Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: 6SF7ybPgyWUUC6U2S2gXynYz+GTWYhmUovwjktZIt0Y=
Subject key identifier: 70:0E:DB:AD:D2:23:E2:CA:5F:13:2B:2C:20:D6:D3:E2:F8:71:DB:28
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 01978A34D7A04C96E85215ACEB014C9370F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 15A0
Signing time: Thu 19 Jun 2025 22:00:08 +0000
Manifest this update: Thu 19 Jun 2025 22:00:08 +0000
Manifest next update: Fri 20 Jun 2025 22:00:08 +0000
Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: jGfsRBCB2wcbwAx91qW4NdmBwjNZH3ucWfzLem3QK5U=)
3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:34:d7:a0:4c:96:e8:52:15:ac:eb:01:4c:93:70:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Jun 19 22:00:08 2025 GMT
Not After : Jun 20 22:00:08 2025 GMT
Subject: CN=700edbadd223e2ca5f132b2c20d6d3e2f871db28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:db:fa:7c:28:e8:2c:b3:06:1d:dd:59:52:
15:99:3c:ef:b8:6c:7f:2d:5a:78:0d:0f:bc:d2:45:
d3:cd:66:88:cf:5b:28:3b:8f:88:cf:e6:4a:fe:cf:
1f:b8:90:ec:21:b4:de:7f:21:29:ec:35:bb:03:35:
0d:c9:60:85:c5:5d:02:6a:81:22:dd:60:81:be:14:
eb:26:b5:dc:29:c2:d1:c1:44:60:60:ad:0c:ac:39:
75:72:4e:25:c0:12:b1:84:4f:90:56:01:03:11:b4:
4c:37:82:ab:3e:33:d3:72:f2:f5:a8:ca:40:ec:0f:
ce:97:d1:41:64:f8:f7:f5:5b:b7:32:94:26:9c:15:
5b:8c:f7:ef:3e:55:57:a3:2c:68:12:8c:dd:e8:66:
d2:26:37:d5:a7:33:5b:d2:7c:f5:d3:e6:a2:f0:89:
af:3b:61:58:1e:32:67:aa:9f:27:0c:b7:02:50:b1:
1e:87:4c:5c:27:71:ff:cb:70:4e:4e:b2:d1:a0:fd:
93:0d:5d:49:ad:f7:71:09:94:b3:3b:ac:56:74:21:
03:4c:e3:ec:78:02:09:5b:c4:a6:77:ad:37:08:4f:
96:94:fe:3b:ae:d2:a8:a1:68:3d:e3:92:8b:07:08:
85:1f:da:b2:ef:79:c2:1d:fb:6d:8b:50:88:a8:27:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0E:DB:AD:D2:23:E2:CA:5F:13:2B:2C:20:D6:D3:E2:F8:71:DB:28
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4c:fe:c6:f0:84:ed:0f:0d:7b:26:de:77:b2:a1:b8:a1:5a:
a3:20:31:5c:0d:ff:04:60:33:8d:dd:77:f7:6a:1f:3f:39:47:
9f:c7:45:77:c0:fb:01:7b:bc:3d:9f:06:ce:77:25:06:58:d7:
50:39:68:d2:be:6d:f6:69:8f:7b:9d:e9:96:e0:8c:02:e1:70:
35:94:bd:33:73:13:39:4e:3f:aa:90:e2:98:b9:f3:46:68:fa:
62:fb:19:28:1f:56:00:47:e2:0c:36:41:d5:9c:c6:d1:89:c5:
0a:c8:7c:cc:ee:49:47:c2:87:bd:c4:70:6b:51:d5:8b:98:eb:
b1:28:a5:aa:26:78:8b:28:bc:b4:d9:74:5e:af:8e:c3:d3:4c:
02:92:84:ea:60:df:09:3c:eb:e4:79:af:86:1c:64:81:1b:e6:
51:c1:b7:34:00:e8:a5:13:25:d1:dd:d5:59:85:b6:6a:02:e5:
ee:6b:f4:86:a4:1a:14:63:09:db:0c:0b:b0:4d:8b:e3:ea:e6:
83:a7:c8:b9:f7:9b:1b:a6:4c:73:64:f3:79:64:d4:0b:dd:01:
98:97:6a:2b:dc:1c:e4:9f:8a:5a:52:a8:17:db:e1:3c:ef:fb:
cf:02:04:ce:83:91:2c:28:07:99:ae:b7:92:f1:c6:c2:b2:7a:
c1:1b:0b:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeKNNegTJboUhWs6wFMk3D3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjg2NTYxMjYxOTgzNzNkMDc4ODZiZjRhYjhmYjA2Yjkw
MDY3ODAwHhcNMjUwNjE5MjIwMDA4WhcNMjUwNjIwMjIwMDA4WjAzMTEwLwYDVQQD
Eyg3MDBlZGJhZGQyMjNlMmNhNWYxMzJiMmMyMGQ2ZDNlMmY4NzFkYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuzb+nwo6CyzBh3dWVIVmTzvuGx/
LVp4DQ+80kXTzWaIz1soO4+Iz+ZK/s8fuJDsIbTefyEp7DW7AzUNyWCFxV0CaoEi
3WCBvhTrJrXcKcLRwURgYK0MrDl1ck4lwBKxhE+QVgEDEbRMN4KrPjPTcvL1qMpA
7A/Ol9FBZPj39Vu3MpQmnBVbjPfvPlVXoyxoEozd6GbSJjfVpzNb0nz10+ai8Imv
O2FYHjJnqp8nDLcCULEeh0xcJ3H/y3BOTrLRoP2TDV1JrfdxCZSzO6xWdCEDTOPs
eAIJW8Smd603CE+WlP47rtKooWg945KLBwiFH9qy73nCHftti1CIqCeXZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAO263SI+LKXxMrLCDW0+L4cdsoMB8GA1UdIwQY
MBaAFBtoZWEmGYNz0HiGv0q4+wa5AGeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODIt
MjM5ODcwNGFiNTBjLzEvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81MzEwMGYtMWJiMy00MjE5LTljODItMjM5ODcwNGFiNTBj
LzEvRzJobFlTWVpnM1BRZUlhX1NyajdCcmtBWjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUz+xvCE
7Q8Neybed7KhuKFaoyAxXA3/BGAzjd1392ofPzlHn8dFd8D7AXu8PZ8GznclBljX
UDlo0r5t9mmPe53pluCMAuFwNZS9M3MTOU4/qpDimLnzRmj6YvsZKB9WAEfiDDZB
1ZzG0YnFCsh8zO5JR8KHvcRwa1HVi5jrsSilqiZ4iyi8tNl0Xq+Ow9NMApKE6mDf
CTzr5HmvhhxkgRvmUcG3NADopRMl0d3VWYW2agLl7mv0hqQaFGMJ2wwLsE2L4+rm
g6fIufebG6ZMc2TzeWTUC90BmJdqK9wc5J+KWlKoF9vhPO/7zwIEzoORLCgHma63
kvHGwrJ6wRsLFA==
-----END CERTIFICATE-----
Generated at Fri Jun 20 03:02:19 2025 by rpki-client