Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: ixYbKNxfAmWblv8TNkT8vJ68A6/zPIKEHxXU4mFkZNY=
Subject key identifier: BC:19:80:23:B0:9D:9C:9B:91:1C:07:24:FE:9C:AA:30:D4:8F:B0:8F
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 0197D0600349201B8D31A8E339A44794C54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 0F28
Signing time: Thu 03 Jul 2025 13:00:42 +0000
Manifest this update: Thu 03 Jul 2025 13:00:42 +0000
Manifest next update: Fri 04 Jul 2025 13:00:42 +0000
Files and hashes: 1: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: 8zwT10I2/7VAOOdkx2813yluGaSPLpx5vuwT4vMsXgU=)
2: q_rL_wFzPAM2YYi3BD5DV-movBM.roa (hash: /Sn84qQYAJwMH4nFNeAxdZuxTOPDKe5EpdIqdCovILg=)
3: rsYfCDwusLsrJbhFacpTz-HDjfU.roa (hash: O6JB/ggb5jt1mvOF+3NkLkH3JGPJ5nijBG0kU9AI6Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:60:03:49:20:1b:8d:31:a8:e3:39:a4:47:94:c5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Jul 3 13:00:42 2025 GMT
Not After : Jul 4 13:00:42 2025 GMT
Subject: CN=bc198023b09d9c9b911c0724fe9caa30d48fb08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:f3:4a:1c:91:30:27:b7:b6:e4:a5:3e:f4:
a0:58:d6:6e:ba:13:82:b4:18:9e:40:77:6b:32:5c:
b6:45:04:2b:df:09:49:dc:cf:c5:5e:98:02:01:8c:
1a:3f:75:ec:97:2f:f9:91:c0:34:b6:2d:82:ed:a7:
ec:87:61:72:27:d9:07:55:b5:8b:58:6d:34:d2:26:
22:ba:90:27:30:33:9e:7f:e3:a3:38:9d:b4:a2:84:
e4:be:e6:6f:cc:56:6e:72:93:2d:31:cd:ce:90:d7:
b8:b5:ee:0c:88:84:88:26:fd:62:2b:68:0a:e2:d0:
af:9e:92:0c:0c:d8:46:83:c6:5f:8f:f6:22:6d:69:
3e:bf:4f:1e:c7:09:19:fe:c1:23:d3:36:50:bd:cb:
af:d6:2c:ed:7e:4b:a7:9b:6c:bd:3a:b9:aa:ea:d2:
68:f2:ab:29:2a:63:a5:bb:14:0d:8a:be:55:36:8f:
4a:d0:c7:6b:4e:fd:33:45:93:cd:0f:91:38:58:84:
33:fc:13:f5:01:74:9c:c9:b9:20:70:dd:a3:fd:4a:
28:a5:a5:82:1f:d7:86:e7:cc:49:9e:b5:05:ee:c9:
cb:3f:c6:a3:2f:89:3b:e1:24:22:e5:88:3a:ab:cc:
39:1c:e1:bd:32:67:3a:d6:2a:16:20:a8:13:35:67:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:19:80:23:B0:9D:9C:9B:91:1C:07:24:FE:9C:AA:30:D4:8F:B0:8F
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bb:9a:29:5f:41:26:cd:f2:54:bc:c1:c5:60:21:a8:af:65:
d5:d9:88:bb:6a:b9:7f:f4:5b:cc:65:0c:25:b8:93:93:32:74:
9a:76:24:1d:11:6e:e3:c7:3a:9e:9b:9a:ad:b6:b2:2c:34:d7:
93:ae:bd:a5:9c:d6:68:c9:45:93:5f:74:8a:f4:6a:95:fc:b8:
71:6b:aa:a2:82:f7:c8:36:57:b2:f6:2e:a8:f0:9e:07:fd:72:
ee:e1:b3:d3:6d:64:ff:c5:10:30:97:85:d9:cc:8b:92:fd:17:
a0:c4:93:15:87:e8:ae:75:83:20:e5:a2:a9:c3:e0:cd:79:07:
a8:6f:e1:a2:b5:44:0e:6b:8a:b2:5f:40:f7:35:8b:2f:c7:2b:
30:4b:c3:57:76:6f:cb:43:fa:68:5d:15:9c:9a:3d:52:cd:2f:
06:60:c3:0f:f8:01:5e:e6:3b:1a:c8:9a:cb:48:3d:9a:47:11:
f9:a8:4a:42:cb:9b:ec:70:e1:69:77:8d:2b:41:a7:94:8b:a1:
c3:43:1e:bb:95:82:63:b2:be:08:c6:b8:99:3a:c5:2f:d1:ab:
1f:7a:6c:7a:70:45:0f:1c:57:e6:2c:b1:26:3a:1b:91:c0:c1:
1d:c9:4c:65:8d:89:18:02:91:19:99:33:d1:39:e2:94:cd:0d:
9e:b6:81:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:41:47 2025 by rpki-client