Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: HsQQVZCJwIyCZN96PCun0emoMcZHlt9Q8ZsroFFSdbU=
Subject key identifier: AF:05:5D:C5:EE:02:A4:BD:3A:1E:5D:24:E5:4E:83:C2:C4:EA:BD:6A
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 01974D7C13D67594A623777E300E16ECAB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 03:01:06 +0000
Manifest this update: Sun 08 Jun 2025 03:01:06 +0000
Manifest next update: Mon 09 Jun 2025 03:01:06 +0000
Files and hashes: 1: K4wUu7obHZ1pQeOh3vYsQgoummw.roa (hash: jArnZVWT3LFdRd35DdT9LyAFWuY1r/brZRKqPdnSEKo=)
2: gKseKjRnR67udMqIQaqApCcgBAY.roa (hash: abyNq8YPIR1WvDGgDgqiWSpvlJw/U2/7rDxHOpNSYwQ=)
3: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: wzRrX0iQP4iQbC2X1UW64PeBPdm4vrwmzAEzp9o+Ad4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:13:d6:75:94:a6:23:77:7e:30:0e:16:ec:ab:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Jun 8 03:01:06 2025 GMT
Not After : Jun 9 03:01:06 2025 GMT
Subject: CN=af055dc5ee02a4bd3a1e5d24e54e83c2c4eabd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:6b:ba:a2:d1:de:c7:95:e8:88:58:d7:45:
70:05:01:6d:1d:ed:2a:7e:bb:1a:54:9b:56:af:1a:
d3:a9:87:15:d3:03:32:9e:ed:b4:3e:3c:97:cc:27:
ed:02:65:fd:ee:32:97:dc:15:03:4a:66:c8:2f:ca:
b0:7f:4e:0e:d4:68:6b:28:ff:66:64:59:9b:de:6e:
4a:f4:ee:3a:88:77:00:77:5e:c3:f0:07:44:f0:e6:
b5:94:eb:a3:dd:90:a6:0c:6c:4e:8d:4d:22:2c:90:
e0:60:e6:15:15:d0:10:d1:2a:7c:b3:80:ca:4d:12:
ad:26:93:a4:17:1f:5b:1c:f2:5e:1b:ef:f4:89:42:
83:3c:16:c4:f3:0b:03:19:60:a6:46:03:52:c4:84:
b5:85:95:f1:75:d9:85:95:89:13:75:2e:28:99:2b:
3a:71:80:74:46:58:03:ad:0e:cf:fa:bf:a4:ce:7e:
29:cf:4f:04:56:fc:55:bd:8d:7f:f6:7e:d6:49:91:
98:d4:59:65:70:b8:d3:3d:ec:14:11:09:b2:32:db:
57:e8:1b:77:c4:76:3f:9c:8a:1e:ca:07:bf:71:68:
4a:e7:c8:31:7e:f5:20:72:14:a8:e9:5c:6d:4c:a3:
09:3c:8e:29:f0:c7:56:88:df:29:62:90:60:ac:3e:
4f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:05:5D:C5:EE:02:A4:BD:3A:1E:5D:24:E5:4E:83:C2:C4:EA:BD:6A
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2d:35:9e:74:ee:73:ef:f9:db:b9:26:c1:c2:49:af:b6:a2:
f8:47:c1:82:b4:9a:a6:76:02:fe:b4:83:f8:9b:6d:ec:20:87:
cf:22:17:93:75:85:cb:a4:35:96:15:c9:02:18:32:1a:de:93:
0e:3d:8c:02:41:da:5e:fa:02:66:14:09:c8:32:53:71:4a:00:
43:49:21:8c:45:4e:f5:08:55:53:f5:d9:41:03:58:9c:ea:d9:
1d:c5:81:5b:d5:f7:2f:cf:ed:27:c4:81:02:48:24:a4:4e:93:
97:e9:e3:04:05:1a:75:22:85:4a:67:3b:00:0c:32:36:8a:3a:
cf:bf:cd:81:e4:a7:50:ad:80:52:a9:16:a7:8c:54:d4:9b:6f:
81:24:7f:c2:9c:c8:d1:97:45:c5:ab:86:59:4e:51:ca:f5:97:
a3:86:b0:be:f7:a4:88:33:7c:a1:0c:40:9d:34:7d:3f:45:51:
92:3a:7a:36:54:10:9f:7f:8a:5c:6e:af:42:ab:88:0b:c2:bc:
fc:d7:40:09:55:e5:1b:d2:35:b5:a5:51:eb:65:d3:3d:83:da:
5b:89:0f:79:c7:65:f4:8b:59:f7:3b:b8:9f:8d:bf:72:b3:f5:
92:3f:60:6b:f4:80:9c:af:4b:89:b2:20:cb:88:6d:06:24:ce:
0d:88:50:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNfBPWdZSmI3d+MA4W7KstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYzcyZWFlYmMyMDQ2MWMzMWNmOTQyZTRlMTU1ZjA3Yjhh
MDNjN2MwHhcNMjUwNjA4MDMwMTA2WhcNMjUwNjA5MDMwMTA2WjAzMTEwLwYDVQQD
EyhhZjA1NWRjNWVlMDJhNGJkM2ExZTVkMjRlNTRlODNjMmM0ZWFiZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyFruqLR3seV6IhY10VwBQFtHe0q
frsaVJtWrxrTqYcV0wMynu20PjyXzCftAmX97jKX3BUDSmbIL8qwf04O1GhrKP9m
ZFmb3m5K9O46iHcAd17D8AdE8Oa1lOuj3ZCmDGxOjU0iLJDgYOYVFdAQ0Sp8s4DK
TRKtJpOkFx9bHPJeG+/0iUKDPBbE8wsDGWCmRgNSxIS1hZXxddmFlYkTdS4omSs6
cYB0RlgDrQ7P+r+kzn4pz08EVvxVvY1/9n7WSZGY1FllcLjTPewUEQmyMttX6Bt3
xHY/nIoeyge/cWhK58gxfvUgchSo6VxtTKMJPI4p8MdWiN8pYpBgrD5PFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8FXcXuAqS9Oh5dJOVOg8LE6r1qMB8GA1UdIwQY
MBaAFIDHLq68IEYcMc+ULk4VXwe4oDx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNGIxYTEtZmU4OC00NDUwLWJkMzIt
ZDBjODNiZTQwMTg1LzEvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mNGIxYTEtZmU4OC00NDUwLWJkMzItZDBjODNiZTQwMTg1
LzEvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgC01nnTu
c+/527kmwcJJr7ai+EfBgrSapnYC/rSD+Jtt7CCHzyIXk3WFy6Q1lhXJAhgyGt6T
Dj2MAkHaXvoCZhQJyDJTcUoAQ0khjEVO9QhVU/XZQQNYnOrZHcWBW9X3L8/tJ8SB
AkgkpE6Tl+njBAUadSKFSmc7AAwyNoo6z7/NgeSnUK2AUqkWp4xU1JtvgSR/wpzI
0ZdFxauGWU5RyvWXo4awvvekiDN8oQxAnTR9P0VRkjp6NlQQn3+KXG6vQquIC8K8
/NdACVXlG9I1taVR62XTPYPaW4kPecdl9ItZ9zu4n42/crP1kj9ga/SAnK9LibIg
y4htBiTODYhQcw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:39:40 2025 by rpki-client