Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: hKwIvyb22ET7b5MrbEkOa0BxfYa1U0CrzY9uTlcEWwA=
Subject key identifier: 36:7D:B9:4E:FC:F0:01:9E:70:9B:B4:4A:1E:16:CD:94:70:EF:B8:98
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 0199FC8F4391B648467E35594C4EF775EF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 137C
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: O_Wh7DXILbeq2pJ7lbo670WPHcI.roa (hash: 9coM5+TGNwqDkXBfhIBTqYZ9wRzRhg/kPk42ppbDqL4=)
2: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: 0yoNqieH3RAOa84hFZsSetctLu2r3sNpPsvm0V4R8cI=)
3: wurW9HScl5J6v9_HgJ6iitJiiYY.roa (hash: M+hjHy8mpb8e2lyHR4XP7A/L1pzrBL572LaM0RnZ+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:43:91:b6:48:46:7e:35:59:4c:4e:f7:75:ef:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=367db94efcf0019e709bb44a1e16cd9470efb898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:20:79:49:14:c0:d7:a8:3f:ef:59:17:56:
4b:95:f3:a0:2f:7d:d1:7f:b1:61:b7:9e:3e:bc:e9:
d6:f0:0d:c4:80:2e:9d:a6:32:1a:53:a3:32:b7:b7:
e1:b0:2e:5e:97:a7:40:ee:5b:51:b5:16:42:72:b6:
20:cb:e7:c0:e0:e0:a3:b7:1a:bc:3d:1f:94:2a:41:
5a:bd:e4:77:ee:e3:d2:2d:44:5b:d6:c5:9c:11:32:
d6:c0:aa:49:53:19:a5:c7:f6:d6:ea:ac:88:41:83:
17:8d:1e:52:69:15:f5:5f:38:33:4d:62:5f:7f:32:
dc:d9:6f:07:07:82:88:07:e4:e8:f4:28:11:b1:11:
cf:96:29:b1:2d:03:20:09:d5:d1:ea:6d:c1:85:10:
4d:4a:e3:81:73:b5:c0:b7:83:ce:08:23:42:94:82:
5c:4e:70:91:0c:ab:c0:b5:8a:d5:66:cc:9d:3c:4a:
61:44:63:50:7e:e3:76:2c:cf:56:27:56:f5:a5:77:
d4:90:08:c2:83:d8:b7:7b:82:ae:f6:87:20:7f:5e:
50:eb:16:4f:2c:7e:fe:2e:9c:cd:1c:b2:a7:85:31:
5e:72:d8:bd:0c:fa:f8:33:4c:16:d6:78:55:58:c7:
db:24:fc:20:a0:84:4f:4a:80:b4:04:82:a6:4f:20:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7D:B9:4E:FC:F0:01:9E:70:9B:B4:4A:1E:16:CD:94:70:EF:B8:98
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3e:d1:35:2f:21:0e:17:e5:d8:a1:61:7a:a3:53:67:a3:2b:
8a:04:25:bb:7a:84:bd:ee:e1:51:e0:7b:f0:f7:4a:c3:e7:2c:
41:ad:63:47:2e:c7:b9:be:86:5c:dd:16:25:0d:49:26:63:06:
61:26:c7:14:8a:c1:75:eb:8e:64:0f:36:57:62:79:fb:af:27:
9d:c8:4e:00:ea:4c:c4:00:9d:0e:c9:ec:e4:ca:86:7f:73:65:
fa:8e:76:6c:f3:c0:83:72:f5:f4:4e:ef:27:9f:09:ea:fe:99:
67:72:55:f9:13:bd:10:99:0d:50:e4:52:a6:e9:f4:8f:c0:f4:
f9:e2:fd:19:68:da:74:a3:0f:16:52:19:5d:ca:34:3b:9c:c2:
27:5b:8d:1d:cf:e4:58:37:d0:d1:fe:d6:0d:76:1a:e8:75:a8:
14:00:69:5d:05:7c:e5:df:a9:5d:3a:da:e7:8a:78:48:85:dc:
d7:f7:74:3d:55:24:9b:45:98:a4:72:7f:98:33:d7:5f:fa:ed:
b3:66:76:25:e5:59:70:22:6f:69:90:23:af:c9:5f:c7:1a:9a:
18:e4:a0:21:7a:be:91:0f:48:64:90:8e:11:d4:60:e7:93:aa:
a7:a9:f3:d5:4c:13:a1:45:3a:13:4b:af:8c:5d:90:65:76:ef:
17:64:67:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:45 2025 by rpki-client