Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File: g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier: fKeEdU0up+Qbkb/2JAqb6YgDtf9EJzaTY2QYWySOYW8=
Subject key identifier: 9F:01:D9:4C:32:D8:DE:5A:60:35:05:50:30:3B:7B:68:11:3B:AA:19
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial: 0198D660B47AF3275B69C4B5F09724C5B54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:01:58 +0000
Manifest this update: Sat 23 Aug 2025 10:01:58 +0000
Manifest next update: Sun 24 Aug 2025 10:01:58 +0000
Files and hashes: 1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=)
2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=)
3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: 6gZc3/qGTbkgIqu9+EmayDVASXwooOjquT8diyL6bmA=)
4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b4:7a:f3:27:5b:69:c4:b5:f0:97:24:c5:b5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
Validity
Not Before: Aug 23 10:01:58 2025 GMT
Not After : Aug 24 10:01:58 2025 GMT
Subject: CN=9f01d94c32d8de5a60350550303b7b68113baa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:49:81:53:f4:26:51:18:8b:0d:b8:cd:71:
23:8d:df:4c:4b:e7:20:6a:53:46:44:16:d2:a8:14:
5b:be:3d:a7:fe:45:5f:35:93:7f:61:d3:01:df:0d:
13:03:30:7b:1e:d2:0a:b6:56:76:32:67:b7:d8:41:
86:67:a3:22:cc:f5:50:da:f6:d7:8d:84:3e:ac:16:
51:c6:eb:27:03:12:af:7b:3d:d8:21:6d:a0:90:47:
bc:ed:db:1c:cc:64:13:1f:e9:84:4d:3d:06:c5:73:
bc:ad:63:d4:b5:e2:f3:24:0e:26:cc:c8:e6:c1:79:
5b:d1:33:9d:a8:39:bd:d2:1d:65:20:a9:61:31:40:
44:45:d3:43:72:dc:ea:de:5e:94:f6:65:7d:50:00:
cd:dc:d3:67:30:32:ec:8c:37:15:05:6f:3d:9b:c9:
ac:31:3e:77:ae:0b:95:13:ee:ef:6d:6a:fc:01:97:
48:f3:9d:1f:6b:a9:6a:c4:10:15:a0:94:ca:57:99:
a9:86:dc:9e:ee:d8:81:94:61:3a:cb:5a:6a:89:2d:
1f:b8:36:65:13:68:99:8d:6d:b0:53:e7:e2:44:5d:
c6:17:f4:10:43:ae:c1:9b:22:44:77:a6:80:f7:d4:
34:94:40:cd:93:48:7c:35:a1:84:0d:5c:2d:b9:58:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:01:D9:4C:32:D8:DE:5A:60:35:05:50:30:3B:7B:68:11:3B:AA:19
X509v3 Authority Key Identifier:
keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c5:a0:c7:ab:1f:fc:98:1e:e1:66:fc:c6:0d:6e:64:1b:db:
61:a8:55:9f:31:a8:03:40:69:4f:5b:47:ff:b8:9f:31:96:7a:
7e:11:00:7b:18:ec:9e:ef:e2:5f:52:28:20:38:51:08:bc:a2:
f1:a6:fa:ef:1d:06:e8:2f:9f:86:cb:7c:ff:dd:ba:e1:b1:1a:
bf:f7:21:6d:1e:86:8f:5b:ba:ad:c3:ae:0d:5b:2f:eb:70:80:
ab:dd:85:a4:b3:22:63:83:1c:66:5b:08:ec:1e:8b:51:a7:45:
ed:8c:a4:69:ef:e1:27:07:f4:33:c9:b1:0f:a7:7e:52:7a:25:
9c:98:f6:09:0a:31:b8:da:9a:3c:0b:a4:fd:fb:ea:72:f8:36:
48:02:64:52:4f:0e:3c:70:bc:53:5a:c9:66:54:1a:42:e4:36:
99:d2:3f:4a:d6:54:fe:25:0d:e8:9d:5f:aa:c6:d6:f4:03:5a:
45:45:f4:51:3c:fe:21:fc:6f:e4:58:24:44:9d:0a:3b:fb:65:
40:53:95:bb:c2:38:c6:c8:82:8c:7c:74:a6:7c:91:14:03:ad:
61:66:94:95:c3:10:bb:ef:5a:e0:1c:d4:7a:02:af:04:e6:64:
fe:f5:e2:2f:7b:f4:8f:1f:1e:13:cc:48:69:3e:4f:77:ba:bc:
6a:1d:65:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:53 2025 by rpki-client