
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: AUshNxW/ehi5y8Kr3G4i+y1jY+a2V5MKha61Xbt+iTw=
Subject key identifier: 87:81:F8:AF:DC:9C:8C:C2:AB:49:B9:E5:E7:C6:AF:74:29:4E:61:CB
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 0198733D6AC5C9086D67CFE4039559D89D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 132F
Signing time: Mon 04 Aug 2025 04:01:01 +0000
Manifest this update: Mon 04 Aug 2025 04:01:01 +0000
Manifest next update: Tue 05 Aug 2025 04:01:01 +0000
Files and hashes: 1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: 67iTugvboEh9xCKu9hqCpDBhVSBXvpF0b7ra7iEY20E=)
3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:6a:c5:c9:08:6d:67:cf:e4:03:95:59:d8:9d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Aug 4 04:01:01 2025 GMT
Not After : Aug 5 04:01:01 2025 GMT
Subject: CN=8781f8afdc9c8cc2ab49b9e5e7c6af74294e61cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:99:35:33:53:ef:29:64:a9:3d:f2:b2:09:
7c:ab:28:9d:d5:18:10:71:9c:d2:75:c6:a4:5d:50:
ab:f3:e8:78:a4:0d:b9:b1:26:35:7d:ef:75:71:65:
57:19:36:80:ee:c5:c0:bd:2a:5e:82:5b:07:2c:cd:
d6:45:21:9c:3f:17:45:46:04:34:4b:30:59:47:7d:
b9:a3:9d:84:18:74:46:79:f7:4e:f7:fe:3c:cd:eb:
10:d6:f7:c0:ee:d1:03:eb:44:08:31:33:ab:52:81:
fd:29:be:f6:dd:89:57:e7:bd:e3:56:7f:47:89:13:
5b:2c:a3:7d:c8:fb:40:bd:20:05:d9:0a:8c:95:6a:
10:e7:32:d7:6c:38:a9:bf:fa:d4:39:5e:f6:0c:e3:
70:ad:85:c7:e7:50:10:07:28:d1:74:f3:e1:d1:b7:
96:25:a8:32:8e:53:f6:2e:9c:9b:ad:38:b5:7e:60:
81:db:59:7d:88:fb:56:78:5e:dd:78:77:4b:f7:98:
ef:26:0e:5c:9b:1d:2d:a6:0e:83:44:8c:9b:bf:59:
1b:94:78:cf:81:9b:62:12:c5:ec:34:28:d6:b5:75:
5d:bd:cd:ab:56:ed:e3:96:50:65:a0:e6:bc:21:f2:
4d:93:84:0d:14:01:13:0d:94:88:dd:39:be:b6:64:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:81:F8:AF:DC:9C:8C:C2:AB:49:B9:E5:E7:C6:AF:74:29:4E:61:CB
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b8:4e:0c:54:0e:76:0e:9a:1f:0e:3e:84:13:e5:34:c9:d7:
be:2b:00:72:19:9e:53:f5:10:ee:c0:cd:5c:8c:dd:c8:62:06:
cb:56:6c:a2:47:e2:4c:fe:11:8f:e3:0f:6a:86:9c:e0:6b:14:
45:af:d8:05:c5:bf:52:f8:8d:4a:63:ee:67:ef:10:60:7c:d8:
db:34:45:76:2b:99:ca:dc:9b:b5:55:e7:b7:01:4c:25:e5:a3:
a1:97:fd:e7:39:b2:c9:3a:e2:be:45:b9:35:a0:88:9b:fc:7e:
6c:ec:37:58:97:69:fe:b7:ee:45:6c:10:0f:5b:be:d7:c6:29:
1a:1b:2a:b1:fe:04:dc:7d:98:58:27:1b:5d:85:db:32:08:bb:
61:c4:90:63:87:22:0b:9c:7e:c7:84:a3:d6:2c:dc:cc:c5:ad:
dd:d3:01:af:41:f1:b8:00:01:d0:d3:d7:98:39:48:83:53:04:
26:1d:01:d0:f9:f3:94:e1:19:2d:32:ff:b6:b2:51:9d:96:f5:
8b:ec:d4:ee:da:38:aa:72:8e:84:28:c4:0b:56:3b:68:d9:18:
75:b3:84:96:f9:bc:47:1f:e2:61:38:1e:d6:93:3b:f4:5a:4a:
76:b4:4a:ed:d6:65:cc:4a:6a:8f:a9:9b:92:9d:50:95:bd:b5:
02:0e:5e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPWrFyQhtZ8/kA5VZ2J0lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiY2VlNDA0MDVhZWZiNmRhMTdhMzQwZWVmMTU5Y2U5YzRk
MTgzMjIwHhcNMjUwODA0MDQwMTAxWhcNMjUwODA1MDQwMTAxWjAzMTEwLwYDVQQD
Eyg4NzgxZjhhZmRjOWM4Y2MyYWI0OWI5ZTVlN2M2YWY3NDI5NGU2MWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9+ZNTNT7ylkqT3ysgl8qyid1RgQ
cZzSdcakXVCr8+h4pA25sSY1fe91cWVXGTaA7sXAvSpeglsHLM3WRSGcPxdFRgQ0
SzBZR325o52EGHRGefdO9/48zesQ1vfA7tED60QIMTOrUoH9Kb723YlX573jVn9H
iRNbLKN9yPtAvSAF2QqMlWoQ5zLXbDipv/rUOV72DONwrYXH51AQByjRdPPh0beW
JagyjlP2LpybrTi1fmCB21l9iPtWeF7deHdL95jvJg5cmx0tpg6DRIybv1kblHjP
gZtiEsXsNCjWtXVdvc2rVu3jllBloOa8IfJNk4QNFAETDZSI3Tm+tmQNPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeB+K/cnIzCq0m55efGr3QpTmHLMB8GA1UdIwQY
MBaAFBvO5AQFrvttoXo0Du8VnOnE0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQt
N2U0NmFkNzQ4NDg0LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQtN2U0NmFkNzQ4NDg0
LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLhODFQO
dg6aHw4+hBPlNMnXvisAchmeU/UQ7sDNXIzdyGIGy1ZsokfiTP4Rj+MPaoac4GsU
Ra/YBcW/UviNSmPuZ+8QYHzY2zRFdiuZytybtVXntwFMJeWjoZf95zmyyTrivkW5
NaCIm/x+bOw3WJdp/rfuRWwQD1u+18YpGhsqsf4E3H2YWCcbXYXbMgi7YcSQY4ci
C5x+x4Sj1izczMWt3dMBr0HxuAAB0NPXmDlIg1MEJh0B0PnzlOEZLTL/trJRnZb1
i+zU7to4qnKOhCjEC1Y7aNkYdbOElvm8Rx/iYTge1pM79FpKdrRK7dZlzEpqj6mb
kp1Qlb21Ag5emw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:06 2025 by rpki-client