Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier: vXd4lqAl29yv8vomH2ENER4zWP8JJjge7J4Lter5IuU=
Subject key identifier: 4D:2F:39:7A:54:0F:31:18:36:3B:60:5F:23:C2:BE:F0:EE:4E:5B:B5
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial: 0198D54E37409E695072A65840F2E520A1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:09 +0000
Manifest this update: Sat 23 Aug 2025 05:02:09 +0000
Manifest next update: Sun 24 Aug 2025 05:02:09 +0000
Files and hashes: 1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: VwqBGYN4lsU7yuDwFeeP1iib4T1zGZIjh313gmWcW64=)
2: tiFC6JqksrztinNgeHjMezLIyQo.roa (hash: AMO7U+NdmFNyNa76WinXG21mQKY3WubeaQslsZeF+HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:37:40:9e:69:50:72:a6:58:40:f2:e5:20:a1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Validity
Not Before: Aug 23 05:02:09 2025 GMT
Not After : Aug 24 05:02:09 2025 GMT
Subject: CN=4d2f397a540f3118363b605f23c2bef0ee4e5bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:7c:13:09:f4:9e:52:eb:31:bc:dd:56:c7:
3e:9a:a1:07:41:eb:54:88:c1:d9:bf:6a:b7:a2:5a:
be:80:06:f8:f7:69:8b:83:20:3d:ed:55:15:8d:e2:
41:8f:a7:b4:2f:2e:28:a5:1a:06:33:fd:22:f1:89:
5a:5c:34:05:23:69:01:fe:2b:cc:75:67:41:97:27:
8e:52:f3:b0:1b:9b:b1:2f:eb:11:9e:72:05:21:82:
2a:61:76:f2:0c:d7:36:fc:3c:9b:84:2b:4e:6d:bd:
b9:3b:5a:9d:da:b6:75:7c:f5:b9:9a:96:7c:cc:45:
f4:ff:6f:78:5b:66:70:67:20:61:e1:33:2c:b5:bd:
e1:50:36:ee:16:13:3d:cc:6f:fd:6a:cc:b8:2c:ee:
01:76:10:22:d5:3c:3e:61:25:0d:cd:e1:a1:c4:b8:
cd:4e:4d:1d:6e:60:b3:bb:30:3f:f9:9b:58:86:04:
d2:bc:4e:47:2e:68:c8:f8:11:32:61:2e:a4:cf:f3:
1c:54:35:90:1c:80:53:e0:c4:ab:8b:09:33:93:9d:
f9:82:37:e1:c0:0f:a4:f2:76:19:4d:c8:c8:2c:14:
67:b3:9a:ef:b6:18:f1:94:a2:f4:dd:55:71:65:ff:
3e:0d:30:6b:cc:d5:52:e2:4b:fa:13:8d:1a:ed:76:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:39:7A:54:0F:31:18:36:3B:60:5F:23:C2:BE:F0:EE:4E:5B:B5
X509v3 Authority Key Identifier:
keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:13:cd:f1:58:70:a8:f6:e4:00:ae:9c:27:7c:9b:ef:5c:40:
50:ea:c6:50:81:66:41:c9:d8:ab:1f:6b:0a:de:c6:db:85:1f:
e0:e6:d5:68:21:48:98:92:1d:6f:d5:3c:ab:c7:1e:f2:a4:be:
76:19:d1:b6:da:e7:1d:2b:e7:1f:47:48:52:b6:c8:9f:91:4d:
67:e2:4c:5d:d6:28:7f:49:00:56:57:98:7b:b5:a3:a3:98:89:
c6:d4:7c:72:d1:fb:ef:58:9c:57:7e:58:a1:34:86:1a:9f:fa:
37:87:11:49:b7:68:46:47:e0:b5:85:56:27:da:ce:59:33:16:
fd:b6:d7:2e:90:4b:b9:b4:1f:12:1c:b3:6b:35:e2:5b:4d:26:
e2:98:75:c3:1a:1b:60:f1:6d:b7:0c:25:02:2b:59:35:06:e1:
a5:4e:03:be:72:18:54:2f:d1:41:0c:a8:d6:a0:1c:97:5b:ed:
0c:f7:52:49:62:e6:c5:50:ef:14:a9:b7:1c:9a:a2:d1:8f:56:
b6:2e:f8:ff:8d:12:12:6b:63:78:aa:54:20:2c:f1:6e:74:17:
eb:49:7c:59:c3:47:ab:73:a9:f0:f8:a9:8b:ce:9c:06:50:64:
ec:7e:0b:2d:7f:c9:05:1a:39:a4:82:ad:f5:29:7c:1f:f7:ce:
7a:21:06:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:48 2025 by rpki-client