Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: nBtTXg8PgHYvX0KTw5VZx+Ximn/EcPynVGZCS/wrvws=
Subject key identifier: 00:C4:68:05:77:85:46:4D:CE:3B:48:17:4F:FB:36:A9:B3:15:62:BE
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 019771BF73018FF933B6BACE26DE2C251F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 08D4
Signing time: Sun 15 Jun 2025 04:01:01 +0000
Manifest this update: Sun 15 Jun 2025 04:01:01 +0000
Manifest next update: Mon 16 Jun 2025 04:01:01 +0000
Files and hashes: 1: NmyYIbuzbIXUj9jJPjF3BR9optE.roa (hash: wSdjb/vMyeBBwt44mj9k7sBn6y3WZbUfXBs3kYVLtv8=)
2: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: Uq0vf46kqULTfKDD91ASwK68ZP9RjGn/2hr6Pmc89wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:73:01:8f:f9:33:b6:ba:ce:26:de:2c:25:1f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Jun 15 04:01:01 2025 GMT
Not After : Jun 16 04:01:01 2025 GMT
Subject: CN=00c468057785464dce3b48174ffb36a9b31562be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:31:55:89:dd:b0:98:ed:e9:e1:0f:72:a0:
61:cb:e3:7e:0c:c5:8b:cb:c4:33:3f:74:39:3d:c3:
21:0d:d3:0a:9f:45:3f:4f:47:de:d3:f3:df:ce:cc:
6c:ab:cf:10:92:48:99:4b:bc:c5:4c:a6:a7:ef:6d:
12:e7:89:ef:eb:32:b2:ca:53:5a:45:28:a6:6b:68:
1c:10:a1:f4:37:0b:ab:80:f1:d1:14:b0:37:43:aa:
40:93:89:92:d5:0f:d3:ca:9f:d2:2b:cc:62:1f:2e:
a2:4f:c9:77:fb:81:7a:5e:2a:d2:e2:7d:d5:39:ed:
e2:70:75:be:25:c9:73:98:45:52:7d:53:73:6c:ea:
99:fa:f8:03:0b:01:8f:28:fb:6c:b0:22:94:14:3f:
e1:31:95:65:dd:b8:09:14:d1:1a:8a:a5:dc:32:62:
b0:bc:bb:21:6e:94:c4:0e:8f:e3:71:59:cb:2c:fd:
1a:57:36:21:41:d8:78:a7:fe:36:3c:7f:ec:1c:58:
43:82:27:d3:00:e7:93:37:10:6c:8e:b9:36:ba:2e:
a7:28:61:fc:92:9c:df:8d:f2:59:d9:25:b9:5c:94:
90:2f:cb:d0:be:71:7a:ab:8e:b9:95:87:1d:0c:51:
4d:e9:46:7b:97:ff:7f:99:4a:83:2e:69:14:63:f5:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C4:68:05:77:85:46:4D:CE:3B:48:17:4F:FB:36:A9:B3:15:62:BE
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ff:87:23:65:3c:d6:3c:b9:4c:f7:c9:3a:a7:bb:80:63:9c:
b0:65:32:48:60:55:d7:21:e1:61:bb:9e:17:9b:f5:23:7b:04:
ec:62:b2:70:be:cd:e5:c8:0b:9d:18:c6:f9:c7:50:65:e6:76:
d9:06:94:68:16:4e:4e:a3:85:f7:1c:84:5a:40:92:4a:ee:2c:
dc:b2:4c:54:3d:a1:3c:d6:99:fc:59:7a:53:0d:5c:ef:9e:25:
1f:5b:09:f6:14:bd:21:0d:73:af:3b:c4:66:65:6d:9b:29:97:
32:d2:de:e1:79:ab:bb:75:94:07:d7:17:eb:b6:da:1e:03:82:
60:ed:ef:69:6e:a6:a4:19:80:8d:82:84:c1:bd:e4:24:d3:dc:
f5:7a:c0:e5:b7:a4:fc:b1:18:57:9a:96:a8:4b:9d:bf:d9:61:
ee:9b:d8:23:57:03:5a:49:c0:87:58:7b:c9:60:f8:35:fb:37:
a8:dd:f2:5f:b4:44:9b:b8:3d:a3:b8:f1:fe:7a:2b:e7:5c:71:
3c:0f:70:ef:91:08:db:14:98:1d:21:34:10:f4:9c:07:af:b9:
84:6b:48:aa:11:14:79:3a:2e:1e:ef:c2:95:9a:85:5d:17:58:
cc:b3:30:8f:1d:e2:d6:55:5f:d6:da:40:8e:65:14:78:ed:f2:
bf:e3:4d:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxv3MBj/kztrrOJt4sJR8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmFiNTUwZDgyN2EyZGVmMGQ0ZDI2MTYwNjE0MjVjMmY2
OTRjODQwHhcNMjUwNjE1MDQwMTAxWhcNMjUwNjE2MDQwMTAxWjAzMTEwLwYDVQQD
EygwMGM0NjgwNTc3ODU0NjRkY2UzYjQ4MTc0ZmZiMzZhOWIzMTU2MmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqsxVYndsJjt6eEPcqBhy+N+DMWL
y8QzP3Q5PcMhDdMKn0U/T0fe0/Pfzsxsq88QkkiZS7zFTKan720S54nv6zKyylNa
RSima2gcEKH0NwurgPHRFLA3Q6pAk4mS1Q/Typ/SK8xiHy6iT8l3+4F6XirS4n3V
Oe3icHW+JclzmEVSfVNzbOqZ+vgDCwGPKPtssCKUFD/hMZVl3bgJFNEaiqXcMmKw
vLshbpTEDo/jcVnLLP0aVzYhQdh4p/42PH/sHFhDgifTAOeTNxBsjrk2ui6nKGH8
kpzfjfJZ2SW5XJSQL8vQvnF6q465lYcdDFFN6UZ7l/9/mUqDLmkUY/V+EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADEaAV3hUZNzjtIF0/7NqmzFWK+MB8GA1UdIwQY
MBaAFID6tVDYJ6Le8NTSYWBhQlwvaUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAt
Zjc2MjkyOWYxZjA4LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAtZjc2MjkyOWYxZjA4
LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXf+HI2U8
1jy5TPfJOqe7gGOcsGUySGBV1yHhYbueF5v1I3sE7GKycL7N5cgLnRjG+cdQZeZ2
2QaUaBZOTqOF9xyEWkCSSu4s3LJMVD2hPNaZ/Fl6Uw1c754lH1sJ9hS9IQ1zrzvE
ZmVtmymXMtLe4Xmru3WUB9cX67baHgOCYO3vaW6mpBmAjYKEwb3kJNPc9XrA5bek
/LEYV5qWqEudv9lh7pvYI1cDWknAh1h7yWD4Nfs3qN3yX7REm7g9o7jx/nor51xx
PA9w75EI2xSYHSE0EPScB6+5hGtIqhEUeTouHu/ClZqFXRdYzLMwjx3i1lVf1tpA
jmUUeO3yv+NNJw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:35:52 2025 by rpki-client