Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
File: g_j9dJOi_gViIttB7Wkwg7UOzPs.mft (raw, json)
Hash identifier: EJbJolwKgB3kSNEPY/08VO/L7maJcXdIB9PQ7YABYdU=
Subject key identifier: 23:56:22:CD:02:0A:34:D6:AE:A9:72:C8:6A:38:DC:A1:D3:BB:7D:18
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Certificate issuer: /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial: 0198D54E79524D071FE7E5280E4C92E49B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
Manifest number: 07F5
Signing time: Sat 23 Aug 2025 05:02:26 +0000
Manifest this update: Sat 23 Aug 2025 05:02:26 +0000
Manifest next update: Sun 24 Aug 2025 05:02:26 +0000
Files and hashes: 1: g_j9dJOi_gViIttB7Wkwg7UOzPs.crl (hash: 9nw6X75kgpp1IQo1iVM9PxCV60Sx3jTaUf2hbYWsfAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:79:52:4d:07:1f:e7:e5:28:0e:4c:92:e4:9b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Validity
Not Before: Aug 23 05:02:26 2025 GMT
Not After : Aug 24 05:02:26 2025 GMT
Subject: CN=235622cd020a34d6aea972c86a38dca1d3bb7d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:96:4f:d5:54:4c:b5:9d:8e:44:97:83:c0:
b4:a8:02:b5:50:20:b1:16:f2:8f:15:7c:cd:46:f9:
87:0d:d4:91:42:01:e9:ab:37:71:d7:77:d7:27:e7:
84:18:b5:20:b9:da:4a:98:fc:ba:c3:11:33:5e:28:
df:03:ee:ac:c2:dd:85:82:d3:e6:b1:34:69:a0:93:
57:de:99:91:de:c8:f4:9e:fe:d8:a6:51:32:16:b3:
0f:05:8f:48:cc:ac:6c:e1:e8:a7:15:10:3e:76:36:
c2:d6:a7:3a:2a:db:f3:33:6c:86:ac:9b:97:df:bf:
aa:da:82:50:f2:57:69:3d:e5:89:0f:ba:1c:04:15:
fa:c4:ac:d6:63:e1:b8:d4:e6:e4:dc:43:d8:02:48:
af:15:cd:97:b7:ae:0d:7b:e5:0d:d4:3f:7d:f4:1a:
41:30:e4:79:19:8a:64:52:30:99:37:20:a1:39:38:
da:5a:07:28:77:69:1d:ec:8f:77:03:4e:10:6e:3a:
82:6a:48:9d:0d:fa:42:f7:e8:76:10:6a:f9:7f:3c:
18:b8:70:c8:c9:94:14:9b:fc:20:a4:24:86:59:9b:
55:e7:37:5b:89:30:64:c5:61:78:9e:0e:9c:d2:ad:
2b:0a:f5:5c:70:d7:5b:d9:e1:a6:4d:2f:75:57:85:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:56:22:CD:02:0A:34:D6:AE:A9:72:C8:6A:38:DC:A1:D3:BB:7D:18
X509v3 Authority Key Identifier:
keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:70:39:61:81:90:cf:c1:f8:c0:65:58:f5:6d:4f:ea:68:e9:
62:b6:23:a4:a7:77:32:05:e8:39:0a:47:67:a5:76:7a:2a:61:
f7:c6:a1:9e:eb:36:03:89:a4:57:1a:94:35:08:75:38:a8:b5:
70:cb:c4:99:8a:55:90:55:49:82:d1:10:90:5e:da:09:6e:62:
5e:9f:9b:ad:3a:63:6f:79:20:d9:f3:67:85:9d:8e:ec:ea:38:
8f:f7:8e:ca:74:d7:d9:af:52:82:d6:b7:87:fd:35:23:37:d9:
5e:e7:d8:62:89:01:55:c5:e2:9f:76:88:e4:eb:4b:38:e7:80:
59:3c:42:96:e0:b7:3e:09:3d:b3:9f:59:40:25:d0:67:49:da:
4a:11:01:b7:02:2b:69:73:29:ed:23:68:eb:58:cb:f3:06:ee:
ef:e2:e6:79:94:ff:23:a2:28:ba:bb:6d:62:4d:c8:3f:8d:0f:
80:08:8d:e0:c3:70:73:50:e9:35:5e:6c:72:ce:28:8a:14:87:
80:d0:3f:5f:54:f1:4f:78:e9:bf:ab:38:04:2e:e5:16:70:c0:
c6:1b:8d:9d:e4:3b:67:5d:bc:45:a4:7e:fe:15:30:40:88:ee:
f5:5e:dd:cf:c8:89:07:af:50:27:87:c6:68:16:d6:16:48:f8:
e7:6f:78:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:44 2025 by rpki-client