Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
File: g9gpJjs8X2OWgDf56GP9D9AeeGk.mft (raw, json)
Hash identifier: A385JZW0LS3EHDGKzb87bnoTrH/GalRBvQvzrAaK+so=
Subject key identifier: 0A:C4:24:AF:FD:66:83:79:6C:7E:4B:23:66:35:E9:B5:69:FE:B0:C3
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Certificate issuer: /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial: 0198D4DFE3725FCA2857821BE01C801C7CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
Manifest number: 120A
Signing time: Sat 23 Aug 2025 03:01:39 +0000
Manifest this update: Sat 23 Aug 2025 03:01:39 +0000
Manifest next update: Sun 24 Aug 2025 03:01:39 +0000
Files and hashes: 1: KyWdAlshbj0x1AA1uUx-ZQPp9Zk.roa (hash: WDABDJxxu4elmiEAWMv89c2ma+ic8Jsi7E3Q6vmgEYc=)
2: g9gpJjs8X2OWgDf56GP9D9AeeGk.crl (hash: RacYbfPty3asfjSvHEYAslIF6OrFocvo9FZxIe2vRwc=)
3: hkjDx-2GOhGp7IPuQmrLBkkB_0U.roa (hash: 4gfS7chtfvvAEHSEdJQzQiuhcE63Qr3QGw7uAtNLDMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e3:72:5f:ca:28:57:82:1b:e0:1c:80:1c:7c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Validity
Not Before: Aug 23 03:01:39 2025 GMT
Not After : Aug 24 03:01:39 2025 GMT
Subject: CN=0ac424affd6683796c7e4b236635e9b569feb0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:ee:28:50:ba:06:80:31:3b:21:bd:b6:59:
78:91:c2:f1:d7:47:0e:03:99:2e:8c:de:0c:50:43:
24:b2:6d:73:0e:35:61:4d:f6:9a:46:ac:82:6b:76:
72:ff:7a:94:42:c6:96:07:dd:32:14:2a:d5:29:96:
9f:b3:b6:40:a2:ea:40:38:72:8d:c1:6e:16:1f:06:
80:11:bc:7a:e1:27:74:19:35:8d:c5:c3:11:0f:d9:
d4:fa:bd:20:20:84:d2:cd:b8:53:18:b2:ad:10:7c:
86:fb:71:00:c5:14:21:3f:07:13:7c:ae:6f:b5:4f:
8d:c3:8b:2b:6a:b1:11:5a:f1:37:11:2a:21:32:65:
b9:32:b1:5a:76:94:90:a7:85:81:68:8a:9e:6f:9b:
34:a6:06:99:8c:3c:ac:bc:97:dd:a4:c4:81:ac:a3:
e8:61:79:99:31:fb:c1:0a:9e:e7:a0:d9:37:e0:e8:
54:1d:93:4d:1c:2d:27:a4:d7:c6:bf:73:cb:4b:b2:
61:64:f9:48:57:ff:da:db:4f:09:d6:c4:36:2a:4a:
ca:99:3b:a2:1d:58:c1:fa:ec:c2:3d:d1:ee:bb:fe:
77:09:00:ad:04:47:4a:3e:b8:48:ac:f3:5d:ce:e5:
3b:c2:f1:06:22:5f:8c:94:b2:8a:1a:b4:07:f5:3d:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:24:AF:FD:66:83:79:6C:7E:4B:23:66:35:E9:B5:69:FE:B0:C3
X509v3 Authority Key Identifier:
keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3c:eb:ae:c5:6d:7d:57:fc:c6:23:11:37:be:49:66:ac:cb:
a5:94:df:45:52:bf:cb:a1:8b:d6:3f:b0:6f:a9:ca:ea:04:f2:
f6:90:47:be:76:40:56:d9:a1:ca:9e:56:1f:9a:6e:bb:4e:72:
92:5b:33:e2:9d:99:af:9e:31:f9:7b:22:28:60:ee:8d:d2:cc:
cf:1e:93:84:2a:bb:36:9e:03:ab:3b:9a:74:7d:11:a8:af:87:
d3:cf:f0:0c:67:52:d8:79:53:f3:7f:ec:eb:a6:2f:76:b8:8c:
55:51:e0:f7:a7:9a:8d:74:aa:d1:a3:27:86:03:b9:55:3b:88:
e0:21:e3:ed:44:37:c6:a3:21:68:f4:17:f7:1a:f5:38:32:e3:
83:8f:70:8a:a1:e1:19:62:09:2d:bb:8e:12:2b:07:ea:3c:ef:
d0:34:f4:3d:52:eb:6f:8b:77:ac:66:20:e1:97:50:c2:42:d1:
74:c5:92:82:09:ae:53:b3:68:ef:ed:49:b9:7c:7d:14:3b:7d:
b9:48:14:cc:0e:3a:6e:76:b9:d8:3c:63:75:7d:f7:47:37:dc:
6f:28:b4:0d:eb:60:32:57:9b:96:f1:44:0b:16:2a:6a:d7:4e:
63:18:5e:82:c5:51:87:a3:46:51:2e:a9:cd:83:2f:bc:86:90:
77:e7:37:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:20 2025 by rpki-client