Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
File: g8t2BW38QWNCZu0C0GkCA6dUoXs.mft (raw, json)
Hash identifier: Pn6fomiKER2aMLUmivC3D9SG32flnSeIDzipQjussjw=
Subject key identifier: 32:00:DA:55:DF:21:32:D9:17:28:96:66:CD:3B:16:76:E9:C0:D4:9F
Authority key identifier: 83:CB:76:05:6D:FC:41:63:42:66:ED:02:D0:69:02:03:A7:54:A1:7B
Certificate issuer: /CN=83cb76056dfc41634266ed02d0690203a754a17b
Certificate serial: 0199FDD8F0166185DCA5ECB37517F1161109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
Manifest number: 0197
Signing time: Sun 19 Oct 2025 19:01:16 +0000
Manifest this update: Sun 19 Oct 2025 19:01:16 +0000
Manifest next update: Mon 20 Oct 2025 19:01:16 +0000
Files and hashes: 1: g8t2BW38QWNCZu0C0GkCA6dUoXs.crl (hash: HdRGE5tzS+PJ/A2kQw+p8cxDVx5TdntbqIvUkt+RKDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f0:16:61:85:dc:a5:ec:b3:75:17:f1:16:11:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83cb76056dfc41634266ed02d0690203a754a17b
Validity
Not Before: Oct 19 19:01:16 2025 GMT
Not After : Oct 20 19:01:16 2025 GMT
Subject: CN=3200da55df2132d917289666cd3b1676e9c0d49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:49:c0:79:4e:2a:2e:29:2e:96:74:5c:79:
e7:c7:9b:5c:e0:87:d8:bf:8b:96:26:85:dd:bc:68:
67:4b:f4:c1:76:67:0e:98:90:f0:13:dc:fd:42:66:
35:02:8f:d9:8f:3f:b4:68:07:96:ff:ce:92:00:e4:
1a:4e:58:41:8b:49:58:46:78:f8:55:e9:d8:a4:c4:
23:e3:74:2d:fc:fa:63:f4:ff:c9:a0:e9:cc:79:a5:
ba:85:0e:76:60:74:86:3f:d3:ae:7c:10:59:8e:3c:
a4:3a:d4:37:77:a7:19:1f:da:40:94:61:3b:18:2a:
80:4e:d0:43:a5:c3:4b:53:4b:4c:75:52:31:1b:de:
79:66:c1:aa:8b:ba:e1:48:b5:39:07:e4:6a:1b:ca:
34:ee:7f:43:b8:88:98:62:13:91:de:f8:84:f9:36:
c4:c7:ae:7b:74:34:60:06:26:ff:12:51:df:2d:c9:
9d:81:d5:d0:84:2c:84:ee:e2:4c:8a:c5:0c:94:6a:
59:90:9b:2e:05:a9:71:c2:46:24:61:ee:7d:40:9b:
13:15:9e:b6:25:61:d7:c5:e3:f0:bf:a5:49:41:46:
0c:12:e0:0f:df:2c:5d:78:f8:ac:7f:f1:4d:ea:b2:
c5:56:06:c6:fe:fe:e6:1e:a4:38:b8:6e:5d:71:70:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:00:DA:55:DF:21:32:D9:17:28:96:66:CD:3B:16:76:E9:C0:D4:9F
X509v3 Authority Key Identifier:
keyid:83:CB:76:05:6D:FC:41:63:42:66:ED:02:D0:69:02:03:A7:54:A1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0d:c0:69:93:94:65:51:56:35:03:10:59:ce:07:04:d4:fa:
eb:e7:53:fd:ce:6c:06:b6:fd:94:36:4b:40:a1:d4:81:af:94:
fe:15:52:00:19:0e:d8:de:2d:7a:45:ae:9e:08:1f:67:15:49:
a3:61:25:84:e1:61:be:b4:14:c5:55:b1:c1:01:0e:9f:ca:c2:
84:32:1d:85:30:66:48:6d:18:aa:b0:0c:7b:ce:66:cf:4b:76:
0d:e1:6c:23:15:b0:27:43:36:5d:21:53:05:b7:29:4c:6d:73:
ed:e3:73:a6:d0:99:df:8c:32:33:b3:30:ff:c1:b7:fd:74:f5:
02:d1:8a:82:c5:6a:8c:35:48:5b:ff:fa:69:e9:30:a9:12:f4:
99:0a:93:7f:69:9e:05:54:42:bd:33:a6:a1:f3:9a:f3:22:fa:
f5:54:2a:bc:ab:82:76:11:64:00:4c:40:ec:0e:b0:65:c0:c1:
a0:60:e4:99:0c:f3:aa:41:6b:56:69:c2:52:19:92:04:7d:36:
e5:62:25:03:29:1c:e5:cd:ed:7f:37:24:91:51:db:8a:a5:5e:
f1:70:9c:26:5b:36:45:4d:9d:54:0e:d4:48:11:43:ab:27:00:
1c:23:19:d6:fc:00:b7:63:d4:77:fb:f0:d9:20:40:a2:58:44:
87:b2:2d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:47 2025 by rpki-client