Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: oTjOsabamjI8FAv01vYOG5+CoNXQYHsYO5PYUdVX0eM=
Subject key identifier: E0:89:60:B8:16:8F:D9:DD:94:F2:A0:51:E2:02:32:6D:EE:CD:37:36
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 01976FD0CFD48586669E27FA3E9B6F2673A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0AB4
Signing time: Sat 14 Jun 2025 19:00:44 +0000
Manifest this update: Sat 14 Jun 2025 19:00:44 +0000
Manifest next update: Sun 15 Jun 2025 19:00:44 +0000
Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: e3LFd8p2DrY/J27K6eg1pYHPMESBrDSp14TkWCUjtqA=)
3: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:cf:d4:85:86:66:9e:27:fa:3e:9b:6f:26:73:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Jun 14 19:00:44 2025 GMT
Not After : Jun 15 19:00:44 2025 GMT
Subject: CN=e08960b8168fd9dd94f2a051e202326deecd3736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:72:f3:b1:6f:ca:bd:50:b2:4e:ae:f4:31:
b1:58:26:fd:d3:97:10:29:f0:8f:b7:ec:ac:26:f9:
2f:bc:f3:ff:84:6d:b9:dd:9f:02:2f:73:bf:86:5a:
29:bf:90:54:79:cf:f0:76:a5:cb:c6:bc:da:28:95:
ca:1d:35:c4:9d:27:7f:5a:69:3f:41:32:46:a2:cd:
13:f8:c1:b0:99:c8:ed:5b:71:d3:5b:9c:95:50:f3:
0d:b6:b2:54:aa:6a:12:33:12:6d:53:3b:42:8e:ae:
38:a6:ab:41:8a:2d:a9:9b:f5:72:03:ec:00:cb:04:
fc:1e:e7:e1:43:3e:54:3a:1a:ff:3d:31:5c:80:2b:
0d:2c:7b:72:e1:32:c3:70:ed:7d:96:6b:0c:ed:d3:
31:a8:18:e5:de:d1:db:ca:45:40:55:cb:a7:9c:d6:
2b:a6:63:ad:94:83:22:c5:7a:5a:8e:39:6b:e8:de:
3f:d1:59:97:86:ee:51:e6:a4:68:ee:8a:e7:7e:a3:
b3:04:bb:a8:27:83:24:cf:9b:d5:e6:f8:8c:35:26:
36:3d:fd:4a:01:f1:74:44:31:3c:db:ce:82:86:7a:
ba:7f:11:ce:08:dc:ea:78:0d:fb:94:f1:93:05:d2:
89:9f:fa:8f:03:f4:9f:7b:b0:3b:9a:32:7c:f8:b3:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:89:60:B8:16:8F:D9:DD:94:F2:A0:51:E2:02:32:6D:EE:CD:37:36
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7a:ba:04:89:f4:d9:0c:99:7f:e0:b4:4d:c3:25:a5:98:d5:
cf:ed:ce:e7:25:a4:5b:b2:e0:7b:5c:76:26:0c:a1:3a:3f:9b:
be:36:e6:03:39:a7:a2:63:57:70:36:eb:60:f9:cf:9f:fa:35:
d1:ff:04:28:ff:ae:47:d0:83:5f:16:72:91:63:93:20:7b:62:
6a:6d:1e:79:48:aa:aa:bd:f7:b8:67:76:b2:05:a0:e6:9b:59:
a7:87:07:b2:0c:2f:3a:6a:9c:7d:95:78:15:af:31:10:00:a3:
7e:5f:f9:29:84:cf:0b:a0:3b:03:55:be:62:fa:9b:3b:7b:85:
08:53:5b:43:ff:6f:5a:c1:8f:04:7f:19:8e:fd:0b:54:8c:2c:
3e:46:93:97:4a:3b:0a:47:77:69:89:d3:62:f0:52:69:a7:31:
d7:84:01:ed:c7:49:6f:47:c1:3f:2f:46:33:cd:22:c4:6a:a1:
0f:8f:a1:96:85:00:5d:84:79:b7:8e:c9:fa:d1:09:c8:4b:44:
50:eb:ff:8f:ae:43:04:56:13:f9:6a:0e:ff:07:6a:9d:59:4f:
80:58:f8:ca:5c:f8:b2:a2:80:74:da:35:d4:67:41:f8:8d:e5:
e9:ab:ef:bf:87:cf:37:38:49:45:55:61:b6:a1:b3:7e:84:ca:
21:a8:21:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0M/UhYZmnif6PptvJnOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyOGJiYWQ2ZjQ5MTY4NDJiYmUzMjAyODRmYWZlMTBjYWY1
OWVkZjAwHhcNMjUwNjE0MTkwMDQ0WhcNMjUwNjE1MTkwMDQ0WjAzMTEwLwYDVQQD
EyhlMDg5NjBiODE2OGZkOWRkOTRmMmEwNTFlMjAyMzI2ZGVlY2QzNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe1y87Fvyr1Qsk6u9DGxWCb905cQ
KfCPt+ysJvkvvPP/hG253Z8CL3O/hlopv5BUec/wdqXLxrzaKJXKHTXEnSd/Wmk/
QTJGos0T+MGwmcjtW3HTW5yVUPMNtrJUqmoSMxJtUztCjq44pqtBii2pm/VyA+wA
ywT8HufhQz5UOhr/PTFcgCsNLHty4TLDcO19lmsM7dMxqBjl3tHbykVAVcunnNYr
pmOtlIMixXpajjlr6N4/0VmXhu5R5qRo7ornfqOzBLuoJ4Mkz5vV5viMNSY2Pf1K
AfF0RDE8286Chnq6fxHOCNzqeA37lPGTBdKJn/qPA/Sfe7A7mjJ8+LNx3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCJYLgWj9ndlPKgUeICMm3uzTc2MB8GA1UdIwQY
MBaAFIKLutb0kWhCu+MgKE+v4QyvWe3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgt
MTg5NjU1NWEyZjBlLzEvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgtMTg5NjU1NWEyZjBl
LzEvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3q6BIn0
2QyZf+C0TcMlpZjVz+3O5yWkW7Lge1x2JgyhOj+bvjbmAzmnomNXcDbrYPnPn/o1
0f8EKP+uR9CDXxZykWOTIHtiam0eeUiqqr33uGd2sgWg5ptZp4cHsgwvOmqcfZV4
Fa8xEACjfl/5KYTPC6A7A1W+YvqbO3uFCFNbQ/9vWsGPBH8Zjv0LVIwsPkaTl0o7
Ckd3aYnTYvBSaacx14QB7cdJb0fBPy9GM80ixGqhD4+hloUAXYR5t47J+tEJyEtE
UOv/j65DBFYT+WoO/wdqnVlPgFj4ylz4sqKAdNo11GdB+I3l6avvv4fPNzhJRVVh
tqGzfoTKIaghsw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:26 2025 by rpki-client