Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: 0D9DVvB5xl5jUlgdwk0kubQp8gaSdDfKPir8A/StFWs=
Subject key identifier: 91:DC:A8:07:04:F3:63:CA:09:55:25:FB:D7:4A:F8:32:22:C3:F3:15
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 0198D515EE3B2E74DA6B8FB341B48781C699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 12E3
Signing time: Sat 23 Aug 2025 04:00:40 +0000
Manifest this update: Sat 23 Aug 2025 04:00:40 +0000
Manifest next update: Sun 24 Aug 2025 04:00:40 +0000
Files and hashes: 1: O_Wh7DXILbeq2pJ7lbo670WPHcI.roa (hash: 9coM5+TGNwqDkXBfhIBTqYZ9wRzRhg/kPk42ppbDqL4=)
2: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: jTU2gXurw5IpJGyL7bC4pBmPxLz8wuSAUa9FRvW9Zt0=)
3: wurW9HScl5J6v9_HgJ6iitJiiYY.roa (hash: M+hjHy8mpb8e2lyHR4XP7A/L1pzrBL572LaM0RnZ+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ee:3b:2e:74:da:6b:8f:b3:41:b4:87:81:c6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Aug 23 04:00:40 2025 GMT
Not After : Aug 24 04:00:40 2025 GMT
Subject: CN=91dca80704f363ca095525fbd74af83222c3f315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:07:45:b7:ba:40:42:10:f6:08:e5:81:7f:03:
5d:5e:8b:8f:58:0c:f2:8f:dc:85:fc:26:55:b7:cb:
9c:55:50:4e:03:1b:e0:34:c1:40:c4:b4:d8:ec:f4:
f0:0f:94:2c:2f:78:c0:e0:33:d0:58:e6:20:59:d5:
11:8d:a0:bd:f1:31:c4:a4:13:8f:6b:65:80:d8:a8:
30:75:02:c2:cd:3c:59:7d:f0:20:07:2e:58:a2:bc:
d2:02:9d:c8:1d:6d:8b:7e:79:b6:9e:0d:48:04:97:
f8:6b:06:68:f7:8b:c2:01:22:9f:f3:84:10:22:b2:
c6:1f:32:02:3f:94:eb:40:df:88:b4:96:44:dc:4e:
1f:9b:3a:d4:bd:03:5e:10:54:d9:80:87:18:44:a8:
d4:84:b5:58:90:6e:61:9c:07:8d:29:4b:b4:43:a1:
01:aa:50:3f:d8:bf:ba:ed:4c:21:59:7b:c5:58:1f:
0f:2f:e9:41:71:d7:4b:37:b0:1f:31:1c:a5:7c:3f:
2a:74:ac:f8:78:e1:b8:01:94:35:51:fa:97:db:64:
c2:70:2c:e3:86:06:89:59:c0:8a:dc:30:28:dc:2f:
08:49:5d:8b:77:e0:95:1b:55:af:21:d8:69:3d:c7:
45:5a:a1:3c:f9:12:9e:8b:84:0f:4e:0d:cf:46:12:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DC:A8:07:04:F3:63:CA:09:55:25:FB:D7:4A:F8:32:22:C3:F3:15
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:42:bd:74:bc:9c:ec:02:73:2d:9c:62:ca:42:ca:4a:5d:2a:
0e:74:43:ab:7f:02:02:6f:cf:d1:4f:a9:95:cd:16:89:1d:eb:
d6:30:d2:f8:29:92:7d:c6:e3:f3:d2:e4:2b:e7:02:88:3c:81:
04:1d:49:ea:b4:b9:ef:32:5e:c3:81:28:21:40:51:6c:35:db:
ac:b1:b9:f7:7c:a7:8f:e9:1b:7a:3b:0b:aa:3a:e4:a3:34:b2:
94:58:4d:32:6c:b8:dc:aa:28:cd:cd:b9:7c:9b:2c:4a:fb:1b:
0c:f9:0f:88:71:19:8a:d3:a7:fc:70:fb:e8:30:bc:be:fa:95:
e9:a2:23:23:a7:04:2d:78:4e:4e:77:03:83:c9:23:56:ac:fc:
9c:68:87:84:d2:5f:d6:e6:95:13:b7:ba:c0:1c:a3:36:c6:bf:
0f:c3:35:97:86:72:cc:be:0d:87:09:2b:71:71:da:3f:98:c4:
c0:1e:e5:de:9c:04:c2:18:93:f0:e2:de:ec:a9:62:f1:c8:8f:
05:6b:4d:45:19:3f:03:4f:e7:69:25:0c:57:fc:48:56:2b:16:
ba:77:fe:20:c0:a6:ed:96:37:ba:79:25:e6:86:55:ee:b1:81:
b2:49:c0:e4:ae:c6:15:43:41:6c:a9:1a:98:74:f0:92:da:8a:
d0:79:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:07 2025 by rpki-client