Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: W93WUd+8iVWUQihHvYIA8JFgy6HwZr0kDX35kSz+aME=
Subject key identifier: FD:DC:38:30:1A:A2:66:CD:37:ED:CB:54:96:E5:A0:13:26:FF:CA:04
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 0198D4A7FCABECB0D69E0ECC309D9135560B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 0FE2
Signing time: Sat 23 Aug 2025 02:00:35 +0000
Manifest this update: Sat 23 Aug 2025 02:00:35 +0000
Manifest next update: Sun 24 Aug 2025 02:00:35 +0000
Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: rNUbnLNqk5y5Coyd6ahgyq+4PkZileGTpy/b7MQwadI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:fc:ab:ec:b0:d6:9e:0e:cc:30:9d:91:35:56:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Aug 23 02:00:35 2025 GMT
Not After : Aug 24 02:00:35 2025 GMT
Subject: CN=fddc38301aa266cd37edcb5496e5a01326ffca04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:71:f6:52:98:dc:dc:f5:e0:fd:76:8e:b8:
07:f3:66:3d:22:c3:b4:b0:f7:29:f0:75:d2:ec:0b:
bb:ba:bc:6e:87:a3:98:fa:91:30:79:e9:53:fb:58:
13:c7:94:74:02:12:75:24:10:0b:8b:a6:e7:e3:bd:
69:4e:3c:ae:fb:ac:d4:0f:13:89:55:d2:75:81:62:
66:8c:62:49:cc:84:0b:76:ee:b5:8d:ef:b9:84:05:
d2:33:58:09:76:b3:08:79:3a:40:9e:0f:3b:ea:8b:
85:f6:8f:de:fb:53:4d:b4:9f:58:f5:52:8b:1f:d4:
d6:e7:fa:a1:42:68:f4:a6:98:17:ce:4c:ce:1d:94:
d5:49:7e:d6:e2:cc:10:4e:7a:65:c5:02:f3:f4:b4:
39:42:bb:1d:99:03:cd:f0:b3:c5:c2:d8:1b:96:cf:
34:dc:52:0f:06:01:79:1a:d5:b5:a4:7e:7f:e4:8c:
85:c3:3e:12:0b:6c:9b:90:9d:44:5d:ac:50:fa:8d:
ed:d6:0b:00:ba:2d:ab:f9:42:c6:d3:cb:78:28:db:
61:34:7f:fe:ca:c3:ef:b5:81:dc:61:6e:78:4c:6e:
06:36:71:81:99:1f:d2:d4:84:a2:d6:d8:4a:d9:66:
80:1b:95:44:11:2c:4e:65:84:4a:63:0e:df:11:f2:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DC:38:30:1A:A2:66:CD:37:ED:CB:54:96:E5:A0:13:26:FF:CA:04
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a0:da:fc:b0:85:08:01:6c:69:8f:d5:8d:af:84:60:04:00:
79:32:c8:91:fd:65:04:3f:3d:84:47:d9:27:97:9f:0a:fc:41:
ed:40:53:ea:01:a0:59:df:6c:c7:29:82:62:a5:87:99:f0:7d:
d0:3e:4f:03:54:65:9d:84:d4:79:d3:12:d9:5a:ec:a1:8e:c4:
6a:6a:ee:59:94:c4:66:d5:5b:9d:99:37:18:e8:02:fe:a0:36:
43:a7:3f:55:ae:80:0d:d0:ef:a1:70:5e:78:11:bf:71:c9:21:
9b:96:e1:86:6b:5c:b5:3f:d6:6c:80:61:05:12:4c:b5:5f:5e:
b6:66:62:b6:01:38:56:ff:f2:b8:03:4d:b7:98:39:29:6c:a0:
77:20:74:55:63:a4:40:ac:4d:d6:14:f9:fa:a3:80:33:6e:37:
52:7f:2a:aa:f9:b5:3d:5b:f0:9a:fa:9e:3e:26:09:17:08:9a:
e1:2f:78:f8:5a:41:ac:9d:c5:83:dc:33:a8:85:b7:14:21:02:
0d:50:9a:0a:bb:a0:58:fc:5a:06:87:e7:eb:e0:23:40:be:9b:
ba:f1:eb:68:0d:7c:58:79:70:a6:a9:db:d7:ba:b1:e1:80:a4:
7a:a9:05:6f:6f:ef:ab:8a:32:1d:48:61:f7:f9:ad:c0:c3:51:
3d:39:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:41 2025 by rpki-client