Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: xoAcPkKwdKHhM0pb2l/0FQwslVC2BOZxyUxyj6h8sdc=
Subject key identifier: 46:32:70:FD:A9:25:F4:2D:8F:A0:57:E6:1A:BA:95:71:60:29:C1:B4
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 01988F22B40FDAF8397AB501508034672CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 14:01:12 +0000
Manifest this update: Sat 09 Aug 2025 14:01:12 +0000
Manifest next update: Sun 10 Aug 2025 14:01:12 +0000
Files and hashes: 1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: kB9p8F2AtRFnRmnvco16UCHL+B0Oy5n4QdBYz7uJ4X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:b4:0f:da:f8:39:7a:b5:01:50:80:34:67:2c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Aug 9 14:01:12 2025 GMT
Not After : Aug 10 14:01:12 2025 GMT
Subject: CN=463270fda925f42d8fa057e61aba95716029c1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:56:42:5d:9b:f3:6f:24:0b:30:16:8d:cb:
ba:3a:92:86:be:65:77:04:d9:c3:67:58:6e:c1:38:
cf:c9:e0:a9:41:e1:24:5b:bf:95:ed:60:ff:e9:b0:
90:fc:b5:7d:c7:76:72:6d:39:f7:f0:ea:6f:35:1d:
b1:7e:7b:7f:5a:87:7c:72:13:9c:8c:67:d9:2e:08:
93:81:de:e8:0b:74:14:c9:f9:b8:c3:87:e6:1e:7e:
c1:a2:8d:25:15:f7:81:07:e3:a5:9d:e8:0c:73:77:
0a:3e:84:2c:93:b4:89:dd:79:2f:36:f0:33:cb:2b:
bc:90:29:1d:72:32:f1:68:7c:60:00:31:3f:c5:93:
c8:3f:f9:2a:17:c9:67:67:48:60:cb:dd:69:3f:e8:
fd:88:71:85:f0:22:cd:b3:40:06:66:aa:25:82:5e:
78:c7:de:3e:4e:3c:22:db:96:43:2e:6e:9a:73:12:
f5:c1:09:a6:72:e9:9f:66:0c:f5:a9:7d:92:81:b9:
af:24:37:45:ce:15:ed:1a:4c:97:70:bd:c4:10:d7:
b8:64:99:0f:a5:04:57:d3:48:bb:1c:5f:33:29:49:
4e:0c:c1:ec:ec:5b:0b:dc:e0:85:d0:a6:a8:16:f1:
83:6f:1b:4f:28:bf:46:33:1b:6a:c8:57:17:d8:8a:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:32:70:FD:A9:25:F4:2D:8F:A0:57:E6:1A:BA:95:71:60:29:C1:B4
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:81:b5:00:dd:76:66:f1:48:49:8d:f0:27:6e:42:de:1c:40:
d9:b2:13:a0:c2:b1:51:5b:85:22:8f:05:db:ec:61:e4:f7:d0:
a0:2d:28:e4:af:20:d8:c8:e9:e1:c7:a3:61:1f:7e:5e:18:23:
00:ad:f7:90:bd:74:69:b0:e5:02:68:b1:fa:20:9b:a2:f8:5f:
aa:53:81:a1:96:a7:c7:35:36:48:c6:5e:ed:b6:35:01:09:44:
97:53:4c:e5:da:83:77:25:e4:5f:b6:ce:99:eb:28:32:d9:65:
5b:dc:b9:ff:54:a1:ba:b7:2d:05:16:f9:21:a9:76:65:94:55:
e9:39:7d:42:f4:b3:7c:d0:eb:db:60:04:0b:f9:1d:61:af:7b:
a8:00:56:81:2d:67:c1:30:f9:34:95:e0:5c:19:67:b9:a8:2f:
64:11:d4:64:34:5b:97:fe:5c:0f:b0:6c:a8:3f:47:f2:63:f2:
73:fe:8e:f8:5f:c3:5b:28:92:54:5d:30:24:c4:42:bb:36:21:
5a:25:be:39:3d:e0:5d:ed:c5:37:8c:1c:3a:26:55:ff:44:2c:
ac:d8:e6:29:a6:96:d4:d2:af:5c:90:4b:bc:0b:0c:87:af:e6:
62:21:64:7b:9c:3c:e1:76:8e:67:9e:e9:34:f5:02:e4:c1:71:
e3:bc:91:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPIrQP2vg5erUBUIA0ZyzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTBlMTA0MmJhZGQ4OGU5NmU2MzllYWEwYWQwMjMyODdl
YTUwN2YwHhcNMjUwODA5MTQwMTEyWhcNMjUwODEwMTQwMTEyWjAzMTEwLwYDVQQD
Eyg0NjMyNzBmZGE5MjVmNDJkOGZhMDU3ZTYxYWJhOTU3MTYwMjljMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSxWQl2b828kCzAWjcu6OpKGvmV3
BNnDZ1huwTjPyeCpQeEkW7+V7WD/6bCQ/LV9x3ZybTn38OpvNR2xfnt/Wod8chOc
jGfZLgiTgd7oC3QUyfm4w4fmHn7Boo0lFfeBB+OlnegMc3cKPoQsk7SJ3XkvNvAz
yyu8kCkdcjLxaHxgADE/xZPIP/kqF8lnZ0hgy91pP+j9iHGF8CLNs0AGZqolgl54
x94+Tjwi25ZDLm6acxL1wQmmcumfZgz1qX2SgbmvJDdFzhXtGkyXcL3EENe4ZJkP
pQRX00i7HF8zKUlODMHs7FsL3OCF0KaoFvGDbxtPKL9GMxtqyFcX2Ipx7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYycP2pJfQtj6BX5hq6lXFgKcG0MB8GA1UdIwQY
MBaAFIOQ4QQrrdiOluY56qCtAjKH6lB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYt
NDlmYTU4ZmVkZmYzLzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYtNDlmYTU4ZmVkZmYz
LzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4G1AN12
ZvFISY3wJ25C3hxA2bIToMKxUVuFIo8F2+xh5PfQoC0o5K8g2Mjp4cejYR9+Xhgj
AK33kL10abDlAmix+iCbovhfqlOBoZanxzU2SMZe7bY1AQlEl1NM5dqDdyXkX7bO
mesoMtllW9y5/1ShurctBRb5Ial2ZZRV6Tl9QvSzfNDr22AEC/kdYa97qABWgS1n
wTD5NJXgXBlnuagvZBHUZDRbl/5cD7BsqD9H8mPyc/6O+F/DWyiSVF0wJMRCuzYh
WiW+OT3gXe3FN4wcOiZV/0QsrNjmKaaW1NKvXJBLvAsMh6/mYiFke5w84XaOZ57p
NPUC5MFx47yRPA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:29 2025 by rpki-client