Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
File: g-uiXEochs51okt254VYyS-KA3I.mft (raw, json)
Hash identifier: NQV7nShGKqABv+FSbegCp0XJCIpPTHD8saL9vlPdBc8=
Subject key identifier: C7:86:19:CF:D7:B1:88:1A:2A:FD:FA:3E:3C:B7:80:29:0A:76:BB:C6
Authority key identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
Certificate issuer: /CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Certificate serial: 019777C16A8E6A2F609CAE9E1600568A2688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
Manifest number: 08AE
Signing time: Mon 16 Jun 2025 08:00:53 +0000
Manifest this update: Mon 16 Jun 2025 08:00:53 +0000
Manifest next update: Tue 17 Jun 2025 08:00:53 +0000
Files and hashes: 1: aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa (hash: 4EzmrUgObdb+dIaJZNcvbs9ezqSEEasVfq7N+SyDkGw=)
2: g-uiXEochs51okt254VYyS-KA3I.crl (hash: nQeJrVJEFHjd+1sR+KlO+Ii9xuLxFrxSLUNsjbFmxms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:6a:8e:6a:2f:60:9c:ae:9e:16:00:56:8a:26:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Validity
Not Before: Jun 16 08:00:53 2025 GMT
Not After : Jun 17 08:00:53 2025 GMT
Subject: CN=c78619cfd7b1881a2afdfa3e3cb780290a76bbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:9b:7d:59:d4:62:3c:67:15:b3:de:e6:3e:
b4:bf:a4:24:89:b6:70:df:46:11:ee:80:bd:46:58:
1c:54:5f:af:84:b3:b9:f0:e2:39:2a:58:b9:e1:66:
f6:9e:90:19:6f:80:79:86:dd:50:6f:50:4f:3a:e9:
34:0e:3a:08:cb:e8:99:b0:48:7f:32:76:7f:9f:2c:
97:70:f4:c3:12:e8:70:8a:d1:42:58:af:09:cd:c3:
d8:c1:69:92:89:24:e2:29:ca:b6:40:64:f4:16:fb:
8d:a9:f3:a0:5a:e0:fb:c2:b3:26:a4:58:23:22:fd:
af:25:7a:f8:49:11:dc:e0:e0:0e:b1:1b:91:a4:a9:
98:10:ba:63:86:2e:a1:1a:ee:09:16:ac:a9:05:3a:
45:c7:8b:57:e4:77:62:d2:da:f5:20:dd:56:be:97:
9c:07:b3:90:92:a7:90:f8:35:83:b3:07:d3:1b:5c:
26:93:a8:18:66:dd:74:1b:75:36:fd:c7:f8:d1:fe:
ac:73:eb:e3:e5:89:7a:8b:da:b2:fe:77:09:e0:18:
24:ff:ba:c9:7f:f9:44:a1:ed:86:ae:74:4f:70:01:
f6:8b:ac:ae:7c:67:ba:f9:2b:e4:df:09:99:94:3e:
92:47:13:67:95:64:da:a9:17:97:74:8e:7b:0e:c4:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:86:19:CF:D7:B1:88:1A:2A:FD:FA:3E:3C:B7:80:29:0A:76:BB:C6
X509v3 Authority Key Identifier:
keyid:83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:49:b5:b4:67:5d:3d:c6:c6:12:b8:f1:ae:77:ab:52:39:77:
1f:cd:23:fe:65:b8:3c:26:6a:6a:b5:78:d8:1d:a9:45:14:30:
79:9b:01:12:57:3c:2a:ea:8c:7f:61:86:46:34:8c:2e:1f:ea:
7e:c7:c3:57:e9:d9:d2:8d:e3:c6:8f:30:b3:f3:7a:c7:66:d3:
91:8f:9b:41:f1:cc:eb:71:5e:d9:13:0b:ce:22:c4:7d:b4:41:
7a:31:6d:79:5b:27:57:84:50:6d:8d:17:05:0d:ac:14:c6:95:
94:c3:38:5f:d2:77:bf:e7:1a:b2:f5:e3:3a:41:60:45:95:b3:
37:71:62:eb:c4:91:63:86:64:26:22:4e:44:85:79:e3:16:02:
b8:15:26:b3:18:a4:03:b9:ae:3d:87:64:56:94:75:ba:2e:99:
50:0c:48:c0:c6:15:ea:d0:61:82:08:6e:8e:bb:a7:24:d1:3a:
bd:ad:b2:75:3d:56:f0:76:7c:63:fe:b1:18:76:76:24:73:28:
1a:69:b6:65:d5:1b:94:b9:aa:c2:87:64:61:d2:9f:ad:a0:3e:
85:fc:93:43:a6:36:e3:39:2c:58:98:ee:28:82:72:a7:b5:fe:
93:d1:c4:57:86:d5:9d:72:91:c3:23:99:52:c0:7f:a6:7b:10:
12:ce:b2:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3wWqOai9gnK6eFgBWiiaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZWJhMjVjNGExYzg2Y2U3NWEyNGI3NmU3ODU1OGM5MmY4
YTAzNzIwHhcNMjUwNjE2MDgwMDUzWhcNMjUwNjE3MDgwMDUzWjAzMTEwLwYDVQQD
EyhjNzg2MTljZmQ3YjE4ODFhMmFmZGZhM2UzY2I3ODAyOTBhNzZiYmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wCbfVnUYjxnFbPe5j60v6QkibZw
30YR7oC9RlgcVF+vhLO58OI5Kli54Wb2npAZb4B5ht1Qb1BPOuk0DjoIy+iZsEh/
MnZ/nyyXcPTDEuhwitFCWK8JzcPYwWmSiSTiKcq2QGT0FvuNqfOgWuD7wrMmpFgj
Iv2vJXr4SRHc4OAOsRuRpKmYELpjhi6hGu4JFqypBTpFx4tX5Hdi0tr1IN1Wvpec
B7OQkqeQ+DWDswfTG1wmk6gYZt10G3U2/cf40f6sc+vj5Yl6i9qy/ncJ4Bgk/7rJ
f/lEoe2GrnRPcAH2i6yufGe6+Svk3wmZlD6SRxNnlWTaqReXdI57DsROYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeGGc/XsYgaKv36Pjy3gCkKdrvGMB8GA1UdIwQY
MBaAFIProlxKHIbOdaJLdueFWMkvigNyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jNTYxMmQtZTgxYi00M2JlLWFlN2Mt
NTc3ZmFmODU1Mzk5LzEvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jNTYxMmQtZTgxYi00M2JlLWFlN2MtNTc3ZmFmODU1Mzk5
LzEvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0m1tGdd
PcbGErjxrnerUjl3H80j/mW4PCZqarV42B2pRRQweZsBElc8KuqMf2GGRjSMLh/q
fsfDV+nZ0o3jxo8ws/N6x2bTkY+bQfHM63Fe2RMLziLEfbRBejFteVsnV4RQbY0X
BQ2sFMaVlMM4X9J3v+casvXjOkFgRZWzN3Fi68SRY4ZkJiJORIV54xYCuBUmsxik
A7muPYdkVpR1ui6ZUAxIwMYV6tBhgghujrunJNE6va2ydT1W8HZ8Y/6xGHZ2JHMo
Gmm2ZdUblLmqwodkYdKfraA+hfyTQ6Y24zksWJjuKIJyp7X+k9HEV4bVnXKRwyOZ
UsB/pnsQEs6ylw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:58 2025 by rpki-client