Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: zzCsXB9bcK6HtHkOQTOFyZSR+fNqBW1xjPEyYbUKk/c=
Subject key identifier: 9F:EF:7E:37:43:1C:8D:CD:10:88:1A:F0:9C:4B:9E:FE:4B:25:6B:5E
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 01976D06532AAE8368AB930C68B7819B603E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 06:00:20 +0000
Manifest this update: Sat 14 Jun 2025 06:00:20 +0000
Manifest next update: Sun 15 Jun 2025 06:00:20 +0000
Files and hashes: 1: Wka8U3x86jnATnb9jP1IM9JUg7Q.roa (hash: U3QbT6zi/lWoOslxKHpAgFLF1TaLlii47IIoTKw4FTY=)
2: elawQd6GCERPNU07ZCI-dli47NA.roa (hash: 0JYGGAHMRXtvzvfYfM6q/NrguHYhOFVdE7wB8JPPhJs=)
3: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: 6giyX35fwoI1WupLIXFry6HY6tUqpeGBNIlMQoVufAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:53:2a:ae:83:68:ab:93:0c:68:b7:81:9b:60:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Jun 14 06:00:20 2025 GMT
Not After : Jun 15 06:00:20 2025 GMT
Subject: CN=9fef7e37431c8dcd10881af09c4b9efe4b256b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:09:15:c2:da:7b:17:98:27:6a:8c:28:3e:
fc:e5:ce:db:30:06:8b:57:c8:73:64:e9:df:76:d3:
e9:e6:be:43:3c:b3:ae:7a:cc:14:fc:7a:bb:e0:8e:
7c:92:93:0a:b5:5d:76:1a:c1:e3:d1:e0:c2:be:60:
d2:5a:98:f6:4e:f6:d3:b4:c7:30:21:ab:6d:c8:67:
9c:70:e2:2d:96:7d:72:7e:74:13:1e:8c:d0:06:64:
9f:2b:60:fa:3c:91:4f:f9:f1:4b:91:16:57:b5:e2:
a5:74:5e:ab:ea:da:b3:32:25:33:ad:09:63:59:3f:
18:f7:9f:fd:d8:90:98:80:29:87:34:16:c2:f1:72:
f7:26:25:c6:0d:6d:28:ed:7d:89:3c:b7:fd:ca:21:
ea:b3:d9:37:08:3e:e6:11:16:9b:e9:a1:84:ba:b4:
73:6b:b5:3f:aa:0c:ed:84:d0:56:33:13:99:0f:f2:
22:47:e2:90:72:5f:cc:5d:33:94:26:ad:78:3a:59:
c1:14:41:28:b3:64:08:6b:6b:e0:d9:cc:a3:5e:94:
69:d2:23:ae:f6:d5:4a:a1:7c:0b:f9:ce:a2:af:ca:
cf:90:7e:33:6a:a3:16:b6:cb:e1:e0:89:46:12:4d:
7a:06:06:30:b8:3a:da:8c:59:96:23:bc:3a:6d:63:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EF:7E:37:43:1C:8D:CD:10:88:1A:F0:9C:4B:9E:FE:4B:25:6B:5E
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fd:e0:f1:01:ac:9b:8d:ad:e9:cb:a9:3d:73:d1:9a:5a:d0:
91:e6:8f:a6:a0:85:d0:08:6c:07:db:a2:07:50:6f:36:f5:93:
62:a4:fd:c5:ca:48:b0:f7:0f:1b:78:19:9b:fb:0c:a1:d4:19:
0b:c1:e8:c0:98:e7:0f:d9:31:f4:92:6b:5b:d5:a6:d5:24:b5:
af:ed:48:26:36:c5:d2:a7:b8:bd:c7:02:92:d2:0f:ce:21:37:
0a:a6:27:a8:bf:b9:ad:15:2d:c8:47:d4:b9:8d:ba:64:1d:6c:
40:14:02:1c:bc:52:8f:6e:72:97:94:74:a5:e7:f2:6c:89:b7:
78:27:1f:50:7c:9a:a5:7d:7a:02:22:a6:b8:dc:c2:bf:e8:90:
8c:65:a9:2a:86:8f:25:ef:34:3e:68:34:11:95:37:e0:9e:72:
88:28:e7:0b:82:86:12:eb:f5:dd:54:95:49:ca:8b:37:e3:8a:
59:ea:66:cc:00:68:e6:d9:e4:7a:f7:5e:39:61:1a:0e:9e:da:
8a:ab:6f:92:87:2e:a1:45:e6:34:df:fb:cd:16:63:02:69:d3:
22:7d:4d:f9:ad:20:99:47:77:f9:10:9d:be:98:21:26:56:20:
25:de:38:32:1b:ab:5e:55:f5:55:d9:70:fc:5f:0a:1e:55:ef:
a3:e4:73:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBlMqroNoq5MMaLeBm2A+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMmIzMGQ4OWIxYmNmZjY5OWY2NDFmODgwMjY5NDJkMTZh
NzJiY2MwHhcNMjUwNjE0MDYwMDIwWhcNMjUwNjE1MDYwMDIwWjAzMTEwLwYDVQQD
Eyg5ZmVmN2UzNzQzMWM4ZGNkMTA4ODFhZjA5YzRiOWVmZTRiMjU2YjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqYJFcLaexeYJ2qMKD785c7bMAaL
V8hzZOnfdtPp5r5DPLOueswU/Hq74I58kpMKtV12GsHj0eDCvmDSWpj2TvbTtMcw
IattyGeccOItln1yfnQTHozQBmSfK2D6PJFP+fFLkRZXteKldF6r6tqzMiUzrQlj
WT8Y95/92JCYgCmHNBbC8XL3JiXGDW0o7X2JPLf9yiHqs9k3CD7mERab6aGEurRz
a7U/qgzthNBWMxOZD/IiR+KQcl/MXTOUJq14OlnBFEEos2QIa2vg2cyjXpRp0iOu
9tVKoXwL+c6ir8rPkH4zaqMWtsvh4IlGEk16BgYwuDrajFmWI7w6bWPz8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/vfjdDHI3NEIga8JxLnv5LJWteMB8GA1UdIwQY
MBaAFIIrMNibG8/2mfZB+IAmlC0WpyvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEt
OTE0ZDVkYzUxOTdmLzEvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEtOTE0ZDVkYzUxOTdm
LzEvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/3g8QGs
m42t6cupPXPRmlrQkeaPpqCF0AhsB9uiB1BvNvWTYqT9xcpIsPcPG3gZm/sModQZ
C8HowJjnD9kx9JJrW9Wm1SS1r+1IJjbF0qe4vccCktIPziE3CqYnqL+5rRUtyEfU
uY26ZB1sQBQCHLxSj25yl5R0pefybIm3eCcfUHyapX16AiKmuNzCv+iQjGWpKoaP
Je80Pmg0EZU34J5yiCjnC4KGEuv13VSVScqLN+OKWepmzABo5tnkevdeOWEaDp7a
iqtvkocuoUXmNN/7zRZjAmnTIn1N+a0gmUd3+RCdvpghJlYgJd44MhurXlX1Vdlw
/F8KHlXvo+Rz3A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:41:48 2025 by rpki-client