Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File: g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier: WZ7oHw6z856+E/cxbvnuxrfdHI4/NyXCG7BipdsxFH0=
Subject key identifier: 7C:70:C3:2F:CC:D3:FF:9E:2B:C6:9F:1F:76:81:E9:A7:E1:D2:0B:CF
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 019935A560BDE98520D1882E363B6F6D67C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 22:00:54 +0000
Manifest this update: Wed 10 Sep 2025 22:00:54 +0000
Manifest next update: Thu 11 Sep 2025 22:00:54 +0000
Files and hashes: 1: fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa (hash: cTH5l3quR1dZhmY8/pVYGOhtfcq0HdpSh+BT0OKf954=)
2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: estBIL/enYI9fRnBN1lTb4ND3Rc5paCTFBQByaM7mX0=)
3: owvK-K4xt1xLcc7TBT_SQsn0CJs.roa (hash: i/ROe7RqOf5kAUxhkRxcQuX6NvNJ0cLz8fR53Bhsxmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:60:bd:e9:85:20:d1:88:2e:36:3b:6f:6d:67:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Sep 10 22:00:54 2025 GMT
Not After : Sep 11 22:00:54 2025 GMT
Subject: CN=7c70c32fccd3ff9e2bc69f1f7681e9a7e1d20bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:d8:23:17:5e:d7:11:af:96:cc:17:97:7f:
0e:0b:ee:05:18:8b:97:fd:e3:e4:68:76:8c:0d:1f:
b1:b8:a0:20:29:bd:3f:ce:a6:dc:f3:29:07:64:04:
e5:cf:46:f2:05:02:7f:79:7e:0f:2e:8d:4d:20:ae:
52:73:ef:68:d1:9c:f4:f9:f5:88:aa:12:8b:d2:d2:
af:9e:8f:ec:d3:ad:c9:3a:ac:aa:0e:c9:3a:32:28:
7a:29:e3:41:65:f3:23:32:27:4c:fb:35:56:91:b1:
22:6d:ae:7e:60:7c:51:84:db:55:3d:9a:8e:9e:6f:
ed:1c:10:6f:8a:9c:f7:64:c9:0e:36:83:8b:0e:22:
eb:a4:54:10:92:9a:81:85:3b:c1:68:4c:03:be:bd:
4a:91:7d:80:2a:8e:9f:cb:9b:b3:c5:d1:e2:61:ee:
97:c3:55:9a:22:db:ef:81:3d:8a:cc:9c:0c:9d:1b:
5e:e5:c9:6e:1f:6f:0e:2b:cd:49:c3:55:9a:84:4d:
2e:8c:4a:4b:75:6b:58:8f:01:f3:cf:19:dc:05:f0:
62:51:89:48:ab:18:74:7f:fd:85:19:8f:ed:80:5d:
85:5a:1a:d0:12:c4:4f:7d:ae:fe:98:08:2b:71:91:
63:75:31:c2:59:4b:a8:9b:fe:b4:29:60:4b:5a:3c:
af:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:70:C3:2F:CC:D3:FF:9E:2B:C6:9F:1F:76:81:E9:A7:E1:D2:0B:CF
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ac:24:8d:75:9f:e2:96:ee:c8:d5:6d:f0:3d:16:35:00:89:
65:db:e3:80:84:ed:f3:9f:53:13:68:bf:f9:2c:10:a9:ec:eb:
5a:59:f3:16:41:4d:ce:b8:3e:b0:a8:a9:f0:19:ab:5f:70:80:
71:b8:25:9e:ba:0a:a9:5d:f3:e0:0c:d5:a0:af:76:79:5b:d4:
50:6c:b3:6c:90:34:4f:22:37:f6:e2:7a:b5:86:36:1c:26:49:
c0:10:94:82:15:6d:4e:7c:21:96:b3:32:c4:83:00:23:d5:c2:
9e:ce:b1:4c:c8:f1:c8:fe:c1:2a:d0:8c:a4:43:35:e0:24:5f:
fd:e1:d3:28:ad:ad:e8:42:16:95:bf:dc:f6:f2:4e:22:e3:42:
21:ff:95:ec:32:a2:01:c8:03:0a:52:b7:0a:f1:43:b6:a2:b3:
79:54:ad:a8:c0:a0:10:27:58:6d:33:66:7f:8e:84:13:ec:ce:
44:1a:ac:59:99:43:7b:60:d6:51:d1:1c:3c:05:c6:c0:3f:6f:
4d:91:3c:19:53:1a:05:4c:6f:af:42:e8:c5:32:a1:6e:e3:d7:
14:a1:37:d9:9e:be:14:2f:de:ef:92:7a:61:23:89:37:b6:ea:
76:f0:dc:ef:71:2d:f2:db:8c:87:1c:2d:ee:7a:59:7f:c1:bf:
6e:b1:a0:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1pWC96YUg0YguNjtvbWfCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYTA2MjUyNTI5MmEyOWU5N2ZlNmEwNTViOWJkNjA4NGE3
NzE5NzcwHhcNMjUwOTEwMjIwMDU0WhcNMjUwOTExMjIwMDU0WjAzMTEwLwYDVQQD
Eyg3YzcwYzMyZmNjZDNmZjllMmJjNjlmMWY3NjgxZTlhN2UxZDIwYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u/YIxde1xGvlswXl38OC+4FGIuX
/ePkaHaMDR+xuKAgKb0/zqbc8ykHZATlz0byBQJ/eX4PLo1NIK5Sc+9o0Zz0+fWI
qhKL0tKvno/s063JOqyqDsk6Mih6KeNBZfMjMidM+zVWkbEiba5+YHxRhNtVPZqO
nm/tHBBvipz3ZMkONoOLDiLrpFQQkpqBhTvBaEwDvr1KkX2AKo6fy5uzxdHiYe6X
w1WaItvvgT2KzJwMnRte5cluH28OK81Jw1WahE0ujEpLdWtYjwHzzxncBfBiUYlI
qxh0f/2FGY/tgF2FWhrQEsRPfa7+mAgrcZFjdTHCWUuom/60KWBLWjyv7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxwwy/M0/+eK8afH3aB6afh0gvPMB8GA1UdIwQY
MBaAFIOgYlJSkqKel/5qBVub1ghKdxl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzIt
MzIxYzlkNjZjODQ3LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzItMzIxYzlkNjZjODQ3
LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUawkjXWf
4pbuyNVt8D0WNQCJZdvjgITt859TE2i/+SwQqezrWlnzFkFNzrg+sKip8BmrX3CA
cbglnroKqV3z4AzVoK92eVvUUGyzbJA0TyI39uJ6tYY2HCZJwBCUghVtTnwhlrMy
xIMAI9XCns6xTMjxyP7BKtCMpEM14CRf/eHTKK2t6EIWlb/c9vJOIuNCIf+V7DKi
AcgDClK3CvFDtqKzeVStqMCgECdYbTNmf46EE+zORBqsWZlDe2DWUdEcPAXGwD9v
TZE8GVMaBUxvr0LoxTKhbuPXFKE32Z6+FC/e75J6YSOJN7bqdvDc73Et8tuMhxwt
7npZf8G/brGgZA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 04:08:32 2025 by rpki-client