Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: d0Ik68IDzHqm33m4d7zNMYDgA/2osgTdy93Z2Ch6gxY=
Subject key identifier: 02:C0:27:6C:97:36:71:CA:CE:5C:60:20:BF:0E:ED:8B:5B:42:42:AE
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 0197703EFBC373FCF5EB87148042145A5A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 21:01:05 +0000
Manifest this update: Sat 14 Jun 2025 21:01:05 +0000
Manifest next update: Sun 15 Jun 2025 21:01:05 +0000
Files and hashes: 1: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (hash: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: 4rOjpwzixLYnq2FA0tZ6z3FfDIaZ6nw8fNW72aDcT0U=)
3: zHD1UIuWQeduzn45VRXboBoA5NM.roa (hash: ToC2fZb+9n4mNoZ0Xp4h8y1142lDAhVM0QODtU55JXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:fb:c3:73:fc:f5:eb:87:14:80:42:14:5a:5a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Jun 14 21:01:05 2025 GMT
Not After : Jun 15 21:01:05 2025 GMT
Subject: CN=02c0276c973671cace5c6020bf0eed8b5b4242ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:39:a6:10:42:e0:db:ef:f9:5d:90:5f:7e:9e:
fe:51:45:27:69:d3:fa:af:3b:69:7b:40:b5:33:ca:
8f:5f:08:78:ff:f5:e1:c9:52:a3:92:8c:f2:87:a8:
89:28:62:56:31:8c:c6:56:dd:47:60:38:66:15:99:
e1:41:d5:fc:da:c9:75:ff:12:04:c6:40:f2:91:fa:
f3:c0:4b:bb:b4:77:00:27:8b:b9:b8:34:03:b8:4a:
9e:12:28:0f:1f:82:46:d7:3a:a6:c8:54:be:4a:00:
3b:ea:8a:cf:8c:3e:3c:29:0c:b0:2b:ac:d5:42:e5:
9d:57:a5:fd:72:b3:a2:a3:cf:ef:4e:fc:19:a1:2a:
4b:8e:5f:a7:15:f7:6c:68:5c:0f:06:3a:06:ad:63:
83:67:7e:92:a1:06:5a:86:12:4f:d4:53:44:f4:60:
44:f3:a9:4e:93:f6:6b:7b:9b:bf:38:34:16:5d:d8:
cf:d0:20:d5:45:bc:05:ff:ef:59:03:b9:74:e8:e9:
d2:05:b2:2c:05:2d:b0:09:41:37:ed:e6:3a:3e:43:
9c:1b:af:a5:3c:d4:8d:64:7a:cb:c0:c5:d0:85:de:
25:6f:81:ff:6b:f1:b2:37:e7:c0:61:bd:8b:32:4b:
b3:c0:17:36:75:5b:14:b9:7b:2c:47:7f:f7:e5:94:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C0:27:6C:97:36:71:CA:CE:5C:60:20:BF:0E:ED:8B:5B:42:42:AE
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:6b:cc:28:60:44:8a:26:27:5d:21:be:fc:e5:c7:59:df:32:
5e:46:d1:3a:08:be:d3:cd:96:e8:98:6b:ab:60:da:c9:02:83:
08:c7:ea:ce:28:ee:fd:32:c2:21:00:1a:fd:d0:74:ed:d0:25:
58:40:44:7a:bf:11:25:51:4b:77:50:f9:54:95:ea:0a:41:fc:
f8:e6:d8:d8:77:b9:11:d5:bd:4b:e6:03:c1:01:c5:88:f2:0c:
ed:e7:2b:b8:96:e5:0b:11:4d:9a:2c:3d:1a:ce:e8:31:92:2d:
af:f7:8c:5c:92:88:f6:76:75:47:b0:d2:50:ec:14:6d:ca:84:
34:bd:85:d3:76:5c:c5:9a:73:33:7f:1f:c1:b2:fa:49:5b:6e:
3b:b7:55:9c:85:71:0e:3a:91:59:35:d2:63:56:9e:28:da:7c:
6e:45:fa:04:b5:2a:86:f0:a1:e7:0b:fe:cc:49:b7:b5:8f:f4:
5f:f7:4a:19:f9:6d:be:9f:98:94:b9:53:91:72:4c:c1:a2:8f:
7f:56:e7:75:1f:7d:9c:86:e0:b6:d7:86:64:88:20:07:8e:c0:
10:18:f4:51:14:6f:f6:aa:1a:e0:d3:e9:94:ea:00:f4:db:b5:
f7:c0:8f:75:39:de:26:3e:eb:3e:1e:ff:50:fd:15:7f:aa:5d:
46:aa:d5:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPvvDc/z164cUgEIUWlokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmQwMDgyOTUzNmQ0Nzc0NWY0N2RhOWQxYThhNzJmNmRk
NDYyZDQwHhcNMjUwNjE0MjEwMTA1WhcNMjUwNjE1MjEwMTA1WjAzMTEwLwYDVQQD
EygwMmMwMjc2Yzk3MzY3MWNhY2U1YzYwMjBiZjBlZWQ4YjViNDI0MmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jmmEELg2+/5XZBffp7+UUUnadP6
rztpe0C1M8qPXwh4//XhyVKjkozyh6iJKGJWMYzGVt1HYDhmFZnhQdX82sl1/xIE
xkDykfrzwEu7tHcAJ4u5uDQDuEqeEigPH4JG1zqmyFS+SgA76orPjD48KQywK6zV
QuWdV6X9crOio8/vTvwZoSpLjl+nFfdsaFwPBjoGrWODZ36SoQZahhJP1FNE9GBE
86lOk/Zre5u/ODQWXdjP0CDVRbwF/+9ZA7l06OnSBbIsBS2wCUE37eY6PkOcG6+l
PNSNZHrLwMXQhd4lb4H/a/GyN+fAYb2LMkuzwBc2dVsUuXssR3/35ZQKRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALAJ2yXNnHKzlxgIL8O7YtbQkKuMB8GA1UdIwQY
MBaAFIC9AIKVNtR3RfR9qdGopy9t1GLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMt
MDliOTkyMGZlMDBmLzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMtMDliOTkyMGZlMDBm
LzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwmvMKGBE
iiYnXSG+/OXHWd8yXkbROgi+082W6Jhrq2DayQKDCMfqziju/TLCIQAa/dB07dAl
WEBEer8RJVFLd1D5VJXqCkH8+ObY2He5EdW9S+YDwQHFiPIM7ecruJblCxFNmiw9
Gs7oMZItr/eMXJKI9nZ1R7DSUOwUbcqENL2F03ZcxZpzM38fwbL6SVtuO7dVnIVx
DjqRWTXSY1aeKNp8bkX6BLUqhvCh5wv+zEm3tY/0X/dKGfltvp+YlLlTkXJMwaKP
f1bndR99nIbgtteGZIggB47AEBj0URRv9qoa4NPplOoA9Nu198CPdTneJj7rPh7/
UP0Vf6pdRqrVbA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:27 2025 by rpki-client