Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json)
Hash identifier: VtRlcDDNRP2aYftwTvHcq3MZcNMxrJoUPwwZ/oBTOPA=
Subject key identifier: 42:7F:2C:7E:20:C7:29:E4:4B:BD:B1:C3:CB:20:B8:F7:18:09:33:F4
Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Certificate serial: 01976929AF0A7B929768A6A4FD08844F908B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
Manifest number: 10A5
Signing time: Fri 13 Jun 2025 12:00:28 +0000
Manifest this update: Fri 13 Jun 2025 12:00:28 +0000
Manifest next update: Sat 14 Jun 2025 12:00:28 +0000
Files and hashes: 1: W3rPvUkflCFuxF0ug4dEXW6S2Kc.roa (hash: 3G2s7uZotQeaUTGQLu0pJAmRVfSsV9ARqhmMaAPkMDY=)
2: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: 5uPt4kUhNd1ero0BPC5s6SlKQVgFjkjA1YP0o58EaR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:af:0a:7b:92:97:68:a6:a4:fd:08:84:4f:90:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Validity
Not Before: Jun 13 12:00:28 2025 GMT
Not After : Jun 14 12:00:28 2025 GMT
Subject: CN=427f2c7e20c729e44bbdb1c3cb20b8f7180933f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ff:ca:96:d3:9d:9c:c0:e7:ee:f3:4d:68:36:
5c:5f:0a:ac:a5:af:75:fd:57:e4:a6:ca:05:2d:14:
0f:55:54:8a:b1:55:a1:f3:2f:9c:d5:b1:75:fe:c2:
cb:84:5a:2f:19:85:97:42:23:f2:8f:26:35:23:3b:
ee:5f:21:c3:de:eb:5a:dd:10:9d:cf:3e:fa:81:4f:
59:55:34:09:e0:03:e7:f9:04:54:8a:c3:5d:89:90:
e2:ae:60:cd:ea:fb:c0:82:df:ef:3f:9c:fe:58:f1:
3a:6c:a9:13:b4:04:d7:2f:19:0d:46:23:b3:c3:4f:
4c:a3:84:6e:81:f2:ec:e5:61:e0:dc:6f:b1:18:59:
f1:23:45:27:46:3d:f6:c7:c5:03:5a:69:61:a1:c4:
59:75:7d:4f:99:54:84:f3:e0:12:72:ac:70:5c:65:
c4:62:62:d7:79:a0:3c:e2:ac:68:0c:9a:73:0b:cd:
91:ae:d5:da:59:5b:23:4b:4a:62:bc:b2:cb:1d:21:
eb:fe:9a:25:e1:a2:c4:97:21:d4:8b:96:a3:7a:c5:
0e:7e:0f:4e:c6:c1:ea:90:6c:50:f2:ce:ff:94:e8:
0f:64:61:6d:8e:51:c2:de:b8:c7:89:87:7a:af:cb:
25:ce:a5:a6:31:62:28:76:48:7b:2d:e1:2d:2f:5e:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7F:2C:7E:20:C7:29:E4:4B:BD:B1:C3:CB:20:B8:F7:18:09:33:F4
X509v3 Authority Key Identifier:
keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:18:85:f2:9e:45:70:37:d1:a2:9b:f0:f6:b5:32:5b:6c:5d:
86:a9:44:9e:d1:fc:74:0a:48:45:25:6f:66:41:64:13:37:de:
92:f8:15:d3:b1:4a:f6:62:36:4a:71:e1:ca:c2:9c:bb:52:a9:
dd:a9:c7:89:8c:6a:9c:b7:5e:9d:43:02:a9:dc:8a:fe:a7:28:
59:35:01:39:d4:c6:68:96:05:49:b7:78:64:f7:83:18:45:68:
e0:67:8d:7e:0d:9f:e1:66:de:4b:be:96:86:eb:20:19:29:6c:
19:dd:9d:0c:41:55:d3:59:6b:85:3b:1a:96:90:38:f1:45:e7:
76:90:98:20:6c:38:8a:22:20:b4:f6:93:dc:24:d9:6c:22:16:
3b:75:e9:c6:78:bc:28:4f:b5:1a:41:8f:d6:5d:f8:9c:a0:b8:
4c:4e:28:cd:a6:75:f4:4b:4a:87:b5:6a:7d:96:64:ab:45:78:
3e:b4:a7:ff:1a:46:83:82:b4:bd:e0:47:8b:bb:d6:48:12:bd:
d2:10:49:90:6b:b3:f3:15:51:d4:79:85:87:20:53:f2:59:6a:
d3:39:5e:5c:c6:09:36:8c:71:bb:25:60:1f:35:eb:9e:35:59:
bb:91:54:1f:96:d5:30:b8:20:97:60:0e:b0:b8:88:00:6e:cd:
2d:61:df:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKa8Ke5KXaKak/QiET5CLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOGVjMzk0MjgxM2QzZjM1MzZjMTI3ZTFhODIxYmZiZWY2
ZGIyYTQwHhcNMjUwNjEzMTIwMDI4WhcNMjUwNjE0MTIwMDI4WjAzMTEwLwYDVQQD
Eyg0MjdmMmM3ZTIwYzcyOWU0NGJiZGIxYzNjYjIwYjhmNzE4MDkzM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f/KltOdnMDn7vNNaDZcXwqspa91
/VfkpsoFLRQPVVSKsVWh8y+c1bF1/sLLhFovGYWXQiPyjyY1IzvuXyHD3uta3RCd
zz76gU9ZVTQJ4APn+QRUisNdiZDirmDN6vvAgt/vP5z+WPE6bKkTtATXLxkNRiOz
w09Mo4RugfLs5WHg3G+xGFnxI0UnRj32x8UDWmlhocRZdX1PmVSE8+AScqxwXGXE
YmLXeaA84qxoDJpzC82RrtXaWVsjS0pivLLLHSHr/pol4aLElyHUi5ajesUOfg9O
xsHqkGxQ8s7/lOgPZGFtjlHC3rjHiYd6r8slzqWmMWIodkh7LeEtL15kXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJ/LH4gxynkS72xw8sguPcYCTP0MB8GA1UdIwQY
MBaAFIOOw5QoE9PzU2wSfhqCG/vvbbKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wYzRiMTYtNmI5NC00MDgwLTkxNjUt
Yjg1MzU2N2RhMGVhLzEvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wYzRiMTYtNmI5NC00MDgwLTkxNjUtYjg1MzU2N2RhMGVh
LzEvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRiF8p5F
cDfRopvw9rUyW2xdhqlEntH8dApIRSVvZkFkEzfekvgV07FK9mI2SnHhysKcu1Kp
3anHiYxqnLdenUMCqdyK/qcoWTUBOdTGaJYFSbd4ZPeDGEVo4GeNfg2f4WbeS76W
husgGSlsGd2dDEFV01lrhTsalpA48UXndpCYIGw4iiIgtPaT3CTZbCIWO3Xpxni8
KE+1GkGP1l34nKC4TE4ozaZ19EtKh7VqfZZkq0V4PrSn/xpGg4K0veBHi7vWSBK9
0hBJkGuz8xVR1HmFhyBT8llq0zleXMYJNoxxuyVgHzXrnjVZu5FUH5bVMLggl2AO
sLiIAG7NLWHfSg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:52:25 2025 by rpki-client