Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
File: G6UWeIg5f_nKqET1VP-DfP2_lyI.mft (raw, json)
Hash identifier: 7UlqrMt7bCYMjseqbLN+ptDUSOqob6DKGrq0Lt0NeRs=
Subject key identifier: 87:8E:8E:31:31:3D:97:F9:F4:2D:18:0C:A1:EF:4A:D1:BB:8C:A1:50
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Certificate issuer: /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial: 01987A522FFA53D016BA2B024774574558EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
Manifest number: 1571
Signing time: Tue 05 Aug 2025 13:01:03 +0000
Manifest this update: Tue 05 Aug 2025 13:01:03 +0000
Manifest next update: Wed 06 Aug 2025 13:01:03 +0000
Files and hashes: 1: 6AZTajZMqZoSwaR7hhqu_H7CdE0.roa (hash: xxeWZ0X7ua9pg1fHVRPX6E4scyCZRjZl/DRkbbQExWc=)
2: Be_FrvCQzJEE8AcZD48fTBBydhc.roa (hash: vmCJB59VLswrUqU073qVTINZ2vimvwz+QJwA8ddtgvQ=)
3: G6UWeIg5f_nKqET1VP-DfP2_lyI.crl (hash: yN8vicqTQMzvy3wOFwzdyWPgvDGCY9/wgxAcUhgmH8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:2f:fa:53:d0:16:ba:2b:02:47:74:57:45:58:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Validity
Not Before: Aug 5 13:01:03 2025 GMT
Not After : Aug 6 13:01:03 2025 GMT
Subject: CN=878e8e31313d97f9f42d180ca1ef4ad1bb8ca150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:6e:05:fb:1d:62:11:3d:78:e2:dd:cb:78:
30:ce:da:7e:10:9d:19:6c:42:3d:8f:58:46:ef:f4:
82:f5:e5:45:ec:bc:4b:5c:61:a0:9b:4b:c1:13:5c:
ea:52:21:4b:88:7a:14:be:0d:95:8b:72:0b:b0:18:
ba:d9:9b:60:7b:7a:fa:81:36:a3:d2:73:33:6b:4a:
3e:c4:f5:4d:20:cd:c0:7d:cf:00:f9:51:fe:0e:95:
f5:d4:86:9c:b3:d4:ca:b3:bf:4b:da:dc:60:66:0d:
4a:3e:70:e4:ea:95:31:33:6d:4d:68:af:67:f3:86:
25:87:54:65:a3:11:28:52:cc:12:a2:e2:86:3b:e9:
35:b0:b4:87:fd:37:47:b1:88:08:da:f3:9f:95:2a:
2d:8d:d4:f0:76:95:d5:fd:ce:b7:cb:21:16:25:78:
04:db:cc:d4:2d:81:95:45:a7:bf:19:7c:6d:b6:19:
6b:09:a8:ef:54:7d:35:64:5c:fe:bd:ff:ee:d3:72:
0a:84:a7:1e:f2:ae:de:61:68:da:60:d0:73:fb:f0:
47:8c:73:0f:7f:16:ed:3c:b8:95:a5:27:ea:a8:f3:
90:20:4e:4b:ee:40:0d:10:ab:06:9e:0f:49:64:e1:
51:3b:0e:ee:e3:01:29:ce:71:15:06:ba:7f:01:30:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8E:8E:31:31:3D:97:F9:F4:2D:18:0C:A1:EF:4A:D1:BB:8C:A1:50
X509v3 Authority Key Identifier:
keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:96:50:d9:39:b1:63:ee:a1:d6:a0:a3:04:3c:a6:5d:07:66:
60:d1:a6:9c:a0:41:f9:cc:cf:81:da:60:7b:20:90:5c:1c:e7:
