Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: 1iMc63SVl5/ZQZHum5oNBnNpMHqYW0vwgm1yuTfER1c=
Subject key identifier: 8D:1C:7D:BE:B6:00:67:F5:37:E3:26:2F:E2:43:DC:C3:1B:E8:84:D3
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 0197B7453AEBB14557613838F857530934EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 124F
Signing time: Sat 28 Jun 2025 16:00:56 +0000
Manifest this update: Sat 28 Jun 2025 16:00:56 +0000
Manifest next update: Sun 29 Jun 2025 16:00:56 +0000
Files and hashes: 1: O_Wh7DXILbeq2pJ7lbo670WPHcI.roa (hash: 9coM5+TGNwqDkXBfhIBTqYZ9wRzRhg/kPk42ppbDqL4=)
2: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: bcOjjEvhXGkJSOysGZDNXB49kWu0UNGLz6/Y/Y/eHwI=)
3: wurW9HScl5J6v9_HgJ6iitJiiYY.roa (hash: M+hjHy8mpb8e2lyHR4XP7A/L1pzrBL572LaM0RnZ+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3a:eb:b1:45:57:61:38:38:f8:57:53:09:34:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Jun 28 16:00:56 2025 GMT
Not After : Jun 29 16:00:56 2025 GMT
Subject: CN=8d1c7dbeb60067f537e3262fe243dcc31be884d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fe:d2:a2:99:3e:85:4f:4f:8f:24:ee:81:b1:
9d:45:50:48:18:a1:7d:cb:d7:44:7f:15:38:96:f4:
a3:2a:91:d1:7e:15:db:5a:23:1a:fd:6d:5c:65:65:
36:e0:ec:15:ca:bc:47:4d:66:96:85:b0:38:33:3c:
3d:d0:49:04:f2:bb:20:e5:6b:e9:db:4a:c2:75:80:
b5:6e:de:b2:8c:23:86:7b:dd:56:43:5a:49:65:3c:
1a:54:c6:c2:f3:4b:b2:48:e6:dc:fb:b1:be:3a:2e:
a4:52:98:68:e4:e3:23:a3:7a:53:b2:d0:28:ae:5d:
a9:23:77:e8:9a:2a:a1:64:ae:f8:32:1a:89:e2:9d:
dd:31:36:26:01:09:7a:ce:7a:2c:9a:06:df:fb:d4:
20:37:57:0d:76:89:7c:c5:04:4e:93:a8:2b:66:f1:
ac:3f:67:cc:cf:81:61:b8:16:b4:05:bc:3f:99:7f:
b2:49:e9:40:13:11:11:3f:85:50:aa:0c:ab:2c:57:
e6:e2:a1:82:55:4b:7e:32:94:db:75:c5:82:e7:ca:
a3:1f:9b:33:0f:30:bd:bd:65:eb:36:ae:d6:27:f4:
1a:00:6d:b1:17:ad:0f:86:e6:90:76:c5:b8:3d:3e:
54:c0:13:7a:d2:c6:a2:7d:2d:76:4f:39:e8:d9:9d:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1C:7D:BE:B6:00:67:F5:37:E3:26:2F:E2:43:DC:C3:1B:E8:84:D3
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:14:ea:3d:10:87:3f:f7:fe:ab:03:ef:c9:97:e7:c7:ea:2c:
1c:b2:4d:ec:3f:db:e4:53:f4:92:67:4a:6d:39:6c:90:45:0d:
73:f7:7c:ab:8d:59:97:6a:b2:ee:68:30:49:f9:58:87:40:2e:
9c:5e:c4:5f:20:15:13:b5:82:d8:0a:41:45:f5:01:19:52:91:
ac:58:fd:01:3c:1e:4b:8a:83:96:51:fb:dc:f9:75:71:33:b7:
2e:f2:03:8d:6c:fa:8b:02:c4:6f:7b:2f:84:a0:51:c8:5a:31:
6b:55:5e:b8:f9:f3:02:1b:9f:59:9d:04:ed:11:de:4e:1d:11:
48:85:d6:fd:76:29:82:49:34:5e:5c:ef:13:5f:d8:87:ed:83:
f7:0e:5f:b1:4f:3e:f7:b2:3f:8e:93:49:61:d5:1c:e4:16:59:
df:2a:de:8e:26:c5:89:c7:5d:5d:7b:56:86:1d:e2:51:03:03:
95:74:ec:e1:99:60:8e:8f:6a:de:ad:e8:79:60:63:6e:06:23:
d0:38:f9:25:9b:2b:69:ba:3a:b9:2b:f8:16:38:13:7d:f3:dc:
26:5d:75:96:ea:26:92:73:92:a2:4e:d5:31:05:e3:25:d1:e4:
a6:63:8c:04:21:d7:b4:f4:60:dc:d1:ae:53:de:e1:77:37:80:
77:c5:69:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:30 2025 by rpki-client