Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
File: G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft (raw, json)
Hash identifier: gHZ47PKyaP5IEr3y+nBVMEdhX1kzaU90ou5je4Sl650=
Subject key identifier: 17:15:31:A6:FC:76:93:CC:72:7C:A5:41:C8:FB:6F:D4:FA:76:87:DB
Authority key identifier: 1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
Certificate issuer: /CN=1b934577cb49d8d231b74c550726f3387e026cf6
Certificate serial: 019889200662BF6034A5A33E84FB288F42A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
Manifest number: 161E
Signing time: Fri 08 Aug 2025 10:00:34 +0000
Manifest this update: Fri 08 Aug 2025 10:00:34 +0000
Manifest next update: Sat 09 Aug 2025 10:00:34 +0000
Files and hashes: 1: G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl (hash: x3F+oV/9L1y5r18nEAGOpskx9W4A2oPXqsoBpQLH2aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:06:62:bf:60:34:a5:a3:3e:84:fb:28:8f:42:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b934577cb49d8d231b74c550726f3387e026cf6
Validity
Not Before: Aug 8 10:00:34 2025 GMT
Not After : Aug 9 10:00:34 2025 GMT
Subject: CN=171531a6fc7693cc727ca541c8fb6fd4fa7687db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:8e:c1:fa:79:09:a9:5b:c9:10:b2:8e:77:
20:30:28:43:de:29:a8:51:fd:88:29:5b:a7:13:38:
5d:98:fc:72:4b:0c:41:3d:e7:83:0e:a8:fd:c9:c4:
53:64:7a:f3:8a:3a:36:cb:a5:ed:b4:79:a3:7f:45:
a2:9d:f1:cd:5b:68:30:62:5c:58:8e:ab:0f:90:65:
22:91:02:2f:6a:2e:cb:1d:e8:a6:43:66:60:b3:a5:
cd:db:37:33:a5:e8:38:90:f8:12:06:43:35:d5:0c:
89:61:5d:d0:28:8d:17:0d:b3:fb:ac:d6:21:ba:f3:
49:05:9e:d9:20:d8:39:66:76:6f:c9:f6:52:7f:a8:
05:0a:0a:68:9a:34:6f:4e:ee:41:3f:38:2a:c6:15:
5e:82:fe:f6:a0:d9:a5:2f:96:52:b6:b9:42:cd:a8:
8d:d9:07:55:92:b7:09:7d:09:a1:73:38:93:a1:43:
56:bf:14:ad:96:0e:07:fb:dc:7a:5d:6f:d3:6a:29:
44:52:3f:9d:7f:ad:21:d2:57:93:af:1f:d2:b3:4a:
44:0d:61:0f:5b:7c:fc:1c:94:96:f1:ad:75:65:e6:
63:de:ae:0e:39:1f:5f:48:ed:bd:19:da:4b:31:63:
4c:b9:c5:61:64:41:e7:cd:c9:a2:bc:c7:82:63:57:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:31:A6:FC:76:93:CC:72:7C:A5:41:C8:FB:6F:D4:FA:76:87:DB
X509v3 Authority Key Identifier:
keyid:1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6c:ae:44:0b:2e:74:65:d9:f7:52:43:b4:9a:8e:9c:68:cd:
92:b1:19:5e:c1:cd:2e:a6:b1:8a:f4:d7:bd:d0:e4:a0:86:e1:
f7:63:5e:b8:27:88:4a:5b:19:bc:a1:96:1e:b4:9d:4e:ae:b5:
02:bf:8e:7d:1a:c0:bc:4f:c9:db:0b:8e:49:70:51:b3:33:17:
40:91:ce:d9:c5:58:bd:f0:45:5f:cd:82:3c:da:03:09:4a:ed:
c1:93:fa:7d:03:61:97:50:0d:82:44:4d:b9:7d:2c:db:a0:e0:
5a:4c:7c:7e:82:b2:d9:ca:b1:e8:9e:39:0f:5e:a3:2c:e6:7f:
ed:0c:9e:f3:93:56:95:8d:1b:74:40:1c:8f:f0:73:8f:2c:27:
e3:94:6e:63:ee:83:72:3b:ec:7d:f9:36:77:ff:b3:c0:75:62:
26:b3:98:8c:14:76:ba:c3:46:bc:fb:08:c9:fc:bf:7c:f8:dc:
68:7f:e5:00:7a:30:1e:61:1f:15:da:11:69:18:0f:3f:e0:f4:
31:43:e4:91:93:60:39:fd:41:1b:da:24:50:18:ba:d7:09:03:
e0:1a:b0:7e:6e:1f:88:88:fe:9e:bc:e1:2e:63:f9:0d:65:b9:
65:e0:ca:f2:5a:e4:4c:44:85:29:99:68:fd:b4:43:ee:8c:40:
be:ca:12:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJIAZiv2A0paM+hPsoj0KjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTM0NTc3Y2I0OWQ4ZDIzMWI3NGM1NTA3MjZmMzM4N2Uw
MjZjZjYwHhcNMjUwODA4MTAwMDM0WhcNMjUwODA5MTAwMDM0WjAzMTEwLwYDVQQD
EygxNzE1MzFhNmZjNzY5M2NjNzI3Y2E1NDFjOGZiNmZkNGZhNzY4N2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniSOwfp5CalbyRCyjncgMChD3imo
Uf2IKVunEzhdmPxySwxBPeeDDqj9ycRTZHrzijo2y6XttHmjf0WinfHNW2gwYlxY
jqsPkGUikQIvai7LHeimQ2Zgs6XN2zczpeg4kPgSBkM11QyJYV3QKI0XDbP7rNYh
uvNJBZ7ZINg5ZnZvyfZSf6gFCgpomjRvTu5BPzgqxhVegv72oNmlL5ZStrlCzaiN
2QdVkrcJfQmhcziToUNWvxStlg4H+9x6XW/TailEUj+df60h0leTrx/Ss0pEDWEP
W3z8HJSW8a11ZeZj3q4OOR9fSO29GdpLMWNMucVhZEHnzcmivMeCY1c9kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcVMab8dpPMcnylQcj7b9T6dofbMB8GA1UdIwQY
MBaAFBuTRXfLSdjSMbdMVQcm8zh+Amz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVORmQ4dEoyTkl4dDB4VkJ5YnpPSDRDYlBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kZDUzM2QtMjg1NS00NzkzLTk2NWEt
MGUyOTg1OGM2MzdhLzEvRzVORmQ4dEoyTkl4dDB4VkJ5YnpPSDRDYlBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kZDUzM2QtMjg1NS00NzkzLTk2NWEtMGUyOTg1OGM2Mzdh
LzEvRzVORmQ4dEoyTkl4dDB4VkJ5YnpPSDRDYlBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2yuRAsu
dGXZ91JDtJqOnGjNkrEZXsHNLqaxivTXvdDkoIbh92NeuCeISlsZvKGWHrSdTq61
Ar+OfRrAvE/J2wuOSXBRszMXQJHO2cVYvfBFX82CPNoDCUrtwZP6fQNhl1ANgkRN
uX0s26DgWkx8foKy2cqx6J45D16jLOZ/7Qye85NWlY0bdEAcj/Bzjywn45RuY+6D
cjvsffk2d/+zwHViJrOYjBR2usNGvPsIyfy/fPjcaH/lAHowHmEfFdoRaRgPP+D0
MUPkkZNgOf1BG9okUBi61wkD4Bqwfm4fiIj+nrzhLmP5DWW5ZeDK8lrkTESFKZlo
/bRD7oxAvsoSpw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:23:32 2025 by rpki-client