
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
File: g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft (raw, json)
Hash identifier: ZxwXO3VAIrzm8plcK5vJ6+H7MKbYaQaayjnoMCG5h8w=
Subject key identifier: CE:08:1F:B2:F2:5C:38:B5:84:72:9B:D8:05:BF:84:5D:57:E7:BF:A3
Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Certificate serial: 01987D1C0CB265DE592F84F79E15C627B55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
Manifest number: 052C
Signing time: Wed 06 Aug 2025 02:00:46 +0000
Manifest this update: Wed 06 Aug 2025 02:00:46 +0000
Manifest next update: Thu 07 Aug 2025 02:00:46 +0000
Files and hashes: 1: BU9JhoqrTpIQsWIouXHlxP2UwJc.roa (hash: eExBD31OYoCxpTQ9bbvDSg8Lx/R1p5NUbz4eD5SEWnA=)
2: PMFwvTAxfhGKJmrLSIFVTDEuW3I.roa (hash: HYp8t9eAVcEw+uZrQ21I7eKONuoQGa89OFuwBzm+DCo=)
3: g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl (hash: 5UX3F8IG4scnLtQ/urTJdtUACpPJdi+nmLlL631su9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:0c:b2:65:de:59:2f:84:f7:9e:15:c6:27:b5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Validity
Not Before: Aug 6 02:00:46 2025 GMT
Not After : Aug 7 02:00:46 2025 GMT
Subject: CN=ce081fb2f25c38b584729bd805bf845d57e7bfa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:4c:e9:61:9f:75:36:99:e1:ad:09:e5:22:
37:69:6b:2f:01:5a:3f:17:79:41:27:8d:59:95:08:
d5:2b:f8:cd:d3:08:d3:80:75:ff:d2:24:0b:07:57:
30:d0:9b:69:40:68:b0:7e:e9:f3:49:4d:27:f2:19:
5c:1f:28:0c:a3:40:03:1a:5e:24:7d:eb:33:a7:74:
ac:f6:9e:e2:69:be:cf:e0:07:e4:65:4a:c5:18:f7:
27:12:1d:99:78:52:2d:df:11:96:7d:03:a6:39:d7:
4c:fe:f7:dd:0a:00:99:c4:99:76:fd:8f:c8:24:1b:
6c:26:75:69:ca:99:4b:62:7b:4b:03:ec:a6:d9:2d:
7d:5a:ae:03:59:74:0e:f5:dd:ce:75:63:57:bb:9b:
bd:cd:a3:d4:77:94:52:d2:8e:c0:42:10:e2:7b:91:
35:df:0c:ee:46:ef:7e:0c:cc:a8:bd:14:77:34:9b:
92:37:fb:f0:e6:b1:cf:b9:79:74:95:57:0f:38:1b:
74:79:02:42:49:7a:eb:c8:f6:7b:7d:a1:7f:81:f6:
a5:81:46:3a:48:f5:22:58:0d:5a:28:07:64:ea:a4:
49:c8:0a:ae:6e:fb:70:ff:e6:67:d4:f8:dc:9b:ed:
e2:e4:28:16:79:00:e4:59:35:41:f3:e6:eb:43:91:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:08:1F:B2:F2:5C:38:B5:84:72:9B:D8:05:BF:84:5D:57:E7:BF:A3
X509v3 Authority Key Identifier:
keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:53:ab:91:b9:5d:61:c4:9f:d7:21:9d:ad:49:1c:b3:63:73:
f8:22:ee:d2:65:61:8d:a9:29:3d:ca:9b:61:09:75:84:c7:d6:
76:c1:da:c6:b1:b7:5e:26:44:5b:67:99:2a:c6:2b:6b:4c:9b:
a4:2a:72:a5:78:b1:f8:8e:fb:07:1c:e0:ae:0d:f5:d0:32:7b:
81:66:2d:b9:31:b0:bf:65:b8:f5:05:b8:8e:ff:f2:77:3f:60:
cf:a4:95:4a:b0:18:98:24:9a:83:6d:e8:16:31:6e:7b:86:f9:
83:e7:1e:73:72:8a:66:32:11:e9:8b:70:02:42:64:ee:15:0d:
4e:e2:7f:b3:d7:6d:4f:6e:f4:6a:f1:3b:c9:65:af:c0:fa:49:
44:92:2e:3c:56:3a:38:3f:d1:4d:a3:66:9a:8a:1c:b6:3d:7a:
53:91:46:33:a7:1a:6b:e4:93:4a:60:c0:5d:a4:ad:bc:a6:f7:
40:79:9e:63:3b:2b:8c:e2:2b:72:41:93:8d:5d:e9:64:da:b5:
60:d5:0d:34:35:de:4f:50:69:7d:63:79:ab:54:78:09:1d:dd:
ef:47:b8:8d:45:61:d0:8e:93:71:88:9f:69:75:58:16:f5:ff:
e8:90:e0:16:03:79:a4:1e:ac:b0:d7:39:51:71:bd:7f:ef:b9:
31:7d:76:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HAyyZd5ZL4T3nhXGJ7VfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDhjY2U0ZmI2ZDM2MTQwZWI3ZDU2ZmVkMjg5YjM4NzFm
YzRkNzQwHhcNMjUwODA2MDIwMDQ2WhcNMjUwODA3MDIwMDQ2WjAzMTEwLwYDVQQD
EyhjZTA4MWZiMmYyNWMzOGI1ODQ3MjliZDgwNWJmODQ1ZDU3ZTdiZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EFM6WGfdTaZ4a0J5SI3aWsvAVo/
F3lBJ41ZlQjVK/jN0wjTgHX/0iQLB1cw0JtpQGiwfunzSU0n8hlcHygMo0ADGl4k
feszp3Ss9p7iab7P4AfkZUrFGPcnEh2ZeFIt3xGWfQOmOddM/vfdCgCZxJl2/Y/I
JBtsJnVpyplLYntLA+ym2S19Wq4DWXQO9d3OdWNXu5u9zaPUd5RS0o7AQhDie5E1
3wzuRu9+DMyovRR3NJuSN/vw5rHPuXl0lVcPOBt0eQJCSXrryPZ7faF/gfalgUY6
SPUiWA1aKAdk6qRJyAqubvtw/+Zn1Pjcm+3i5CgWeQDkWTVB8+brQ5GvEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4IH7LyXDi1hHKb2AW/hF1X57+jMB8GA1UdIwQY
MBaAFINIzOT7bTYUDrfVb+0omzhx/E10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hZmFlN2MtNmViZi00NTQzLWJjMmYt
YjhjM2RkNzY2MTNlLzEvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hZmFlN2MtNmViZi00NTQzLWJjMmYtYjhjM2RkNzY2MTNl
LzEvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFOrkbld
YcSf1yGdrUkcs2Nz+CLu0mVhjakpPcqbYQl1hMfWdsHaxrG3XiZEW2eZKsYra0yb
pCpypXix+I77Bxzgrg310DJ7gWYtuTGwv2W49QW4jv/ydz9gz6SVSrAYmCSag23o
FjFue4b5g+cec3KKZjIR6YtwAkJk7hUNTuJ/s9dtT270avE7yWWvwPpJRJIuPFY6
OD/RTaNmmooctj16U5FGM6caa+STSmDAXaStvKb3QHmeYzsrjOIrckGTjV3pZNq1
YNUNNDXeT1BpfWN5q1R4CR3d70e4jUVh0I6TcYifaXVYFvX/6JDgFgN5pB6ssNc5
UXG9f++5MX12ew==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:21 2025 by rpki-client