70:d8:43:4b:12:b2:23:07:8c:72:d6:36:46:b8:ae:dc:3d:85:
31:9d:97:10:00:8c:1a:91:25:7a:f6:35:e2:0e:06:14:a9:e8:
4c:72:26:92:f2:db:c0:4f:31:2b:2b:42:96:83:4c:bc:bf:2b:
4f:f0:5f:70:65:79:0e:c6:17:42:82:cd:ba:5f:48:70:3d:cb:
9f:85:88:f9:df:61:5a:66:14:20:6e:a8:53:32:15:13:83:d5:
7c:12:80:51:6b:cf:ec:67:ca:41:f2:d4:f4:e2:6a:12:10:76:
1f:17:00:01:e2:79:75:c2:3a:b0:1e:ff:91:e4:a0:8d:10:99:
aa:f6:6e:90:07:01:93:40:b7:51:92:24:63:85:e0:ab:98:47:
7e:a0:d0:cb:05:25:21:23:23:bd:98:32:63:20:9b:6e:26:7d:
57:c6:97:16:d6:bd:e7:35:e7:0b:b9:e2:7c:28:4a:9d:b8:13:
30:dc:e7:13:f2:19:2a:20:95:83:0f:4a:fc:ad:ce:0c:92:89:
56:be:e5:db:5e:6f:29:33:ad:7d:69:90:35:af:c4:3a:c3:39:
91:79:86:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6Ui/6U9AWuisCR3RXRVjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxNjc4ODgzOTdmZjljYWE4NDRmNTU0ZmY4MzdjZmRi
Zjk3MjIwHhcNMjUwODA1MTMwMTAzWhcNMjUwODA2MTMwMTAzWjAzMTEwLwYDVQQD
Eyg4NzhlOGUzMTMxM2Q5N2Y5ZjQyZDE4MGNhMWVmNGFkMWJiOGNhMTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbNuBfsdYhE9eOLdy3gwztp+EJ0Z
bEI9j1hG7/SC9eVF7LxLXGGgm0vBE1zqUiFLiHoUvg2Vi3ILsBi62Ztge3r6gTaj
0nMza0o+xPVNIM3Afc8A+VH+DpX11Iacs9TKs79L2txgZg1KPnDk6pUxM21NaK9n
84Ylh1RloxEoUswSouKGO+k1sLSH/TdHsYgI2vOflSotjdTwdpXV/c63yyEWJXgE
28zULYGVRae/GXxtthlrCajvVH01ZFz+vf/u03IKhKce8q7eYWjaYNBz+/BHjHMP
fxbtPLiVpSfqqPOQIE5L7kANEKsGng9JZOFROw7u4wEpznEVBrp/ATAq6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeOjjExPZf59C0YDKHvStG7jKFQMB8GA1UdIwQY
MBaAFBulFniIOX/5yqhE9VT/g3z9v5ciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVV2VJZzVmX25LcUVUMVZQLURmUDJfbHlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wNjY0NzgtYjA2Ni00NzM2LWFkOWYt
NTNmNDFkZmU0MDdmLzEvRzZVV2VJZzVmX25LcUVUMVZQLURmUDJfbHlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wNjY0NzgtYjA2Ni00NzM2LWFkOWYtNTNmNDFkZmU0MDdm
LzEvRzZVV2VJZzVmX25LcUVUMVZQLURmUDJfbHlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5ZQ2Tmx
Y+6h1qCjBDymXQdmYNGmnKBB+czPgdpgeyCQXBzncNhDSxKyIweMctY2Rriu3D2F
MZ2XEACMGpElevY14g4GFKnoTHImkvLbwE8xKytCloNMvL8rT/BfcGV5DsYXQoLN
ul9IcD3Ln4WI+d9hWmYUIG6oUzIVE4PVfBKAUWvP7GfKQfLU9OJqEhB2HxcAAeJ5
dcI6sB7/keSgjRCZqvZukAcBk0C3UZIkY4Xgq5hHfqDQywUlISMjvZgyYyCbbiZ9
V8aXFta95zXnC7nifChKnbgTMNznE/IZKiCVgw9K/K3ODJKJVr7l215vKTOtfWmQ
Na/EOsM5kXmGWQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:46:32 2025 by rpki-client