Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json)
Hash identifier: IgT7CjFbKp2I5lmL2fHMw5OLQ75eRPe9KrKThxTies0=
Subject key identifier: C2:55:0B:AE:A6:BF:72:C6:4C:F3:9B:69:93:85:FC:C9:BC:5A:31:0C
Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9
Certificate serial: 0198D54DF8CB833FCB28E8DEDD96CF0FC05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:01:53 +0000
Manifest this update: Sat 23 Aug 2025 05:01:53 +0000
Manifest next update: Sun 24 Aug 2025 05:01:53 +0000
Files and hashes: 1: JRNBLXBQWgTuBg1-jZxrM7iYCuQ.roa (hash: A/80zWYF3RYk10mzwst52/4Qz1yzT35DfBM28lDeN+s=)
2: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: 7FktyGZOrNPuYwoy23hBPF4lFaw8wM6RV4i+4IBlAoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f8:cb:83:3f:cb:28:e8:de:dd:96:cf:0f:c0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9
Validity
Not Before: Aug 23 05:01:53 2025 GMT
Not After : Aug 24 05:01:53 2025 GMT
Subject: CN=c2550baea6bf72c64cf39b699385fcc9bc5a310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:68:79:fe:70:18:3b:5b:b1:ba:43:9a:59:5f:
a3:fe:59:cb:31:97:26:bd:95:67:5b:f6:27:55:08:
3e:54:74:de:bf:b2:83:39:f9:9c:14:92:d7:8a:85:
87:0c:d7:28:f4:41:5b:82:58:93:02:06:60:73:4f:
a4:df:26:84:ff:c9:1e:74:30:7c:1e:e3:df:f6:c4:
d6:69:87:64:86:88:93:4b:4c:7e:55:58:0f:00:91:
3a:e3:55:de:69:9c:db:35:a9:10:53:7c:34:09:ab:
03:6e:17:25:f0:2a:f6:3e:3e:ff:51:6d:0c:06:e3:
83:b8:e7:49:f7:b9:65:13:b2:e8:d4:94:9b:08:90:
56:29:8b:28:fb:8c:9f:5a:f0:5f:42:ed:ea:81:2a:
13:fa:c7:ec:41:21:61:cc:03:d7:55:47:4a:b5:87:
c1:32:f0:65:af:54:bd:70:28:1f:4c:ec:3c:2d:ba:
f6:dc:7b:3f:80:13:9a:ca:99:f2:5f:97:d4:43:81:
72:bc:d5:86:29:12:ff:47:ad:5d:ed:c6:99:71:ef:
16:0d:31:c5:74:cb:e9:30:c8:0d:b3:29:e7:6b:27:
6d:91:1b:f0:90:fa:0b:07:17:34:47:c0:8a:ba:9a:
30:5b:66:5c:da:08:1f:24:8d:9a:9b:62:6c:85:6d:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:55:0B:AE:A6:BF:72:C6:4C:F3:9B:69:93:85:FC:C9:BC:5A:31:0C
X509v3 Authority Key Identifier:
keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7f:0f:fc:d2:be:d2:fc:cb:f0:0e:7c:0e:27:72:25:62:34:
44:a8:69:c7:db:24:ec:df:17:12:c4:15:b0:99:45:dc:16:f1:
d7:c0:f8:1a:4d:12:31:dd:46:83:93:d3:47:39:1f:91:1a:7f:
ae:07:c0:39:8d:c5:a8:ac:95:0b:ae:96:76:14:d2:d2:e9:49:
ac:a6:7c:62:bf:23:6d:9a:dd:7a:ef:3b:6e:08:5b:40:19:c5:
4a:92:bd:5e:5b:9e:35:5b:3a:4f:1b:cf:9e:6c:79:00:67:67:
49:df:ae:15:93:08:15:d7:39:30:ea:90:50:d0:8f:6b:63:0f:
c3:f7:1e:a7:d6:a1:5f:eb:ef:79:3f:25:3a:1e:39:5e:78:ea:
fc:b2:10:95:30:79:32:b4:42:27:08:10:c6:69:6e:f0:2b:34:
83:e8:3e:7b:9b:90:aa:ca:63:04:d8:45:59:d1:6e:3e:01:46:
99:93:9c:07:c9:ef:f2:3b:42:56:df:fa:e2:e9:90:3a:01:7a:
4e:56:a7:f6:ad:9b:1f:b4:f9:65:99:61:6a:03:3c:e1:fd:26:
df:3d:ab:93:ab:62:53:8e:2a:3f:11:ba:68:46:88:96:1d:b0:
ba:c4:92:11:5a:43:f8:27:f7:21:a6:91:8f:96:75:d3:03:b7:
de:43:6d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:07 2025 by rpki-client