEwLwYDVQQD
Eyg5NTZlNDM3OTZkY2NmMjIwZDg1NzNjNTQ4YTFmMDhhMTRmOTc4ZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BUkf1IRhAOCtV75bzp4ISH/TbOW
ZrvUhLnBiNGEAdCRAIMfzETpfgFZU8vD/exod3ar53PMSUTAqzs0zhq8jhFj2+Zr
l3PX/lNrE6Ch2wL7GwYqVjQ82S89qEm0q2vFFD+m+1NofoY3TiignCWQUq0NVaOd
gG0itiDe1N/WsEtA8l2OR+eCPqf982TzP6Dv4Zle/TdVWnq8S09znYK7tRHgeulx
WHq7EUsDa+XWDlILym2mlzrxRKVeTvvI3c7LiFhzpqrFhXIJHy05kCvDCL5pf3mu
1w5vYpIUIs2N05qM6Zb9zPDsr1yM4Ko6yjZvFkBoFOUdrPdOBRk9Xzs7ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVuQ3ltzPIg2Fc8VIofCKFPl40GMB8GA1UdIwQY
MBaAFBvecK8VNJQ1SUZkis1kEWPirxsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDhlY2EtYzM5Zi00NjczLTg4NmYt
ZWNmODIzMDJmNzI2LzEvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xNDhlY2EtYzM5Zi00NjczLTg4NmYtZWNmODIzMDJmNzI2
LzEvRzk1d3J4VTBsRFZKUm1TS3pXUVJZLUt2R3gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsU4yI1E2
3FvHDBiswuVOqzIOD1CcLnptUSMdGO+e5VF20TkJ7z+iC9Titoxkhuhr/tq8ivH7
GMMdnszWiLPVtf+MnHYL2jfU4A4wyjnO2cgeTllNFreIlhkPnoQ0cq1PctWYo1j2
1vk/DNwIBiM+Lek2qKIABz4QR1LsNyc2WlKk+LVWCJDThi76KrFh0nREtZVZpE3B
V8ee4+ckHCjTISVxMcGZzA3i0m6b2u0UUyoomULjwF1vKYXUSAPtKq2hQJYb0P8J
R1mtgDKPtr1j6nJnEcB/0Y5LzP9htlFhlZUR2AXw06it63FM6f0uWrmeN+niNKX/
6oomWx4vRb4k3Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:59 2025 by rpki-client