Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: hhhS+++C7pVqR62Sy9Hkoz8NP4hdbd3c3sWBjFmqjSg=
Subject key identifier: FD:A9:21:F0:73:C2:E2:25:3B:84:F4:1A:0C:1B:C5:2F:C9:C2:71:E3
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 01987DC0D3264356600B8D040C5E1E962664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 05C7
Signing time: Wed 06 Aug 2025 05:00:45 +0000
Manifest this update: Wed 06 Aug 2025 05:00:45 +0000
Manifest next update: Thu 07 Aug 2025 05:00:45 +0000
Files and hashes: 1: 9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa (hash: NvC05zdhztqBgGL0x7IrDtfQb3ZiSTjs+SHJkAWRFb8=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: R2lZxenNR38dCv6hJxk4ABtZSmPtk6iU0O72DyMixoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:d3:26:43:56:60:0b:8d:04:0c:5e:1e:96:26:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Aug 6 05:00:45 2025 GMT
Not After : Aug 7 05:00:45 2025 GMT
Subject: CN=fda921f073c2e2253b84f41a0c1bc52fc9c271e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:90:81:8a:97:24:ee:43:8e:98:66:0d:70:f5:
e3:96:e5:32:aa:7d:e2:f8:3c:90:51:9c:bb:34:84:
57:c5:7d:86:ba:9e:9d:a4:fe:26:57:0a:ff:0c:f5:
ba:c6:87:d6:44:37:ea:c4:fc:25:ed:f3:31:00:56:
de:e3:a7:3e:71:1d:a4:a2:d9:10:85:90:4b:50:5a:
73:ed:bd:12:22:fc:8e:77:96:0d:0b:36:90:ec:10:
b1:16:27:4a:bb:cc:a4:10:b1:0c:61:bc:a4:3a:f0:
d4:91:97:b2:36:d4:67:25:cb:fb:14:3d:47:d7:af:
c4:06:d8:c2:81:59:3a:5c:9c:ba:3e:b0:47:22:2a:
0f:a6:a9:91:69:44:b7:e6:4c:0b:f8:85:5e:f3:52:
8d:c1:64:fc:36:0b:9e:da:4f:b8:74:17:da:ef:b8:
6d:03:e9:ae:49:35:c3:0f:e4:d5:3c:eb:1e:49:1e:
eb:ee:5c:9c:f3:37:1b:67:dc:4a:22:94:ca:19:80:
91:78:02:7f:e7:07:d4:36:b7:20:c3:6e:0c:91:b0:
ac:0f:74:c2:02:61:37:38:3a:86:b1:cc:a6:a6:15:
a4:69:f4:01:96:6d:e6:a1:17:86:81:85:cb:40:57:
23:c7:bb:5b:3e:eb:7d:18:68:85:00:c5:c8:7f:c6:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A9:21:F0:73:C2:E2:25:3B:84:F4:1A:0C:1B:C5:2F:C9:C2:71:E3
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9b:50:a9:69:e0:ce:8a:7c:a9:20:cd:5c:18:0d:1f:fd:95:
61:57:86:46:77:c0:31:a2:28:56:b3:dc:57:b7:54:9e:11:b2:
82:0f:52:d2:11:57:a1:04:92:d7:33:18:83:81:2f:f5:b2:7b:
88:6d:e8:ed:88:97:f0:5b:ac:9a:fc:55:4a:f1:04:38:73:4d:
0d:eb:29:21:e3:43:5a:8d:fd:26:51:7d:2a:7b:f7:b9:1d:d0:
64:28:9d:1b:3d:26:34:b5:cf:4b:3e:bc:67:ff:d1:58:8f:af:
e9:52:60:56:58:23:40:30:44:17:8b:55:84:df:79:6b:da:73:
c1:3a:79:27:39:38:ee:08:e6:a1:0c:67:22:67:62:6a:1a:81:
23:4a:75:7f:44:23:d1:52:a4:ad:e3:ff:66:bd:51:1c:6f:e8:
c0:f6:82:80:fd:b8:db:c1:47:b5:c3:78:7d:11:a9:62:c6:51:
cb:fc:92:51:ee:e4:71:f7:b5:9b:8d:60:ce:23:46:e1:cf:3d:
a2:f2:05:6b:fb:91:da:cd:f9:56:a8:5b:30:50:ee:b1:c9:d7:
1f:17:6b:a6:e9:5f:bd:40:2e:9d:09:3d:b9:77:6e:fd:f9:43:
bd:89:9d:e3:ac:e4:f3:b9:8e:87:fb:27:8f:2f:53:27:a5:e4:
a3:aa:e7:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wNMmQ1ZgC40EDF4eliZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjA4ODUxMjAyMzI4ZGNlNWZjMDFiZjlkZDI5MjUyMDUz
MGQ5ZmUwHhcNMjUwODA2MDUwMDQ1WhcNMjUwODA3MDUwMDQ1WjAzMTEwLwYDVQQD
EyhmZGE5MjFmMDczYzJlMjI1M2I4NGY0MWEwYzFiYzUyZmM5YzI3MWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpCBipck7kOOmGYNcPXjluUyqn3i
+DyQUZy7NIRXxX2Gup6dpP4mVwr/DPW6xofWRDfqxPwl7fMxAFbe46c+cR2kotkQ
hZBLUFpz7b0SIvyOd5YNCzaQ7BCxFidKu8ykELEMYbykOvDUkZeyNtRnJcv7FD1H
16/EBtjCgVk6XJy6PrBHIioPpqmRaUS35kwL+IVe81KNwWT8Ngue2k+4dBfa77ht
A+muSTXDD+TVPOseSR7r7lyc8zcbZ9xKIpTKGYCReAJ/5wfUNrcgw24MkbCsD3TC
AmE3ODqGscymphWkafQBlm3moReGgYXLQFcjx7tbPut9GGiFAMXIf8YSvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2pIfBzwuIlO4T0GgwbxS/JwnHjMB8GA1UdIwQY
MBaAFINgiFEgIyjc5fwBv53SklIFMNn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMt
Yzc1NmFlMDFmYThhLzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80NTM1NDItMDhiMi00Mzk5LWJjNWMtYzc1NmFlMDFmYThh
LzEvZzJDSVVTQWpLTnpsX0FHX25kS1NVZ1V3MmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqptQqWng
zop8qSDNXBgNH/2VYVeGRnfAMaIoVrPcV7dUnhGygg9S0hFXoQSS1zMYg4Ev9bJ7
iG3o7YiX8FusmvxVSvEEOHNNDespIeNDWo39JlF9Knv3uR3QZCidGz0mNLXPSz68
Z//RWI+v6VJgVlgjQDBEF4tVhN95a9pzwTp5Jzk47gjmoQxnImdiahqBI0p1f0Qj
0VKkreP/Zr1RHG/owPaCgP2428FHtcN4fRGpYsZRy/ySUe7kcfe1m41gziNG4c89
ovIFa/uR2s35VqhbMFDuscnXHxdrpulfvUAunQk9uXdu/flDvYmd46zk87mOh/sn
jy9TJ6Xko6rnLQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:41:36 2025 by rpki-client