Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
File: v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft (raw, json)
Hash identifier: ub71qEh7eSxbAd/rnk+WoezRZ3NhaN8uWQ2n7nXzHAY=
Subject key identifier: CD:62:AA:68:F8:7E:13:2A:D2:86:57:68:AD:2D:6C:09:88:2C:FC:12
Authority key identifier: BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
Certificate issuer: /CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Certificate serial: 01988920D74AD3F87D0B2957430C236EF3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
Manifest number: 1534
Signing time: Fri 08 Aug 2025 10:01:27 +0000
Manifest this update: Fri 08 Aug 2025 10:01:27 +0000
Manifest next update: Sat 09 Aug 2025 10:01:27 +0000
Files and hashes: 1: RyCW3YF5iKkzrNHX6rZe54l5IMM.roa (hash: nnvkgafHFhfZcY1hKxlsPbFkmUe449pia8RGh1NFs+Q=)
2: aJ0uGpexjSkAa27B-n72oqb3t3I.roa (hash: H6fzloTmxNo2mJK6Qd1BL+h1srxz+hjXl3IHpHqT1Kw=)
3: v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl (hash: wpXu9KAl2eBtUhRWOxjKqOWCkyw/G/NOjCpGrWtEiBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:d7:4a:d3:f8:7d:0b:29:57:43:0c:23:6e:f3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Validity
Not Before: Aug 8 10:01:27 2025 GMT
Not After : Aug 9 10:01:27 2025 GMT
Subject: CN=cd62aa68f87e132ad2865768ad2d6c09882cfc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:fa:2b:5b:ef:09:20:17:c1:f1:a4:49:cb:
b4:67:8f:a5:ef:9a:13:01:50:57:bf:3d:31:34:ef:
60:f4:37:21:18:09:00:fd:7a:98:64:56:25:5f:cd:
45:a3:6e:a3:ce:4f:63:30:b1:25:06:5c:2d:a3:69:
92:3b:01:4f:cf:89:70:c0:81:b5:3c:77:34:3c:99:
ae:d0:c4:14:eb:af:ce:18:ac:d8:a3:35:75:75:d1:
e8:69:7b:1a:53:f2:92:da:fd:d8:c6:df:1e:8a:da:
a3:17:0d:a1:c9:66:6d:58:a5:cb:18:45:e6:34:c2:
54:26:0b:dd:34:45:85:1f:b3:95:18:4b:4e:dc:20:
00:1e:dd:f9:14:dd:8e:06:17:35:38:6c:af:12:d3:
3b:38:e4:0b:ed:70:41:f7:76:2a:98:8f:39:4b:06:
b8:e1:4d:97:69:ba:e8:5f:79:e9:46:ff:47:12:fe:
e1:bf:f7:6a:9a:10:92:5e:5a:5f:a7:05:b7:fe:74:
7a:d4:77:ea:ba:60:9e:fa:40:87:57:f0:25:a4:dd:
66:7a:29:d7:f3:df:14:36:f8:98:2c:90:f4:f2:f4:
5e:09:9b:da:67:14:2b:6e:1d:0f:3d:27:ad:a9:7c:
c0:09:cb:f4:80:d8:b4:4a:f6:a5:89:f7:1b:1c:4b:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:62:AA:68:F8:7E:13:2A:D2:86:57:68:AD:2D:6C:09:88:2C:FC:12
X509v3 Authority Key Identifier:
keyid:BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c9:4e:17:76:7a:8e:75:9f:83:01:e0:9f:3a:da:5d:28:48:
