Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json)
Hash identifier: p0JaGVwr5qMGa/OlPdr2W5GDg/XRE7Z31oqAk2IzRGg=
Subject key identifier: BB:99:D3:80:53:34:BC:B1:44:41:FA:BD:A3:0D:7B:26:8D:60:AB:25
Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Certificate serial: 0197B88F617040C644BF0FA80854CB567DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
Manifest number: 10CE
Signing time: Sat 28 Jun 2025 22:01:33 +0000
Manifest this update: Sat 28 Jun 2025 22:01:33 +0000
Manifest next update: Sun 29 Jun 2025 22:01:33 +0000
Files and hashes: 1: W3rPvUkflCFuxF0ug4dEXW6S2Kc.roa (hash: 3G2s7uZotQeaUTGQLu0pJAmRVfSsV9ARqhmMaAPkMDY=)
2: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: xu0+PGaoI5EhMEb5tEgAmIH7RrOf/gdhsn5l44VTMd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:61:70:40:c6:44:bf:0f:a8:08:54:cb:56:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Validity
Not Before: Jun 28 22:01:33 2025 GMT
Not After : Jun 29 22:01:33 2025 GMT
Subject: CN=bb99d3805334bcb14441fabda30d7b268d60ab25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:a5:44:5a:0a:79:6d:f5:72:7d:5d:a8:54:
77:e7:69:58:e4:a5:3c:71:19:75:88:52:0a:d9:71:
d0:8a:1f:54:2d:39:10:d2:d3:02:76:79:ff:6f:8d:
4e:40:4f:77:68:19:8d:7c:c0:df:97:64:12:e5:ba:
c3:bc:ce:d1:e5:d8:96:f8:f7:d7:73:3e:06:fb:d0:
75:63:cc:70:b0:50:79:21:d4:3f:ad:36:32:0b:67:
55:25:4c:85:7f:de:1a:44:7e:83:78:6b:00:e7:05:
66:1a:df:9f:99:13:30:94:55:3c:1f:7c:55:3b:65:
e3:9b:e9:be:d8:a7:be:41:33:24:16:33:5f:5b:27:
43:f8:4a:5a:55:13:d1:8e:d8:a4:50:bf:e2:fe:51:
b2:b1:ad:69:9d:90:8d:2f:49:b2:76:47:d4:76:b4:
1b:19:5c:35:29:ae:52:66:8a:be:8a:69:7e:5d:71:
60:4f:d8:2c:ad:05:ff:f6:da:00:bb:6f:22:35:7a:
0b:0c:66:49:59:b8:49:89:28:13:7e:e8:a6:0a:a0:
41:6d:d5:cb:ec:e3:38:3f:32:fe:1a:60:4c:c5:85:
ea:c5:a4:0d:83:cf:83:76:c0:47:74:ba:59:3a:d9:
48:3f:fb:ec:fb:b2:2b:57:e3:38:81:1d:56:d7:a0:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:99:D3:80:53:34:BC:B1:44:41:FA:BD:A3:0D:7B:26:8D:60:AB:25
X509v3 Authority Key Identifier:
keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e1:fc:20:95:cb:b2:6b:0f:25:8a:d4:e7:78:bb:bc:80:78:
44:f4:b1:e7:95:63:52:2d:44:69:89:d7:3c:ee:dc:2b:66:96:
bc:fe:bf:1a:39:07:36:a3:53:cb:fd:05:fa:83:64:51:74:87:
75:3b:50:da:cd:cf:47:64:a1:4b:bf:c0:af:41:85:e3:dc:10:
86:2b:d6:c5:0d:cb:9c:5b:82:b3:2e:44:13:1c:8a:7b:51:75:
5d:c6:13:72:f4:62:c1:16:04:ea:e8:72:09:66:c3:d1:6f:9e:
a1:61:3e:48:1a:53:8d:41:6b:78:11:7c:a0:f2:8f:b4:74:2e:
96:c5:6b:bd:2d:fd:f8:bc:20:04:3f:46:e9:fc:b5:4f:73:30:
11:cc:24:95:c7:0f:38:00:f8:97:f0:c7:66:df:ec:4e:1a:bc:
24:8b:e9:38:81:55:18:d5:a7:76:60:e2:3b:1e:97:e0:69:17:
3d:41:5c:0d:51:e2:87:34:03:d7:c1:db:9b:08:17:21:29:15:
d7:d6:63:a3:1f:f4:de:ea:1d:0c:1d:9f:59:9c:11:dc:18:6e:
c0:3d:04:00:cf:69:04:d1:33:91:2b:f5:6d:ac:34:9b:aa:9d:
79:8e:72:e5:7f:22:23:0e:d6:43:c1:1d:e0:d4:cd:fc:c7:4b:
53:03:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:52 2025 by rpki-client