Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json)
Hash identifier: bvAhnVtS3cLfbQWkPS8ADDrOkzhGcy6dEGAWNFegmf8=
Subject key identifier: 49:DF:14:E8:7D:E7:77:0C:BF:5A:7D:75:B2:CB:9B:5C:8F:A2:D5:2D
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial: 0197C4251239359BAF69B545A1D5E6431BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
Manifest number: 1137
Signing time: Tue 01 Jul 2025 04:00:53 +0000
Manifest this update: Tue 01 Jul 2025 04:00:53 +0000
Manifest next update: Wed 02 Jul 2025 04:00:53 +0000
Files and hashes: 1: UGrR__PyRipPzdjGAZBG7BppT8M.roa (hash: iYevY5/kIjNolOqwa16r2Chgd87dJ+qeTiEz7+9fEjM=)
2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: PY/rEPM217KAaZHtesyMg6PRAqx3b51upKWXpU6/eh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:12:39:35:9b:af:69:b5:45:a1:d5:e6:43:1b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Validity
Not Before: Jul 1 04:00:53 2025 GMT
Not After : Jul 2 04:00:53 2025 GMT
Subject: CN=49df14e87de7770cbf5a7d75b2cb9b5c8fa2d52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:af:d3:5d:fc:61:8b:17:29:cc:e4:96:91:
d8:09:b9:79:8e:56:a6:b6:c2:1b:e4:d6:25:47:3f:
1d:9f:15:be:67:00:83:8e:4e:7c:34:53:22:2b:30:
d4:1a:d5:33:75:ce:50:1c:f8:f3:3e:75:dd:2d:8e:
b8:53:ce:d2:48:0f:00:e5:55:11:06:47:af:83:81:
50:d9:a2:4f:1d:3a:ac:14:0a:26:cf:2c:75:f8:3b:
5a:69:7b:33:12:8d:e6:66:63:0c:d3:2d:9c:63:1f:
0d:0e:ce:b5:0f:21:ba:46:7e:c4:de:81:85:c0:10:
dd:1d:1e:9a:49:ee:28:d3:49:76:6f:e4:71:d6:4a:
8a:1e:43:85:b2:16:1a:14:60:23:ca:bc:dd:35:7c:
a6:fd:57:6d:92:65:89:24:fe:ee:fe:56:a7:13:3b:
96:1f:50:c1:e4:73:10:a2:8e:3b:90:85:69:e8:d8:
9c:7b:38:5e:b0:ea:f8:95:e6:90:99:5e:c2:69:47:
a2:af:33:eb:43:1b:24:23:b8:47:ad:9d:ae:17:2f:
d9:90:79:dd:7b:2c:a7:11:f8:4b:a7:72:35:cb:d9:
07:52:f8:66:84:fc:e5:28:d8:60:f8:8c:4f:e6:c8:
67:ef:6c:db:11:8f:23:21:7f:0e:b9:6c:37:5e:7a:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DF:14:E8:7D:E7:77:0C:BF:5A:7D:75:B2:CB:9B:5C:8F:A2:D5:2D
X509v3 Authority Key Identifier:
keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:dd:3c:f8:0f:4c:ef:4a:eb:21:76:4a:4c:d9:07:c1:38:d0:
59:cd:8c:78:49:34:09:a0:f2:5a:98:a4:e0:14:ff:78:2a:8c:
0e:98:93:0d:23:f9:c7:14:a5:8a:62:69:d9:36:39:e3:52:f5:
61:5e:9b:bf:62:5e:33:84:a1:9a:f0:b3:90:09:28:a6:10:6f:
fb:c7:b6:a0:9d:7a:6c:38:ec:6e:39:81:85:64:f1:2d:5b:98:
20:30:36:b8:fa:e8:8e:4e:46:9a:9a:e5:8e:f2:fb:48:0a:7f:
be:58:1f:e5:4c:8a:a8:e5:38:ba:7e:95:b7:4a:70:5b:ff:e8:
22:84:38:50:90:8d:09:8c:0c:46:28:aa:90:62:5e:e2:8b:91:
90:c1:32:2d:29:30:8f:12:c5:e2:9c:4e:8f:34:66:c6:b2:c4:
92:b7:17:89:81:4a:7d:e7:89:ad:68:29:a6:4e:df:02:5f:d6:
b2:98:17:dd:d6:54:b2:39:54:15:43:99:c5:e5:da:8c:2c:49:
f8:54:63:bd:b4:94:41:35:ee:d8:bf:de:de:49:3f:1f:26:67:
90:a8:4a:76:f8:0d:57:24:67:78:cc:68:52:7b:5c:9d:a6:35:
72:f6:68:2a:13:08:a5:4e:44:ba:26:e6:d5:76:86:51:f4:19:
c5:b2:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:20:23 2025 by rpki-client