Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: pxA4V7egkwJJex7dMYd+1+8w2+WLLdXsDMP8os0S/sM=
Subject key identifier: 64:7B:BC:F5:AA:73:14:C9:1A:23:3C:DC:38:35:A8:90:D0:1E:73:4E
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 01988356B73F7F33529AE049B417139D01F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 07:02:34 +0000
Manifest this update: Thu 07 Aug 2025 07:02:34 +0000
Manifest next update: Fri 08 Aug 2025 07:02:34 +0000
Files and hashes: 1: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: Lk9GyEEDtgAnMvtwE19o4NBM18ikgb8nn3wx0L5JjMc=)
2: a6z9s2B5USpArv-yW1XShxJdtpo.roa (hash: hfVnswmh8KT0yGpguvtRDoEqQ95xhx5KsIsgaJn/9yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:b7:3f:7f:33:52:9a:e0:49:b4:17:13:9d:01:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Aug 7 07:02:34 2025 GMT
Not After : Aug 8 07:02:34 2025 GMT
Subject: CN=647bbcf5aa7314c91a233cdc3835a890d01e734e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:5c:98:39:3f:cf:40:5a:14:03:39:be:92:
41:ad:df:95:43:08:ca:50:41:d6:9f:e0:96:59:65:
f0:76:a1:de:3f:c2:a2:82:04:2e:70:eb:30:1d:ef:
7f:c8:94:42:84:12:8f:fe:dc:d2:b3:a3:91:14:82:
02:ac:ca:6f:4a:5d:a7:ad:06:8e:27:85:18:dc:c5:
c6:cc:f1:ca:3e:03:be:74:8e:ec:dd:36:3d:24:19:
f2:45:b3:0b:33:29:bd:91:0d:0d:d7:d6:a3:e8:de:
54:51:c7:27:f6:4e:c6:6d:9f:3b:61:4b:77:19:4c:
32:1a:5b:07:6d:e9:bc:39:66:bb:0d:ec:6e:38:34:
1b:43:f1:c2:86:91:5d:f8:0f:02:6d:86:d8:09:0e:
64:75:52:c6:a4:9a:d5:97:3e:3c:0e:e1:de:ed:4a:
37:07:b1:75:f8:9e:eb:97:48:c6:87:ce:04:d8:c5:
86:0e:25:4b:6c:40:16:bd:fe:37:65:c0:f5:1c:10:
3e:7c:14:35:9d:de:6b:84:f6:35:6d:86:07:97:ce:
b5:d1:47:7b:9d:04:03:81:df:6b:e2:cc:91:2e:5a:
cb:54:d1:e1:f8:c5:ee:98:c4:c9:50:9b:40:49:57:
4e:6e:ab:19:dc:d5:d1:9e:fa:53:f0:f4:5b:0f:ef:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:BC:F5:AA:73:14:C9:1A:23:3C:DC:38:35:A8:90:D0:1E:73:4E
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:83:1e:93:fe:2d:50:22:80:24:f0:15:eb:62:56:e2:e0:7d:
af:2a:4d:58:dc:c0:42:da:79:2f:3f:41:28:be:ab:73:77:a8:
a0:b6:9d:db:80:11:d1:98:e9:53:67:92:b8:ae:37:21:3a:02:
b9:b9:6a:0c:e1:15:87:d7:07:a5:57:20:17:ae:9f:c1:1a:f8:
a2:6a:cb:59:d5:23:04:74:07:c3:1b:e2:9d:f4:a1:22:1f:d4:
5d:60:60:ff:f4:ab:b1:df:ee:b2:42:a4:0a:a9:b4:28:9b:f3:
9c:96:3e:d3:1b:30:14:79:93:b2:a7:e5:c8:24:d4:b5:30:25:
12:1c:41:dc:47:89:09:0b:aa:04:2c:88:ba:1e:e6:b6:f9:52:
d5:00:24:b2:cd:39:03:a7:b3:0d:eb:44:e1:5a:fa:53:b1:13:
df:e5:d0:7b:fa:cf:60:9a:24:7f:1c:c8:9a:7f:4a:fa:e9:b4:
3d:da:69:fa:b8:a4:3d:a2:69:ee:8d:72:29:9b:f8:a6:7b:d2:
f9:26:af:89:d0:57:16:9c:fc:22:c1:a1:ce:4c:13:1e:51:ca:
7d:33:2c:1c:39:23:0a:3c:e6:7a:13:19:5d:7d:a8:df:0e:b2:
ef:5f:3b:c9:c1:ba:8d:29:85:6a:57:8b:0c:6b:33:8d:63:1b:
cb:28:00:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDVrc/fzNSmuBJtBcTnQH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWY1YWExNGQzMTQwYzdjN2M0OTg4ZjE5ZGE5NDMxZWIx
YTQwZjEwHhcNMjUwODA3MDcwMjM0WhcNMjUwODA4MDcwMjM0WjAzMTEwLwYDVQQD
Eyg2NDdiYmNmNWFhNzMxNGM5MWEyMzNjZGMzODM1YTg5MGQwMWU3MzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUJcmDk/z0BaFAM5vpJBrd+VQwjK
UEHWn+CWWWXwdqHeP8KiggQucOswHe9/yJRChBKP/tzSs6ORFIICrMpvSl2nrQaO
J4UY3MXGzPHKPgO+dI7s3TY9JBnyRbMLMym9kQ0N19aj6N5UUccn9k7GbZ87YUt3
GUwyGlsHbem8OWa7DexuODQbQ/HChpFd+A8CbYbYCQ5kdVLGpJrVlz48DuHe7Uo3
B7F1+J7rl0jGh84E2MWGDiVLbEAWvf43ZcD1HBA+fBQ1nd5rhPY1bYYHl8610Ud7
nQQDgd9r4syRLlrLVNHh+MXumMTJUJtASVdObqsZ3NXRnvpT8PRbD+/0lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGR7vPWqcxTJGiM83Dg1qJDQHnNOMB8GA1UdIwQY
MBaAFBvvWqFNMUDHx8SYjxnalDHrGkDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUt
MGU0MzgyMzEwY2E1LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUtMGU0MzgyMzEwY2E1
LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYMek/4t
UCKAJPAV62JW4uB9rypNWNzAQtp5Lz9BKL6rc3eooLad24AR0ZjpU2eSuK43IToC
ublqDOEVh9cHpVcgF66fwRr4omrLWdUjBHQHwxvinfShIh/UXWBg//Srsd/uskKk
Cqm0KJvznJY+0xswFHmTsqflyCTUtTAlEhxB3EeJCQuqBCyIuh7mtvlS1QAkss05
A6ezDetE4Vr6U7ET3+XQe/rPYJokfxzImn9K+um0Pdpp+rikPaJp7o1yKZv4pnvS
+SavidBXFpz8IsGhzkwTHlHKfTMsHDkjCjzmehMZXX2o3w6y7187ycG6jSmFaleL
DGszjWMbyygArQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 17:30:50 2025 by rpki-client