Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: JE3mw0iS8iBpwKtJsMAK1u05LOZlQVkGWlBUhQUoIb4=
Subject key identifier: AB:2A:EE:4C:23:A6:90:46:CA:C0:64:D3:CA:9F:03:4E:89:C4:09:EB
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 01987E2E8295200873FF97009E4B8D1C519A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 12B6
Signing time: Wed 06 Aug 2025 07:00:33 +0000
Manifest this update: Wed 06 Aug 2025 07:00:33 +0000
Manifest next update: Thu 07 Aug 2025 07:00:33 +0000
Files and hashes: 1: O_Wh7DXILbeq2pJ7lbo670WPHcI.roa (hash: 9coM5+TGNwqDkXBfhIBTqYZ9wRzRhg/kPk42ppbDqL4=)
2: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: wi03pEqhYocfqVkX55HomfhHv8xTo50MNtoWmUn9fN0=)
3: wurW9HScl5J6v9_HgJ6iitJiiYY.roa (hash: M+hjHy8mpb8e2lyHR4XP7A/L1pzrBL572LaM0RnZ+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:82:95:20:08:73:ff:97:00:9e:4b:8d:1c:51:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Aug 6 07:00:33 2025 GMT
Not After : Aug 7 07:00:33 2025 GMT
Subject: CN=ab2aee4c23a69046cac064d3ca9f034e89c409eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:8a:cd:a3:8a:d7:3f:dd:37:d0:10:f5:26:
f1:21:56:45:97:11:90:c7:24:00:7f:56:e9:f8:26:
4b:da:d5:79:6d:1a:33:ab:29:b1:4f:d1:3d:71:53:
a1:42:ab:f3:42:d8:ae:5e:89:96:24:3d:f8:5d:4d:
e5:c0:da:4f:26:d8:4c:d6:84:4c:04:1a:85:a2:a4:
dd:36:ef:20:e6:50:df:da:ca:8b:58:b8:ac:e2:e2:
46:d4:12:84:32:96:e6:33:51:00:b7:01:af:c3:a4:
25:7e:48:01:7d:95:21:26:66:21:78:1a:43:24:31:
54:df:6f:20:89:da:b4:03:85:74:4c:d5:69:20:2c:
a8:51:a1:80:df:89:26:9a:a0:40:4c:92:bd:08:17:
9a:38:3b:8c:58:6d:83:3b:5e:ac:2b:36:a5:b5:6b:
5f:39:53:69:93:31:ae:ec:21:76:5e:e5:9f:6a:dc:
8f:1b:2c:65:d9:cf:1a:dc:41:6f:40:90:6c:61:df:
22:9c:6a:8d:f1:be:ae:ef:6c:60:8e:fa:c1:5e:b7:
55:5b:3d:d7:02:f2:89:c8:00:88:69:d9:d6:38:ed:
0b:17:a3:da:b8:7d:30:e9:91:f1:49:b6:d6:ed:b4:
77:72:5c:6b:22:f7:35:54:31:dd:ca:f9:01:b3:71:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2A:EE:4C:23:A6:90:46:CA:C0:64:D3:CA:9F:03:4E:89:C4:09:EB
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1f:3a:03:c8:d4:d9:ce:88:40:c7:97:27:31:83:dd:2f:83:
3d:a2:35:1d:c7:56:42:ac:45:54:11:dc:51:50:78:4f:01:e3:
1d:03:57:c5:e2:f9:c6:f0:6b:56:10:d0:85:76:d9:72:bd:9e:
ca:8c:f9:a8:f4:e1:18:3d:88:0c:53:6f:41:fa:b4:3a:3e:6e:
25:bb:45:c2:5b:f2:9e:88:5c:26:ed:eb:ad:ae:28:a2:4c:40:
8d:ea:0f:b2:d6:59:f4:1e:c6:95:89:2b:b5:93:ec:cb:a2:55:
42:35:0b:a6:40:f2:a5:62:58:04:26:cf:9c:b3:7b:32:38:e4:
b8:eb:94:55:34:f1:23:e4:9d:49:71:b2:49:a1:b8:86:1f:94:
c2:95:54:61:c4:1f:37:f2:36:b6:7b:96:81:75:8e:e1:d2:e7:
3f:06:9c:16:a1:6d:fa:43:59:7b:00:4b:f5:0c:5c:f2:94:57:
ca:67:5e:aa:1d:1d:52:af:a7:83:45:23:5e:ad:39:1a:42:37:
73:84:36:51:58:e1:dd:b1:b2:c6:5b:2a:9f:e8:d5:46:5e:ce:
c4:43:5e:41:92:2c:28:0e:69:ae:a6:ce:91:1c:ed:7d:55:e1:
88:08:b7:f7:25:80:80:91:88:00:5c:c5:7a:79:77:4b:c9:c6:
d0:2e:2a:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+LoKVIAhz/5cAnkuNHFGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmNlMzU1NjFmNTQxYmRhOTdlNzc3ZTY4NzlhMWQ3MDRl
N2I0MmYwHhcNMjUwODA2MDcwMDMzWhcNMjUwODA3MDcwMDMzWjAzMTEwLwYDVQQD
EyhhYjJhZWU0YzIzYTY5MDQ2Y2FjMDY0ZDNjYTlmMDM0ZTg5YzQwOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2WKzaOK1z/dN9AQ9SbxIVZFlxGQ
xyQAf1bp+CZL2tV5bRozqymxT9E9cVOhQqvzQtiuXomWJD34XU3lwNpPJthM1oRM
BBqFoqTdNu8g5lDf2sqLWLis4uJG1BKEMpbmM1EAtwGvw6QlfkgBfZUhJmYheBpD
JDFU328gidq0A4V0TNVpICyoUaGA34kmmqBATJK9CBeaODuMWG2DO16sKzaltWtf
OVNpkzGu7CF2XuWfatyPGyxl2c8a3EFvQJBsYd8inGqN8b6u72xgjvrBXrdVWz3X
AvKJyACIadnWOO0LF6PauH0w6ZHxSbbW7bR3clxrIvc1VDHdyvkBs3GMvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsq7kwjppBGysBk08qfA06JxAnrMB8GA1UdIwQY
MBaAFIO841Vh9UG9qX53fmh5odcE57QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMt
ZmQ4NjYwYzRmZDZlLzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMtZmQ4NjYwYzRmZDZl
LzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwB86A8jU
2c6IQMeXJzGD3S+DPaI1HcdWQqxFVBHcUVB4TwHjHQNXxeL5xvBrVhDQhXbZcr2e
yoz5qPThGD2IDFNvQfq0Oj5uJbtFwlvynohcJu3rra4ookxAjeoPstZZ9B7GlYkr
tZPsy6JVQjULpkDypWJYBCbPnLN7MjjkuOuUVTTxI+SdSXGySaG4hh+UwpVUYcQf
N/I2tnuWgXWO4dLnPwacFqFt+kNZewBL9Qxc8pRXymdeqh0dUq+ng0UjXq05GkI3
c4Q2UVjh3bGyxlsqn+jVRl7OxENeQZIsKA5prqbOkRztfVXhiAi39yWAgJGIAFzF
enl3S8nG0C4q5w==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:16 2025 by rpki-client