Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
File: G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json)
Hash identifier: KWXDVButbZuCsdJODUerNBpseF6/K3TKjJddWZN4M/A=
Subject key identifier: 32:E6:80:99:90:BD:8C:B0:FB:3F:5D:D7:59:A1:91:68:6A:56:7F:20
Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
Certificate issuer: /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Certificate serial: 01988BB39153F243C832DF1AF37F08D5FDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
Manifest number: 14D1
Signing time: Fri 08 Aug 2025 22:00:57 +0000
Manifest this update: Fri 08 Aug 2025 22:00:57 +0000
Manifest next update: Sat 09 Aug 2025 22:00:57 +0000
Files and hashes: 1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: o1oX4aYpdYTczhsowGFNabJbw77MUFsih3zwg5NZFus=)
2: uDXgZr4d7paw0tQnlQAuxTAiQJ4.roa (hash: ZLVG9qnKbapzUcUyG3vXPFRhsGi/6YqVmyuunmvWt4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:91:53:f2:43:c8:32:df:1a:f3:7f:08:d5:fd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Validity
Not Before: Aug 8 22:00:57 2025 GMT
Not After : Aug 9 22:00:57 2025 GMT
Subject: CN=32e6809990bd8cb0fb3f5dd759a191686a567f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:b1:1a:bc:cc:17:55:4e:4b:44:71:2c:53:
b8:f1:09:52:c1:e2:c9:76:27:b2:05:d1:02:28:0b:
dc:45:e3:21:6b:b1:68:34:8b:ac:05:9c:42:65:1a:
e8:8f:ff:d6:7e:40:e7:94:11:29:b7:a6:9c:57:31:
fb:82:4a:0f:af:42:8d:7b:02:e8:cb:fe:b2:1d:e8:
b2:99:cb:33:5f:11:2c:d5:e3:88:24:6c:4c:e6:60:
0f:70:e0:ed:dc:51:4b:5e:a0:75:d9:62:67:1f:52:
9c:b0:78:3f:74:7c:e0:41:7e:d9:c6:15:dc:b5:42:
ac:a5:a7:3d:b2:f2:fa:a3:1d:47:41:52:17:58:32:
6b:40:7d:e2:14:ec:1c:5d:a1:7f:18:f9:cd:cd:a3:
e7:e1:8d:3d:8a:2f:7c:95:8e:ef:12:3f:13:e0:0c:
c0:05:5b:4a:60:e4:d2:88:62:eb:bb:fb:7e:94:f1:
97:d0:3b:cf:a7:83:98:03:4c:61:3f:ea:00:11:e4:
54:bb:ba:3a:7f:1e:ef:c1:62:6e:ac:3a:aa:b3:6f:
31:a8:af:96:b9:fd:73:10:7a:2b:6a:8a:2c:86:b5:
3d:b7:53:ff:ac:c2:65:33:d8:94:fa:d9:3a:8f:fd:
c9:ba:4d:53:83:d1:01:0a:8b:9f:10:36:44:85:80:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E6:80:99:90:BD:8C:B0:FB:3F:5D:D7:59:A1:91:68:6A:56:7F:20
X509v3 Authority Key Identifier:
keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3c:02:40:4c:eb:3c:69:99:51:58:52:03:bb:a5:00:5d:f0:
7b:ac:4d:eb:db:d2:72:6f:45:f3:17:a6:f1:13:52:35:0a:f7:
e1:c6:1c:67:13:0f:c3:dd:ad:05:70:96:2b:ff:82:83:58:52:
01:f5:41:f6:88:70:e4:6e:ea:0c:94:e7:97:44:33:eb:bb:1a:
86:06:40:99:17:d3:9e:1c:0c:d5:42:9c:eb:b1:50:62:2c:53:
d1:90:c4:30:75:f9:2e:b5:92:5a:d3:30:79:4d:8d:bc:ac:cd:
05:86:dc:44:b8:28:ed:8f:f6:99:9e:6f:6f:4a:ae:e2:50:c9:
43:75:00:81:92:19:b8:6c:59:a2:df:fd:49:5d:db:93:e6:57:
c6:d7:83:bc:ad:0f:de:26:84:75:c3:e2:ed:bd:31:26:ec:97:
d8:0a:0a:12:01:04:1c:9f:a9:ee:cf:a1:7d:70:93:4e:c8:f3:
c0:cc:52:93:09:38:ca:6a:ab:31:0e:f1:73:68:cc:01:4b:00:
2f:6f:73:9d:8f:cf:eb:65:55:dc:55:6b:65:fc:19:00:d1:4b:
09:e1:55:c6:8b:f7:71:73:23:11:a8:18:53:04:76:89:e5:20:
27:5e:25:68:65:df:62:9f:92:cc:a1:ad:e0:b5:fa:e9:8b:63:
9d:c3:7b:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs5FT8kPIMt8a838I1f2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWU0MTdiYjllY2IxYWNlOTQ5MWViYzI4MjNiYjc4OTM0
YjJjZGYwHhcNMjUwODA4MjIwMDU3WhcNMjUwODA5MjIwMDU3WjAzMTEwLwYDVQQD
EygzMmU2ODA5OTkwYmQ4Y2IwZmIzZjVkZDc1OWExOTE2ODZhNTY3ZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyomxGrzMF1VOS0RxLFO48QlSweLJ
dieyBdECKAvcReMha7FoNIusBZxCZRroj//WfkDnlBEpt6acVzH7gkoPr0KNewLo
y/6yHeiymcszXxEs1eOIJGxM5mAPcODt3FFLXqB12WJnH1KcsHg/dHzgQX7ZxhXc
tUKspac9svL6ox1HQVIXWDJrQH3iFOwcXaF/GPnNzaPn4Y09ii98lY7vEj8T4AzA
BVtKYOTSiGLru/t+lPGX0DvPp4OYA0xhP+oAEeRUu7o6fx7vwWJurDqqs28xqK+W
uf1zEHoraooshrU9t1P/rMJlM9iU+tk6j/3Juk1Tg9EBCoufEDZEhYA1wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLmgJmQvYyw+z9d11mhkWhqVn8gMB8GA1UdIwQY
MBaAFBueQXu57LGs6UkevCgju3iTSyzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2Qt
ODFlZDEyZGRmMTc1LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2QtODFlZDEyZGRmMTc1
LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzwCQEzr
PGmZUVhSA7ulAF3we6xN69vScm9F8xem8RNSNQr34cYcZxMPw92tBXCWK/+Cg1hS
AfVB9ohw5G7qDJTnl0Qz67sahgZAmRfTnhwM1UKc67FQYixT0ZDEMHX5LrWSWtMw
eU2NvKzNBYbcRLgo7Y/2mZ5vb0qu4lDJQ3UAgZIZuGxZot/9SV3bk+ZXxteDvK0P
3iaEdcPi7b0xJuyX2AoKEgEEHJ+p7s+hfXCTTsjzwMxSkwk4ymqrMQ7xc2jMAUsA
L29znY/P62VV3FVrZfwZANFLCeFVxov3cXMjEagYUwR2ieUgJ14laGXfYp+SzKGt
4LX66YtjncN7yA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:54:01 2025 by rpki-client