Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: Y/PVBWVLSaELsg17tNafvs07wrZxaz+EEUGWHGFlKiA=
Subject key identifier: 0C:BC:B9:3F:E7:C0:10:6B:64:05:52:B5:C2:02:81:53:8C:F9:92:11
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 01976F2C3479C5785B5D9DDD0246839EE82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 02B8
Signing time: Sat 14 Jun 2025 16:00:57 +0000
Manifest this update: Sat 14 Jun 2025 16:00:57 +0000
Manifest next update: Sun 15 Jun 2025 16:00:57 +0000
Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: EG60hpsOVqIo6uxDqwWfi8+MZeBE8yqOFEyQkBj1hMs=)
2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=)
3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:34:79:c5:78:5b:5d:9d:dd:02:46:83:9e:e8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Jun 14 16:00:57 2025 GMT
Not After : Jun 15 16:00:57 2025 GMT
Subject: CN=0cbcb93fe7c0106b640552b5c20281538cf99211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:5b:8c:f5:42:86:00:43:a4:d7:14:e8:e9:
01:b3:12:87:3e:fe:b9:c9:bc:c7:6e:0d:97:5d:50:
8e:8c:88:28:3e:39:6f:be:78:c9:16:4b:0c:9b:75:
58:86:bc:54:13:66:d8:b8:5b:7c:8a:f7:b8:96:27:
bc:9a:61:d8:99:56:6d:88:41:6b:92:3e:02:a9:09:
cf:d0:89:f7:c8:ac:a4:98:e3:61:6d:8e:ed:d0:90:
08:c2:db:d9:f2:65:66:b9:5e:6a:b8:f3:82:f7:ce:
82:28:86:83:b4:21:34:1f:03:bd:18:0b:5b:80:fe:
86:d3:4c:98:84:60:aa:71:fc:74:70:e1:eb:b0:b4:
23:b4:92:9e:e9:e4:2e:ec:21:d8:89:3d:dc:70:f5:
c3:39:17:07:3a:c3:c3:12:67:b7:c8:f9:d7:16:26:
0a:02:a5:cb:bd:84:9d:06:ca:4e:01:71:8f:b3:e5:
04:eb:76:03:d6:4b:f0:20:45:2e:96:46:57:61:17:
6a:7f:75:02:de:f2:1d:cc:ea:20:1a:6b:f3:ef:8e:
4d:fc:1f:d1:ea:df:f8:44:1a:30:b1:a9:18:83:d1:
57:6e:f4:6a:d3:9b:0c:a7:b2:8a:7a:f8:44:ba:7d:
10:67:7b:bb:29:cd:55:9a:5e:3c:21:70:1f:e4:16:
ca:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BC:B9:3F:E7:C0:10:6B:64:05:52:B5:C2:02:81:53:8C:F9:92:11
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:21:fc:f5:ea:a5:af:4c:be:40:94:d2:be:95:2b:46:9f:00:
36:18:b3:ea:f7:59:ff:99:24:ba:be:ab:bc:57:75:44:d3:79:
bc:d5:24:6e:e6:8e:83:6f:71:34:48:ec:2a:93:3d:c0:53:76:
6d:42:8c:c3:de:5a:75:11:9e:ed:6e:79:68:bd:54:43:f4:4e:
c3:73:ae:9d:3c:eb:31:33:55:fb:bd:75:11:6e:93:85:3c:45:
a7:0c:9b:6e:49:59:aa:34:93:03:20:05:ee:30:8f:9f:a5:cf:
c6:73:9b:ad:fa:df:d1:3a:9d:3e:15:1b:cd:f3:53:8e:d4:47:
84:48:7d:94:63:66:04:85:bc:ed:0a:e9:2e:2d:aa:ef:58:dc:
ac:55:e7:01:69:44:a7:4d:ec:87:92:4a:a9:2d:5c:d7:61:19:
e6:54:8a:7f:ab:03:47:96:c3:35:81:4b:a0:be:da:ca:94:de:
a4:fc:db:7d:b0:0b:aa:be:04:52:44:79:81:cb:6f:06:72:49:
1e:89:70:ba:27:1a:22:0c:08:13:3e:22:0d:6c:ec:cc:a0:d6:
f5:4a:cc:f9:0b:d5:3d:1f:d8:7f:d8:90:52:a2:ea:44:11:3d:
3a:a1:16:35:13:80:6c:fe:8c:71:f4:7b:55:2a:c9:74:ef:40:
10:89:46:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLDR5xXhbXZ3dAkaDnugtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YTYwNDZlMzdjN2UyMDc1YjQxZDZmZWY3MGQyMzEyMzAz
YzVmMzkwHhcNMjUwNjE0MTYwMDU3WhcNMjUwNjE1MTYwMDU3WjAzMTEwLwYDVQQD
EygwY2JjYjkzZmU3YzAxMDZiNjQwNTUyYjVjMjAyODE1MzhjZjk5MjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fxbjPVChgBDpNcU6OkBsxKHPv65
ybzHbg2XXVCOjIgoPjlvvnjJFksMm3VYhrxUE2bYuFt8ive4lie8mmHYmVZtiEFr
kj4CqQnP0In3yKykmONhbY7t0JAIwtvZ8mVmuV5quPOC986CKIaDtCE0HwO9GAtb
gP6G00yYhGCqcfx0cOHrsLQjtJKe6eQu7CHYiT3ccPXDORcHOsPDEme3yPnXFiYK
AqXLvYSdBspOAXGPs+UE63YD1kvwIEUulkZXYRdqf3UC3vIdzOogGmvz745N/B/R
6t/4RBowsakYg9FXbvRq05sMp7KKevhEun0QZ3u7Kc1Vml48IXAf5BbK0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAy8uT/nwBBrZAVStcICgVOM+ZIRMB8GA1UdIwQY
MBaAFBmmBG43x+IHW0HW/vcNIxIwPF85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQt
M2ZlYzU4NjE0YzRiLzEvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQtM2ZlYzU4NjE0YzRi
LzEvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSH89eql
r0y+QJTSvpUrRp8ANhiz6vdZ/5kkur6rvFd1RNN5vNUkbuaOg29xNEjsKpM9wFN2
bUKMw95adRGe7W55aL1UQ/ROw3OunTzrMTNV+711EW6ThTxFpwybbklZqjSTAyAF
7jCPn6XPxnObrfrf0TqdPhUbzfNTjtRHhEh9lGNmBIW87QrpLi2q71jcrFXnAWlE
p03sh5JKqS1c12EZ5lSKf6sDR5bDNYFLoL7aypTepPzbfbALqr4EUkR5gctvBnJJ
HolwuicaIgwIEz4iDWzszKDW9UrM+QvVPR/Yf9iQUqLqRBE9OqEWNROAbP6McfR7
VSrJdO9AEIlGew==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:57:31 2025 by rpki-client