Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: Awps5AHYgCJAufeHS0T6tOnYa+UF+MRuTQwkTxEj+uM=
Subject key identifier: DA:81:1D:43:F4:00:A5:88:D9:FC:CA:A5:46:FF:5F:08:24:20:DE:F9
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 0197B7EAB582963E5E2E5852CD0354628000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 0F50
Signing time: Sat 28 Jun 2025 19:01:41 +0000
Manifest this update: Sat 28 Jun 2025 19:01:41 +0000
Manifest next update: Sun 29 Jun 2025 19:01:41 +0000
Files and hashes: 1: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (hash: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=)
2: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (hash: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: 9/CgOiXtnnxg9PYFU39ffsbzHn1SH91IigCVJaRmC6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b5:82:96:3e:5e:2e:58:52:cd:03:54:62:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Jun 28 19:01:41 2025 GMT
Not After : Jun 29 19:01:41 2025 GMT
Subject: CN=da811d43f400a588d9fccaa546ff5f082420def9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:46:a8:94:34:8e:ec:9f:ab:a1:2c:7e:5c:
d1:6c:19:e7:82:48:14:3f:15:d8:b5:18:d8:c9:19:
c3:10:1f:12:f2:77:6e:2a:ae:6e:f1:8e:ba:88:f1:
eb:0e:ba:7a:85:82:da:fc:1e:59:c6:6b:c8:b4:55:
78:ca:5a:77:4d:f8:be:a5:c6:3a:1e:58:a2:40:26:
d1:c1:43:c5:92:d7:f0:b7:cb:d2:f9:aa:a6:46:53:
6f:dd:45:74:31:36:16:26:e3:77:31:49:59:81:0e:
3b:d0:7e:c9:41:47:4f:90:90:8d:ac:84:85:58:5c:
57:23:44:1e:fe:99:65:03:73:a1:b7:95:e3:94:39:
b4:81:44:cf:6b:8f:48:b8:ee:4e:02:85:5c:8c:44:
12:be:38:21:71:a8:35:9a:ba:78:82:97:af:72:d6:
73:75:fc:0c:7a:d5:e9:d6:97:70:e7:d1:01:3b:85:
d4:30:63:7f:cc:05:62:b3:94:d1:2d:ca:5a:89:61:
ad:9c:8e:98:66:ca:e4:75:3d:5c:1d:51:09:9a:fd:
04:36:9b:f7:4b:8e:f7:d8:db:75:bd:e0:e0:b2:40:
c0:34:88:08:45:5e:6f:01:2a:8b:e3:27:99:80:e5:
58:57:65:60:41:c2:fe:f3:4b:a6:61:61:51:53:a4:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:81:1D:43:F4:00:A5:88:D9:FC:CA:A5:46:FF:5F:08:24:20:DE:F9
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9b:a8:d8:82:67:65:7b:38:11:c2:37:a9:36:08:5f:ca:00:
62:0e:88:42:9a:e0:31:32:ca:37:39:42:04:13:8a:22:48:55:
6a:29:99:bc:77:bd:52:2a:90:2b:6c:90:cf:33:1a:f6:e2:60:
75:d6:50:f9:e9:b6:18:f2:ef:94:61:8f:58:b7:b8:8c:db:8b:
58:37:12:75:2c:2c:39:aa:e7:da:1b:f5:19:3f:df:33:8c:92:
a8:7f:5d:16:d2:74:6e:23:e1:51:5d:8e:31:e0:2c:89:de:9d:
fc:a8:62:90:74:12:66:15:ec:c8:68:32:fc:32:63:00:31:85:
a8:ee:d4:19:6a:7a:b2:ba:a5:b4:8d:89:ea:df:07:19:71:7b:
b3:3c:7e:9f:06:ff:bb:9b:dc:59:36:da:94:e0:4a:64:fd:0a:
24:0b:d7:f0:e2:d0:f5:e7:b6:6a:79:4a:15:c0:5a:4f:1c:f1:
15:54:76:10:fe:0f:82:3d:76:44:0c:c0:a6:7e:c7:28:a5:2f:
de:3d:24:5d:30:23:78:f0:df:20:52:e7:6a:15:ec:3d:e8:ef:
62:be:19:ad:43:d3:70:75:57:37:2c:04:d2:48:b6:a9:3a:9d:
1f:8f:ec:69:9b:c0:aa:d3:85:81:e9:eb:85:fd:e9:01:4d:f9:
de:aa:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:29:49 2025 by rpki-client