Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: TxfjzIfNcoDFtG6YxnGQEwPo7a4z58gpWAf9FIDanXU=
Subject key identifier: 74:5E:7F:C7:BA:28:AA:E1:DF:A5:ED:6C:71:ED:16:E2:F4:1E:A2:C2
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 0197B6D74DEAE9A0BAF3FA3E4E7DE1CAF68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 0560
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: 9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa (hash: NvC05zdhztqBgGL0x7IrDtfQb3ZiSTjs+SHJkAWRFb8=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: HDmoKpRtDzkpta2iwQf1U/8hz6fI6yhKRmnRdVH2m4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4d:ea:e9:a0:ba:f3:fa:3e:4e:7d:e1:ca:f6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=745e7fc7ba28aae1dfa5ed6c71ed16e2f41ea2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:bb:04:7f:19:b1:10:d0:42:49:4d:d6:88:
a9:9d:3a:65:66:7c:f2:da:39:c7:ab:c3:03:40:c7:
81:83:3c:73:aa:76:11:40:04:e9:65:c7:69:fd:b5:
ed:2f:79:d3:3e:94:b3:bb:50:79:7a:dc:51:76:c0:
e5:18:f0:97:5f:2b:1b:29:ab:bc:1d:36:2c:e0:2a:
a2:95:9f:92:56:b1:da:6a:79:fa:de:2e:bc:9b:52:
38:73:63:92:59:bd:7f:ba:b8:92:6f:6f:32:ab:5b:
7e:8b:f4:9a:62:fb:87:a7:fe:d1:76:a4:45:92:74:
9e:25:a6:21:72:6e:1c:c2:b5:5b:4d:c4:e6:d7:0e:
04:d3:78:00:d4:8e:38:a8:e7:59:c6:39:92:19:22:
ce:15:f4:43:b9:f8:05:ce:1a:ee:59:c9:c9:ac:77:
0d:d9:e3:49:70:bf:ed:ec:ec:ad:7d:89:17:c0:52:
c0:6e:d2:9e:61:ba:33:c7:c8:19:e8:74:89:ca:f2:
c4:b0:58:16:76:3d:80:8c:b8:a0:85:93:71:24:40:
6e:83:54:be:fc:d4:32:40:c4:26:f7:e9:b8:ba:fa:
2b:9e:de:e9:47:43:cb:50:3f:33:c9:26:5e:bd:3d:
ac:86:24:c0:b5:e5:d4:84:74:33:05:26:eb:0d:7d:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:7F:C7:BA:28:AA:E1:DF:A5:ED:6C:71:ED:16:E2:F4:1E:A2:C2
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5a:b1:11:99:68:ce:de:5f:40:c6:9c:b9:0f:ba:99:57:7f:
7b:53:5c:d3:02:e7:60:7f:b3:95:00:b2:be:4d:42:5e:b5:f8:
73:3a:87:19:fd:38:6a:c6:74:9d:c9:24:ce:23:a2:c8:f3:51:
e8:5d:53:38:88:95:9b:d8:45:e0:bd:36:f7:a5:ed:8a:ab:86:
c9:56:4c:ba:66:1a:fc:71:49:99:8c:6a:71:c7:28:8c:53:20:
f3:8c:5d:d0:f3:d5:a0:3a:8b:d7:fb:c1:82:68:17:1b:cc:a4:
8c:82:b5:3c:19:27:a0:6a:d9:3b:3c:69:3f:75:ed:5e:64:eb:
97:5d:c8:2c:ea:82:47:7e:1c:5c:9e:cc:7a:c8:bf:61:ac:52:
54:f3:3e:38:1d:8f:2d:f4:5f:b7:fe:c6:f6:d6:70:27:c4:8d:
b1:6c:a0:c9:05:4f:7e:af:54:ee:1d:ec:0b:49:c1:c1:73:36:
d4:4d:11:9e:f0:2c:ae:d6:99:e4:35:ec:e7:c5:0a:6d:41:8e:
12:85:90:1b:a6:94:52:20:a9:b8:ba:b2:79:5e:54:b6:88:86:
74:cd:1e:ae:e9:1d:a8:c0:d9:e1:a0:85:58:e1:53:bb:ae:c1:
25:cf:35:e3:3f:f6:6c:86:9e:ff:14:8a:be:cd:72:f4:f2:cb:
95:fb:c6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:59 2025 by rpki-client