Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: ocMwhWFknkTboKdOqTodZnkA1LUkGs9sEUY7s67ck0s=
Subject key identifier: 45:3C:03:21:E0:89:90:FD:7B:68:60:CF:1E:C5:D4:C7:D1:1F:94:76
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 0197C64AAF9360C472CDE3DC907459B6E675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 0F56
Signing time: Tue 01 Jul 2025 14:01:12 +0000
Manifest this update: Tue 01 Jul 2025 14:01:12 +0000
Manifest next update: Wed 02 Jul 2025 14:01:12 +0000
Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: 8SY7L7aEe4Ysr7+bK2g1HCFvBRRjpFGlKetAUcb+gPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:af:93:60:c4:72:cd:e3:dc:90:74:59:b6:e6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Jul 1 14:01:12 2025 GMT
Not After : Jul 2 14:01:12 2025 GMT
Subject: CN=453c0321e08990fd7b6860cf1ec5d4c7d11f9476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ed:63:ce:ff:95:af:c1:84:42:9e:bc:7d:fe:
cf:3d:ce:cc:4e:1f:a3:60:63:c8:50:5c:2d:f8:74:
ec:3a:84:03:6f:20:de:72:0d:f4:2c:32:f0:28:06:
ea:50:b3:38:e5:e3:78:c1:df:cd:0e:44:86:b9:34:
de:28:a7:fd:be:74:d2:89:f5:3d:bc:26:cd:b3:ac:
52:f5:c4:0e:e9:e0:7f:76:6b:c5:da:22:7a:71:78:
67:1f:bf:28:43:e4:0f:93:6e:da:02:e7:09:6a:ef:
82:69:a7:05:95:70:72:08:4e:0e:e2:d1:4e:0a:96:
4a:79:50:c8:43:13:8e:4f:e0:6c:69:52:5a:e3:c3:
c7:f6:45:43:03:ea:aa:13:b3:68:e8:a4:13:59:3e:
01:fc:c3:bd:18:c3:57:57:63:90:56:ce:13:1d:62:
13:45:30:2c:31:01:03:58:a5:df:17:69:59:fa:be:
02:b7:40:f4:e0:50:d3:8c:dc:b7:f6:5d:cb:81:08:
44:a7:33:9c:74:12:e2:52:34:e0:b6:26:54:56:61:
68:2e:a8:1c:28:39:99:76:ca:b8:46:de:8a:24:c4:
f9:a8:69:77:88:7b:d2:b2:b2:ac:06:f3:eb:9c:08:
74:de:87:55:d4:01:91:43:8a:a1:94:af:31:8f:03:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3C:03:21:E0:89:90:FD:7B:68:60:CF:1E:C5:D4:C7:D1:1F:94:76
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:21:3d:6c:e8:09:f3:59:be:b2:9d:25:59:9d:b7:1e:c1:ec:
23:5f:95:43:58:17:18:38:35:29:4a:ba:cd:b4:80:cd:d2:49:
ac:c0:52:13:6c:f7:8b:2b:69:55:8c:0d:4a:ee:fb:07:5e:de:
9f:cb:38:8a:16:54:03:bc:d3:92:d5:b3:50:c9:b0:fc:62:e5:
3c:35:23:90:a2:8f:68:09:49:12:62:6c:94:c8:4b:1e:19:ba:
b3:21:78:5d:d6:28:35:7b:53:e9:95:8a:ce:f1:05:05:e3:49:
d9:a0:88:94:b8:02:fa:c4:63:20:85:e7:7e:b9:74:4e:b8:76:
fb:05:33:63:1f:95:ee:12:9d:19:d6:1e:7c:40:e4:00:60:13:
eb:8a:97:82:b4:2c:74:90:4d:a1:91:00:5f:0d:35:e8:0d:5c:
02:7c:a1:b3:70:65:a5:d3:98:94:7b:62:90:ec:53:ef:cd:0c:
8e:a6:14:2f:b7:d1:51:0f:cf:96:69:1b:bf:f6:1c:61:e2:71:
1d:20:82:a8:a8:f4:fb:10:89:7d:ae:a8:b8:78:07:40:93:c7:
8d:3d:2b:a1:e8:4c:23:b4:8a:fb:e7:f0:6d:12:40:da:62:ad:
fc:bb:d4:79:c3:32:97:17:8f:3c:e1:50:7c:87:ba:36:ef:70:
58:ea:f1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:46:39 2025 by rpki-client