Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
File: g_j9dJOi_gViIttB7Wkwg7UOzPs.mft (raw, json)
Hash identifier: P7B6YGbanbA4hicNvFwk4tFO/d9G7MJPdRwAsuxrlm0=
Subject key identifier: 63:AA:6A:24:BF:54:BC:85:E5:E9:52:72:75:55:B3:B9:2D:40:44:C7
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Certificate issuer: /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial: 0197B77C5E8B357B7F892B7C3F5AD34A4AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
Manifest number: 0761
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: g_j9dJOi_gViIttB7Wkwg7UOzPs.crl (hash: q/0CxR+aqdzNnyfxgjDwEVKS4GeHb30tyYp2CVO7ips=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5e:8b:35:7b:7f:89:2b:7c:3f:5a:d3:4a:4a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=63aa6a24bf54bc85e5e952727555b3b92d4044c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:9e:bb:c1:e4:9a:90:27:ff:48:9c:97:bd:
a1:64:23:06:50:2d:cf:79:03:25:fc:98:cc:0b:4e:
2b:95:79:9f:bf:f9:3a:c3:a5:3c:f5:0e:12:9e:d0:
e7:01:b4:3b:9f:ba:27:73:69:c2:ec:29:90:c9:be:
b2:80:2e:c1:57:4d:99:41:ef:91:70:a9:97:da:fc:
8b:eb:aa:b4:af:92:13:f0:6d:2a:58:c0:57:f1:19:
c0:aa:f0:fb:93:0f:b9:4b:1c:72:5e:fb:06:e1:6f:
fb:e2:f3:3d:49:cd:5a:25:1f:20:98:6b:e0:b9:5b:
d9:00:a1:02:66:b8:68:11:c8:92:52:6e:ac:da:aa:
43:b3:4b:3b:23:65:2b:a9:ff:3c:ed:52:94:c9:77:
46:5d:d7:5e:6f:f3:ee:37:54:4f:89:4c:c9:79:42:
52:f6:e4:67:96:fa:b2:1d:6a:68:fe:0a:5d:65:90:
1a:02:22:a3:7e:56:93:50:3c:97:56:a8:f7:7a:14:
a5:a2:a9:50:52:25:c4:93:db:4c:5a:33:2c:4a:b5:
cc:2f:9a:29:62:47:af:d2:49:b3:49:7b:26:ab:a6:
a2:3e:b3:a2:1a:bf:f9:78:ab:b8:d4:dc:ab:a8:7e:
36:bb:05:68:75:ad:aa:43:65:dd:bc:94:43:c4:a1:
ad:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AA:6A:24:BF:54:BC:85:E5:E9:52:72:75:55:B3:B9:2D:40:44:C7
X509v3 Authority Key Identifier:
keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a6:79:a7:bb:f0:58:e5:85:a1:47:84:5d:17:50:4b:2e:e2:
36:e0:92:1b:0f:7a:bb:92:07:67:5c:8a:87:5d:b7:64:80:82:
5e:0d:1b:a5:8e:67:63:b9:b7:05:ba:7c:81:9d:53:dd:61:7d:
8c:a3:61:83:f6:1e:0c:12:e4:2f:83:6b:21:0e:a3:44:9c:f9:
93:ec:93:eb:11:20:d6:cf:aa:ba:09:f1:34:f4:eb:13:b8:86:
80:98:c3:88:40:3c:b3:ea:b6:84:a3:4b:e7:05:8c:4d:66:55:
7b:62:94:9f:9e:fb:42:da:1e:c0:82:a6:e7:54:3a:e1:c4:7c:
52:00:87:ac:00:f6:46:b4:61:7a:53:50:49:bc:33:c8:5d:0e:
d0:94:94:eb:ea:7b:04:ef:39:bb:89:f9:78:64:6d:37:2a:cf:
6b:d6:af:e7:68:56:42:7b:29:56:24:00:db:33:77:8e:4b:71:
7d:12:7b:28:42:af:0a:00:45:63:c3:95:80:03:79:97:ae:04:
5e:4f:15:d9:3f:a0:3b:59:01:a7:1b:6a:db:cd:f4:41:07:55:
58:6b:a2:e6:f2:c2:e2:63:71:a2:d9:fc:ba:f6:95:69:4e:61:
41:72:80:91:65:02:f4:5d:1f:1f:a9:77:55:7f:f8:25:28:22:
c2:60:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:54 2025 by rpki-client