Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
File: g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json)
Hash identifier: JZpAMNmnU2AldazGty+j5br98wrVajgMfisvXxJRHFA=
Subject key identifier: 0A:B4:A9:28:B3:40:B1:97:AF:98:8B:EB:E0:E7:7C:23:7B:9C:47:A1
Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
Certificate issuer: /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Certificate serial: 0197CCBAE20422C4A49B3816C9E42FA0D38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
Manifest number: 12C8
Signing time: Wed 02 Jul 2025 20:01:28 +0000
Manifest this update: Wed 02 Jul 2025 20:01:28 +0000
Manifest next update: Thu 03 Jul 2025 20:01:28 +0000
Files and hashes: 1: DobE_GDwj6LglTHnTGTNO49HHQg.roa (hash: BUWVPFb7JdXBEYo3ia6vx/6Nxlayi+TmF4VDb5fiITc=)
2: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: IC2tGSGmzPTnvcBiz0pfGCxQmSTZM8XLsx5G94qfc1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:e2:04:22:c4:a4:9b:38:16:c9:e4:2f:a0:d3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Validity
Not Before: Jul 2 20:01:28 2025 GMT
Not After : Jul 3 20:01:28 2025 GMT
Subject: CN=0ab4a928b340b197af988bebe0e77c237b9c47a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:7b:66:0b:1e:55:eb:2a:40:f4:a1:27:75:
f1:77:12:64:65:f2:8b:81:05:3b:3c:68:c0:07:65:
9a:6e:20:2d:12:70:f5:22:e0:39:96:c2:b4:ed:21:
51:a9:88:0f:69:cc:0d:b5:91:b4:55:22:dc:b3:32:
4e:15:89:92:50:1a:d5:1c:77:31:15:9f:b7:e2:22:
83:11:25:c5:e8:fb:4f:8b:bc:60:15:31:7e:31:0a:
c3:65:04:7e:ee:38:a8:f3:2e:4e:25:ca:8b:cb:02:
46:61:f0:ac:ad:8b:66:4b:70:0d:fe:a3:3b:18:9b:
49:ba:9a:b7:11:52:d7:63:c1:8d:a0:c5:df:f2:32:
77:4d:ba:5c:c2:c7:f6:65:16:78:2d:06:ed:07:f4:
9e:65:70:7c:9f:b8:f4:86:00:33:cd:f7:11:1e:f6:
0e:a1:29:2e:31:5c:6e:2e:68:12:6f:1b:48:7d:f4:
b0:54:82:86:64:08:26:48:c3:aa:27:d0:64:7a:a7:
8f:c4:fd:90:47:e6:15:2b:27:7d:94:c0:e9:62:b7:
23:d3:7b:29:41:80:95:90:44:62:94:96:59:3c:53:
94:f7:99:2f:d8:5f:83:62:40:76:f2:79:f4:63:2b:
db:96:96:b7:55:fd:d2:88:fc:06:f4:2f:8c:c0:37:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B4:A9:28:B3:40:B1:97:AF:98:8B:EB:E0:E7:7C:23:7B:9C:47:A1
X509v3 Authority Key Identifier:
keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:70:fc:5e:06:d2:54:d5:54:e5:00:e7:f3:e6:f7:49:a2:54:
4b:6d:74:b9:1a:17:2a:f9:e5:d2:8a:47:ba:e7:c0:ac:16:cd:
ae:bf:49:f7:2c:18:9f:bf:4c:30:b1:9e:e7:b9:5a:61:55:bf:
8c:65:48:c9:12:7e:9e:bc:95:0b:00:48:f0:af:4f:b1:92:36:
81:15:8f:e1:1a:0f:55:91:99:ea:2c:d7:9d:29:1d:33:64:a3:
60:40:a9:d5:e5:c1:5a:e8:80:3a:d5:9b:8f:76:05:b9:08:cb:
a1:a5:06:7f:92:2c:29:f6:50:50:51:54:97:30:d7:7b:fd:ed:
4a:4a:5c:ad:95:3a:ec:c8:db:c1:3c:bd:da:e5:d2:19:e9:67:
56:eb:e1:88:3a:bc:24:fa:0a:81:69:4d:ec:62:8b:8a:18:41:
95:81:b8:20:0e:e4:00:76:7b:2f:ee:1b:eb:c0:93:ce:6d:5e:
5c:6b:d0:f4:46:ef:98:07:ab:52:6b:b5:c9:4a:ac:3b:a7:a6:
23:91:97:a2:ce:5a:9d:54:4c:48:de:9e:71:9a:0e:46:4b:5a:
02:b3:e5:bb:d7:3a:e1:18:9b:54:9a:82:75:eb:37:1c:09:b5:
6c:5a:47:9a:ce:9e:b5:15:6c:11:1c:cb:ef:db:6a:06:c2:8d:
74:22:ac:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:27:06 2025 by rpki-client