Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier: PBwqiJKnxunWuR2I+HTkRVLPQZH73tFVgcyW48a8TVA=
Subject key identifier: 6A:66:8B:AC:6E:60:0A:34:2F:76:70:11:64:0D:35:D4:FB:32:29:99
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 019769CE8FC8A3FBFA3D5265BDCC7233A6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number: 1594
Signing time: Fri 13 Jun 2025 15:00:34 +0000
Manifest this update: Fri 13 Jun 2025 15:00:34 +0000
Manifest next update: Sat 14 Jun 2025 15:00:34 +0000
Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=)
2: bTDx6BY2_bieAYAIiAFgdyKIF9k.roa (hash: qCwMntOeFKqowJO7prWM5i0O+TccBmu2GDJdiZbI22w=)
3: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: BVg34+PaX/KCegKxjrfsl+xR2D5Yi7PUH+s0/Uo5eP8=)
4: kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa (hash: eW1HiHgHjju0NsKcsTSvzT72THKILOyyGeew75G0SSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:8f:c8:a3:fb:fa:3d:52:65:bd:cc:72:33:a6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Jun 13 15:00:34 2025 GMT
Not After : Jun 14 15:00:34 2025 GMT
Subject: CN=6a668bac6e600a342f767011640d35d4fb322999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:a9:6a:ab:de:9c:10:87:15:0f:74:7f:f7:
04:c9:f2:e5:3e:3c:93:66:05:fd:30:9b:26:36:79:
9f:c0:d9:91:b3:9e:43:35:5f:0b:ab:67:b7:48:d1:
30:04:c4:70:27:4d:5d:9e:95:25:25:5e:9c:06:41:
3c:a4:75:2c:c2:0d:0b:9b:32:3c:ec:53:f0:78:82:
55:78:1b:d3:3c:1f:70:95:3e:77:56:36:55:76:45:
00:fe:b4:ee:88:79:00:d7:3c:fb:32:61:80:31:a6:
4b:ec:b9:d3:21:9c:b4:a4:ac:9a:c1:22:a8:94:5f:
6a:b2:a6:fe:ff:5b:34:b4:92:25:97:19:60:11:97:
5a:ec:e0:15:16:0c:a9:82:a1:24:be:55:15:bf:20:
10:b6:85:07:a5:a2:e2:13:34:4a:d5:9f:b4:2a:37:
36:3a:7c:0e:c2:e9:93:e1:fb:dd:90:6c:57:23:9e:
34:11:a9:5f:70:d4:91:4f:76:d0:64:3a:9f:16:3e:
82:46:f8:66:2d:fc:a2:e3:31:4a:1f:2c:1c:52:00:
d9:34:24:69:8a:99:3f:2a:09:fc:ed:ef:23:c9:d1:
e5:03:a1:38:cf:6b:6c:10:9b:66:99:b3:1b:6f:66:
d3:1e:1e:87:4e:e4:1f:f2:a2:23:60:f8:1d:4a:0f:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:66:8B:AC:6E:60:0A:34:2F:76:70:11:64:0D:35:D4:FB:32:29:99
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:68:b2:e2:3e:6e:03:4d:73:be:c2:c3:19:c1:a7:e0:cc:04:
91:3d:ec:50:16:11:79:ad:d1:73:98:43:9d:31:d9:30:43:de:
12:7e:f9:29:94:c5:43:27:6e:05:a1:f8:2f:29:66:89:d4:d6:
38:56:59:ea:95:ae:0f:2d:df:d8:d9:e8:d2:21:d6:b1:fc:29:
9d:3c:01:d8:a5:c5:98:fc:f2:9e:5e:bf:bf:99:9f:04:f8:dd:
71:5b:75:6c:75:1e:9c:6c:6d:84:15:58:be:7b:1c:8d:61:e9:
10:77:fa:ea:06:a3:16:f7:24:4d:4d:ef:88:36:19:4d:23:f6:
18:43:9a:05:73:c9:2d:df:4e:5b:4c:04:ac:76:2b:fa:94:3e:
e0:f6:74:5a:5c:a1:6e:c8:0a:d6:d8:73:ef:68:89:90:f9:23:
11:d0:dc:47:0c:3b:ba:e2:d5:08:2f:1a:79:42:ca:1f:d1:23:
f6:61:70:b8:83:c1:2b:0d:8f:01:d4:04:38:ec:ea:00:cb:06:
36:7b:4c:c4:67:ef:91:ed:1b:15:00:ee:aa:5e:a4:b2:0a:e9:
80:df:92:c9:bc:2e:c0:6f:2c:4c:e3:31:65:16:45:6e:49:35:
93:ef:ea:84:44:5a:29:e5:4b:4b:e0:ef:cc:ac:87:eb:ea:f7:
40:27:9e:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzo/Io/v6PVJlvcxyM6b4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjA5ZjJiOWQyNDg2ZjM2ZThjZDI5ZGZhMmE3NTZhNDhk
ZTdjNTEwHhcNMjUwNjEzMTUwMDM0WhcNMjUwNjE0MTUwMDM0WjAzMTEwLwYDVQQD
Eyg2YTY2OGJhYzZlNjAwYTM0MmY3NjcwMTE2NDBkMzVkNGZiMzIyOTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14OpaqvenBCHFQ90f/cEyfLlPjyT
ZgX9MJsmNnmfwNmRs55DNV8Lq2e3SNEwBMRwJ01dnpUlJV6cBkE8pHUswg0LmzI8
7FPweIJVeBvTPB9wlT53VjZVdkUA/rTuiHkA1zz7MmGAMaZL7LnTIZy0pKyawSKo
lF9qsqb+/1s0tJIllxlgEZda7OAVFgypgqEkvlUVvyAQtoUHpaLiEzRK1Z+0Kjc2
OnwOwumT4fvdkGxXI540EalfcNSRT3bQZDqfFj6CRvhmLfyi4zFKHywcUgDZNCRp
ipk/Kgn87e8jydHlA6E4z2tsEJtmmbMbb2bTHh6HTuQf8qIjYPgdSg/5EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpmi6xuYAo0L3ZwEWQNNdT7MimZMB8GA1UdIwQY
MBaAFINgnyudJIbzbozSnfoqdWpI3nxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUt
NWU2MGY2ZGEyYjA5LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9kNmVjM2ItZTcxNy00YzNkLWIwYWUtNWU2MGY2ZGEyYjA5
LzEvZzJDZks1MGtodk51ak5LZC1pcDFha2plZkZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGiy4j5u
A01zvsLDGcGn4MwEkT3sUBYRea3Rc5hDnTHZMEPeEn75KZTFQyduBaH4LylmidTW
OFZZ6pWuDy3f2Nno0iHWsfwpnTwB2KXFmPzynl6/v5mfBPjdcVt1bHUenGxthBVY
vnscjWHpEHf66gajFvckTU3viDYZTSP2GEOaBXPJLd9OW0wErHYr+pQ+4PZ0Wlyh
bsgK1thz72iJkPkjEdDcRww7uuLVCC8aeULKH9Ej9mFwuIPBKw2PAdQEOOzqAMsG
NntMxGfvke0bFQDuql6ksgrpgN+SybwuwG8sTOMxZRZFbkk1k+/qhERaKeVLS+Dv
zKyH6+r3QCeeuQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:15 2025 by rpki-client