Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: jlMq0Eq4fjkGyEMIvw4Scz2FBz1zAzTr4I+aOKIuFjc=
Subject key identifier: 8A:21:7E:7E:E7:E3:C2:B2:A4:74:DA:3C:F5:2E:5B:E5:25:37:3E:8E
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 01976F9A35F72EAA3E0487E7BEC547AB5232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 1214
Signing time: Sat 14 Jun 2025 18:01:06 +0000
Manifest this update: Sat 14 Jun 2025 18:01:06 +0000
Manifest next update: Sun 15 Jun 2025 18:01:06 +0000
Files and hashes: 1: FpKpXAvwQ5eTmnpDjAybF20U0r8.roa (hash: rDfC3vqrlhOzRgHniKHIntRfI5mc/vDS+DS8eZGWJuQ=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: pQK8891MKamhgoVhNa0jt6+RfX82oIp5XGZQb/2lCNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:35:f7:2e:aa:3e:04:87:e7:be:c5:47:ab:52:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Jun 14 18:01:06 2025 GMT
Not After : Jun 15 18:01:06 2025 GMT
Subject: CN=8a217e7ee7e3c2b2a474da3cf52e5be525373e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:11:44:df:d0:5d:24:76:d3:dd:12:83:d9:
5a:65:4f:60:d7:cb:05:47:a8:bb:e5:64:11:ed:8c:
02:ec:a1:11:69:c1:a9:51:e6:5c:be:58:0d:a3:d5:
c5:25:3b:4b:2e:88:39:d3:53:cd:fa:06:a9:8c:49:
6d:f8:49:34:c7:b7:71:14:de:fe:7b:aa:46:80:3d:
f1:af:fb:57:6f:5e:00:4d:45:56:21:e4:2c:59:1c:
95:5a:7d:c9:4c:6b:32:96:1c:17:57:e6:0f:5e:06:
cf:f4:33:b9:e1:cf:ac:4a:cb:14:e2:dd:43:17:85:
76:58:79:df:ec:f1:83:1d:76:4e:3b:8e:d3:b0:42:
a4:d5:1a:ff:96:66:21:9a:b2:a0:6f:0a:a7:c7:ca:
63:66:24:5d:6c:f5:94:ff:14:12:21:c3:38:ab:0d:
18:7e:e4:1f:c1:28:30:ea:67:a7:7d:c0:6f:55:0d:
8e:42:af:19:d9:3a:bd:e5:c7:f3:5c:dd:a6:9c:d7:
af:6f:33:e8:97:91:5e:c7:75:eb:65:d9:08:f4:e7:
3c:a3:70:de:29:e9:15:75:ff:23:ed:7d:d8:55:61:
bd:e8:56:31:f5:6c:bb:fc:7b:48:0f:e1:64:bb:17:
11:2e:83:6e:71:19:2b:ad:f9:24:49:ac:c7:71:76:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:21:7E:7E:E7:E3:C2:B2:A4:74:DA:3C:F5:2E:5B:E5:25:37:3E:8E
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:35:b9:bd:fd:a7:c0:83:c9:1b:f9:00:19:d6:05:05:7c:79:
82:a4:a5:8e:df:70:ab:0e:2c:39:f7:47:10:77:bb:1b:45:49:
2c:3b:5c:68:25:b1:74:14:15:06:ee:18:4e:0d:65:f2:43:d7:
b3:51:97:88:24:4f:c4:32:b3:e7:6a:41:69:fc:4f:f3:d2:dc:
9d:b8:e6:0e:1f:9d:e1:44:8a:44:13:8a:93:7e:06:7b:38:ed:
09:6a:81:3a:5b:49:42:8f:69:6f:69:fd:87:94:44:80:f7:b0:
78:0f:fc:1a:3b:e0:59:9e:91:72:d8:80:15:8e:cf:84:e0:2c:
05:d0:16:7c:42:c5:9f:17:0a:fc:67:46:b4:e2:10:94:5a:49:
1c:ad:df:32:9d:0b:b3:5d:80:92:d2:44:51:73:eb:68:17:ee:
4f:ec:6d:24:09:51:35:4e:00:4f:50:2f:9f:39:f3:5d:42:39:
67:01:77:f0:e9:7e:d8:0f:d4:0b:a3:4c:52:d6:6d:dd:1e:c7:
68:73:07:b0:a5:79:97:21:c9:d7:ab:16:99:ee:02:27:c1:1c:
e1:74:2f:98:f8:74:21:85:c3:d2:b7:0a:78:b9:00:d0:08:22:
53:aa:c3:1e:83:89:25:92:4b:9e:51:0f:1b:85:b2:cb:2c:aa:
40:cb:0e:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmjX3Lqo+BIfnvsVHq1IyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmYwNzQ3NGYxMmY3YTMzZTVjMjFiYzJmZmJiMDc1YTE3
YmQxM2YwHhcNMjUwNjE0MTgwMTA2WhcNMjUwNjE1MTgwMTA2WjAzMTEwLwYDVQQD
Eyg4YTIxN2U3ZWU3ZTNjMmIyYTQ3NGRhM2NmNTJlNWJlNTI1MzczZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI0RRN/QXSR2090Sg9laZU9g18sF
R6i75WQR7YwC7KERacGpUeZcvlgNo9XFJTtLLog501PN+gapjElt+Ek0x7dxFN7+
e6pGgD3xr/tXb14ATUVWIeQsWRyVWn3JTGsylhwXV+YPXgbP9DO54c+sSssU4t1D
F4V2WHnf7PGDHXZOO47TsEKk1Rr/lmYhmrKgbwqnx8pjZiRdbPWU/xQSIcM4qw0Y
fuQfwSgw6menfcBvVQ2OQq8Z2Tq95cfzXN2mnNevbzPol5Fex3XrZdkI9Oc8o3De
KekVdf8j7X3YVWG96FYx9Wy7/HtID+FkuxcRLoNucRkrrfkkSazHcXbQowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIohfn7n48KypHTaPPUuW+UlNz6OMB8GA1UdIwQY
MBaAFBtvB0dPEvejPlwhvC/7sHWhe9E/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82NTUwMDYtNjI3NS00ZDI0LWIzZGIt
MDJjNDdiOWVhNDlkLzEvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82NTUwMDYtNjI3NS00ZDI0LWIzZGItMDJjNDdiOWVhNDlk
LzEvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzW5vf2n
wIPJG/kAGdYFBXx5gqSljt9wqw4sOfdHEHe7G0VJLDtcaCWxdBQVBu4YTg1l8kPX
s1GXiCRPxDKz52pBafxP89LcnbjmDh+d4USKRBOKk34GezjtCWqBOltJQo9pb2n9
h5REgPeweA/8GjvgWZ6RctiAFY7PhOAsBdAWfELFnxcK/GdGtOIQlFpJHK3fMp0L
s12AktJEUXPraBfuT+xtJAlRNU4AT1AvnznzXUI5ZwF38Ol+2A/UC6NMUtZt3R7H
aHMHsKV5lyHJ16sWme4CJ8Ec4XQvmPh0IYXD0rcKeLkA0AgiU6rDHoOJJZJLnlEP
G4WyyyyqQMsO4g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:34:46 2025 by rpki-client