Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier: P2XUjB0P8IpIF7wPf3numjXB76tdCm9Kfsgzy7wIULk=
Subject key identifier: 13:DD:07:5B:73:D7:1F:86:DC:47:52:D7:C9:3C:FC:CD:36:D8:EE:BA
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 0198D4E0420F827A5CC36A1EDD22F391C0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 03:02:03 +0000
Manifest this update: Sat 23 Aug 2025 03:02:03 +0000
Manifest next update: Sun 24 Aug 2025 03:02:03 +0000
Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=)
2: bTDx6BY2_bieAYAIiAFgdyKIF9k.roa (hash: qCwMntOeFKqowJO7prWM5i0O+TccBmu2GDJdiZbI22w=)
3: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: oLee/PI7hIOdlo69/9Oggg2RXRcBEYY5snhzpfGY1JU=)
4: kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa (hash: eW1HiHgHjju0NsKcsTSvzT72THKILOyyGeew75G0SSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:42:0f:82:7a:5c:c3:6a:1e:dd:22:f3:91:c0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Aug 23 03:02:03 2025 GMT
Not After : Aug 24 03:02:03 2025 GMT
Subject: CN=13dd075b73d71f86dc4752d7c93cfccd36d8eeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:3d:f1:94:1e:a1:c0:6e:15:84:50:74:67:
b8:a9:fb:95:74:3c:d5:79:74:f2:ec:e9:71:b4:83:
9f:21:82:ba:c7:13:2d:29:fe:41:89:74:05:e0:4d:
37:b8:8f:a7:27:74:c8:87:80:b9:69:70:ba:b3:2f:
eb:54:a6:67:4c:24:a5:16:2e:48:bf:61:e1:d9:f1:
02:8c:d6:34:79:2e:cf:95:25:11:ca:b0:66:8f:c3:
aa:8c:90:c7:b4:b0:bc:16:ce:1e:87:36:7f:34:d0:
f5:b8:38:71:ba:ca:1e:65:0a:8f:c2:29:cc:9a:0c:
2e:c4:2c:6f:16:06:a6:d4:e6:9c:89:1e:b0:fd:44:
ae:16:e9:59:f1:7d:40:70:ca:7c:5d:9d:8f:9a:33:
74:b4:e4:b2:87:a4:02:72:69:a2:82:32:e6:ab:29:
b3:15:74:4b:a3:b1:3c:7e:c5:25:6a:ff:65:61:4c:
20:09:1b:5f:18:2d:d3:0d:d0:91:ef:f7:15:63:ed:
74:14:21:0f:5d:4b:00:60:15:49:5b:04:99:51:de:
10:08:9d:4a:ea:c1:69:ad:fd:dd:f8:04:4b:ca:8f:
76:6c:b0:c2:de:2d:d7:97:6d:ba:84:c6:60:93:82:
ae:b2:61:bf:82:9d:be:3c:43:d9:f2:cc:9c:e5:c1:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DD:07:5B:73:D7:1F:86:DC:47:52:D7:C9:3C:FC:CD:36:D8:EE:BA
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:44:e2:3a:7f:3b:65:0a:11:c1:81:8c:58:06:19:9a:15:cf:
56:85:38:6a:c2:64:de:24:05:81:2a:f8:dd:0d:93:41:3b:db:
52:a0:8f:d8:44:5c:ca:1c:d5:ea:86:84:69:11:eb:9a:5f:8c:
b1:43:42:84:99:b8:43:44:26:a3:d3:89:a0:99:18:66:b6:36:
68:ad:0c:6c:0f:cf:2c:50:bc:ee:db:5e:ad:02:ff:f5:3f:b2:
6c:ef:89:ed:cc:d4:a4:6e:fa:6f:0f:59:6c:41:38:5f:eb:a3:
24:eb:d3:7e:ab:3e:bf:53:2d:01:c2:7f:14:56:e6:e6:16:bc:
49:37:f2:25:e1:e4:cc:c7:80:4b:a6:c7:ab:76:ee:e2:4c:7a:
2e:08:bc:01:ab:13:dd:84:4b:f9:24:55:bf:d8:61:02:12:cd:
2c:40:b9:d1:bf:17:69:23:b6:33:7f:d0:d8:96:8f:d5:9f:76:
b7:ed:cc:63:79:1b:19:69:9b:01:2e:41:67:d8:0e:dc:02:b4:
3c:11:42:50:b3:68:f4:99:01:93:4b:3d:5a:df:0f:28:f0:6a:
ff:9f:39:af:c7:d5:0d:8e:74:37:bd:10:75:fa:d0:c9:c7:bc:
a8:07:fb:81:63:0b:97:70:12:75:6f:04:66:b8:0f:2c:4e:d7:
ae:74:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:31 2025 by rpki-client