
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File: G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier: trGtck1ht8QnS/GJwO9xT7bxgaZh3uyN8bl2WvFOn8Y=
Subject key identifier: 29:0B:CE:26:EC:39:E5:D7:91:2B:FD:F6:59:88:EB:13:B3:12:00:BC
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer: /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial: 0198820B6B1A034644B6B02F1BFF958E78A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number: 10BE
Signing time: Thu 07 Aug 2025 01:00:43 +0000
Manifest this update: Thu 07 Aug 2025 01:00:43 +0000
Manifest next update: Fri 08 Aug 2025 01:00:43 +0000
Files and hashes: 1: BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (hash: /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=)
2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: vSyDokbPbv16tRtmOeG15UKEFs8Jq2L5YNXUwx8kxHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:6b:1a:03:46:44:b6:b0:2f:1b:ff:95:8e:78:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Validity
Not Before: Aug 7 01:00:43 2025 GMT
Not After : Aug 8 01:00:43 2025 GMT
Subject: CN=290bce26ec39e5d7912bfdf65988eb13b31200bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:ac:46:dd:6f:93:89:6b:aa:34:e9:90:ad:
7d:03:de:77:c9:79:93:99:81:0d:7d:13:14:a7:bc:
36:df:57:64:2d:4f:eb:d8:25:04:ac:30:7b:34:c3:
d0:8d:a9:8d:f3:f4:fb:1e:35:f5:7b:2d:c1:9a:4f:
3e:87:64:ec:ed:eb:05:0b:40:cb:98:b3:04:85:43:
2f:26:7d:38:df:09:ec:aa:a6:69:58:c1:9a:da:5d:
b7:15:27:30:b7:0d:a7:17:44:ed:9a:97:7e:11:65:
a0:ee:73:1a:b8:43:ea:30:66:ac:48:f6:1f:87:1a:
2b:9b:d9:b4:3e:22:33:7f:96:fe:d4:92:82:0e:1f:
e0:9e:a9:ca:74:12:92:5a:50:bc:0f:37:ce:b1:f5:
70:57:7b:52:9e:5b:62:ec:43:e5:0a:c1:4f:2d:07:
99:f6:4b:f3:f6:c8:08:d3:19:3c:5c:32:e3:96:4b:
69:59:42:2a:f1:e6:fc:ef:ad:65:44:73:06:46:fa:
98:84:42:43:46:52:18:61:25:e5:22:79:e9:60:9c:
84:66:99:fc:0c:2a:94:c6:38:19:18:34:6e:e5:b7:
ad:aa:c0:a8:5c:67:d7:ab:d0:c1:c5:ca:4a:f2:22:
d4:c3:26:eb:3b:ae:97:95:cc:69:db:b7:04:11:71:
48:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0B:CE:26:EC:39:E5:D7:91:2B:FD:F6:59:88:EB:13:B3:12:00:BC
X509v3 Authority Key Identifier:
keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:04:01:b8:91:c6:1e:67:d5:00:b0:69:72:86:d9:72:ad:ed:
bb:04:4e:f3:f1:b1:cb:33:f8:31:82:0f:21:67:e5:f3:a8:e8:
b6:6c:3d:96:9d:fa:05:82:b0:a6:bb:49:63:aa:2a:3c:04:76:
8b:ad:d7:ea:6b:b3:5a:00:68:e5:86:0a:3f:6a:8f:6a:5b:bd:
7f:66:a1:74:4f:d4:05:60:56:fc:97:3e:15:24:75:07:68:c1:
c7:99:62:13:72:28:1f:40:52:e0:93:ce:3b:1e:95:99:dc:45:
ea:cb:bd:8b:2b:74:95:6d:bb:d9:43:c4:91:08:7a:73:c2:fb:
8f:d6:a5:b1:cf:b6:ea:87:b3:1f:50:b5:01:b9:fa:f6:20:34:
78:37:44:20:58:20:44:4f:82:10:99:1e:51:aa:0d:06:32:d6:
df:f5:c0:a6:07:a0:52:98:37:c8:67:a6:3a:29:a8:4d:1e:cd:
79:b6:2b:c5:74:4c:fa:3d:eb:d1:32:a0:4b:e7:60:06:b8:c5:
a4:f6:6c:46:26:2c:6b:64:44:9a:83:d2:60:eb:bb:f1:1e:53:
3e:83:71:01:80:62:dd:e5:81:92:cf:ba:92:0a:e1:1c:b5:02:
de:72:ae:a3:d2:0e:c1:4f:82:1f:15:ee:d0:69:a0:3b:b4:6f:
b7:ff:7d:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCC2saA0ZEtrAvG/+VjniiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmRlM2MxYjBjNzlmZmIyNzgyMmUwOTQ3ZmRjMzhlNTFm
Y2M1Y2EwHhcNMjUwODA3MDEwMDQzWhcNMjUwODA4MDEwMDQzWjAzMTEwLwYDVQQD
EygyOTBiY2UyNmVjMzllNWQ3OTEyYmZkZjY1OTg4ZWIxM2IzMTIwMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUqsRt1vk4lrqjTpkK19A953yXmT
mYENfRMUp7w231dkLU/r2CUErDB7NMPQjamN8/T7HjX1ey3Bmk8+h2Ts7esFC0DL
mLMEhUMvJn043wnsqqZpWMGa2l23FScwtw2nF0Ttmpd+EWWg7nMauEPqMGasSPYf
hxorm9m0PiIzf5b+1JKCDh/gnqnKdBKSWlC8DzfOsfVwV3tSnlti7EPlCsFPLQeZ
9kvz9sgI0xk8XDLjlktpWUIq8eb8761lRHMGRvqYhEJDRlIYYSXlInnpYJyEZpn8
DCqUxjgZGDRu5betqsCoXGfXq9DBxcpK8iLUwybrO66Xlcxp27cEEXFIFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkLzibsOeXXkSv99lmI6xOzEgC8MB8GA1UdIwQY
MBaAFBtt48Gwx5/7J4IuCUf9w45R/MXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzIzandiREhuX3NuZ2k0SlJfM0RqbEg4eGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNWU1NTctOGJlNS00ZjM5LTk1NjUt
ZDk5ZTA4Njg0NmI3LzEvRzIzandiREhuX3NuZ2k0SlJfM0RqbEg4eGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jNWU1NTctOGJlNS00ZjM5LTk1NjUtZDk5ZTA4Njg0NmI3
LzEvRzIzandiREhuX3NuZ2k0SlJfM0RqbEg4eGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAQBuJHG
HmfVALBpcobZcq3tuwRO8/GxyzP4MYIPIWfl86jotmw9lp36BYKwprtJY6oqPAR2
i63X6muzWgBo5YYKP2qPalu9f2ahdE/UBWBW/Jc+FSR1B2jBx5liE3IoH0BS4JPO
Ox6VmdxF6su9iyt0lW272UPEkQh6c8L7j9alsc+26oezH1C1Abn69iA0eDdEIFgg
RE+CEJkeUaoNBjLW3/XApgegUpg3yGemOimoTR7NebYrxXRM+j3r0TKgS+dgBrjF
pPZsRiYsa2REmoPSYOu78R5TPoNxAYBi3eWBks+6kgrhHLUC3nKuo9IOwU+CHxXu
0GmgO7Rvt/99GQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:53 2025 by rpki-client