5e:cf:b7:39:03:75:ed:85:74:ca:9c:1b:2f:a9:22:35:97:13:
84:e7:2a:af:4f:14:55:69:29:99:9e:67:a5:c9:18:5d:e8:92:
b7:77:76:f9:c7:1d:8d:ad:70:f7:7b:c4:e0:14:16:92:e3:36:
18:5e:72:8b:3c:5a:40:b9:3f:76:f9:38:2a:6e:b2:b5:02:55:
41:b4:51:c0:38:99:bc:67:05:d1:eb:e0:af:11:d8:25:aa:38:
c2:13:ac:94:97:8e:dd:b9:00:e1:4d:82:27:ac:ff:4d:3a:4d:
e3:c8:7b:81:b5:86:fe:fd:dd:55:cd:80:9c:5f:60:cf:b7:77:
56:6e:22:54:8e:0a:a0:a3:a7:5a:57:f6:68:42:b6:30:78:53:
8e:45:22:aa:4d:13:47:b6:1a:bf:a0:f8:6a:5d:c7:19:8b:fd:
af:c6:c6:49:59:0c:eb:30:5f:59:89:f9:9d:e6:ad:08:13:0a:
6e:06:2f:5a:b8:18:cf:d0:d9:23:58:1f:4c:3f:d6:a9:59:bf:
30:b8:d6:47:b4:07:f9:7f:a1:e8:28:bb:a8:a2:c4:30:ee:43:
0f:75:20:bd:43:49:ef:89:85:65:cf:f1:d7:d7:76:db:6e:5c:
a2:42:ab:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJINdK0/h9CylXQwwjbvO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYTVmMGU3NjU0NzU3NTk1N2JjOTJjNmRkZGQwODRkM2Vh
N2Y4NjMwHhcNMjUwODA4MTAwMTI3WhcNMjUwODA5MTAwMTI3WjAzMTEwLwYDVQQD
EyhjZDYyYWE2OGY4N2UxMzJhZDI4NjU3NjhhZDJkNmMwOTg4MmNmYzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucD6K1vvCSAXwfGkScu0Z4+l75oT
AVBXvz0xNO9g9DchGAkA/XqYZFYlX81Fo26jzk9jMLElBlwto2mSOwFPz4lwwIG1
PHc0PJmu0MQU66/OGKzYozV1ddHoaXsaU/KS2v3Yxt8eitqjFw2hyWZtWKXLGEXm
NMJUJgvdNEWFH7OVGEtO3CAAHt35FN2OBhc1OGyvEtM7OOQL7XBB93YqmI85Swa4
4U2XabroX3npRv9HEv7hv/dqmhCSXlpfpwW3/nR61HfqumCe+kCHV/AlpN1meinX
898UNviYLJD08vReCZvaZxQrbh0PPSetqXzACcv0gNi0SvalifcbHEu0DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1iqmj4fhMq0oZXaK0tbAmILPwSMB8GA1UdIwQY
MBaAFL+l8OdlR1dZV7ySxt3dCE0+p/hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjZYdzUyVkhWMWxYdkpMRzNkMElUVDZuLUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iY2NjYjgtNmM3NC00ZDBhLTg5NWYt
MDFkMTlhNzRiZTIzLzEvdjZYdzUyVkhWMWxYdkpMRzNkMElUVDZuLUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iY2NjYjgtNmM3NC00ZDBhLTg5NWYtMDFkMTlhNzRiZTIz
LzEvdjZYdzUyVkhWMWxYdkpMRzNkMElUVDZuLUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8lOF3Z6
jnWfgwHgnzraXShIXs+3OQN17YV0ypwbL6kiNZcThOcqr08UVWkpmZ5npckYXeiS
t3d2+ccdja1w93vE4BQWkuM2GF5yizxaQLk/dvk4Km6ytQJVQbRRwDiZvGcF0evg
rxHYJao4whOslJeO3bkA4U2CJ6z/TTpN48h7gbWG/v3dVc2AnF9gz7d3Vm4iVI4K
oKOnWlf2aEK2MHhTjkUiqk0TR7Yav6D4al3HGYv9r8bGSVkM6zBfWYn5neatCBMK
bgYvWrgYz9DZI1gfTD/WqVm/MLjWR7QH+X+h6Ci7qKLEMO5DD3UgvUNJ74mFZc/x
19d2225cokKrBw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:49:33 2025 by rpki-client