Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: A/i4yTJOIAfz6onC0cBVgs5hK07TA7LvC+ZNdO1An9k=
Subject key identifier: F5:FE:8A:81:FB:E1:A1:E7:C5:12:68:08:BF:BC:A8:D8:16:8B:BC:9A
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 0197B8213398301DA23C4C3B199A0D133DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 04B3
Signing time: Sat 28 Jun 2025 20:01:12 +0000
Manifest this update: Sat 28 Jun 2025 20:01:12 +0000
Manifest next update: Sun 29 Jun 2025 20:01:12 +0000
Files and hashes: 1: 5hNBi4pOh8tuQ2-hbUmZAAcoj0g.roa (hash: bvf6+FGQm47HOMj5UevrWk1RDXzOnQeu8ZcjR9Z2g1E=)
2: VnV_NALClcugVnJ8tM0-ssB-Wvo.roa (hash: i5vFppJbIjgrNIbkedUgagHC+ZhmU+v4i2sVl3277z4=)
3: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: Op4tHiIlo8DKFPuYuoZvc2tjrbWeJyLEHfdnBTsfXPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:33:98:30:1d:a2:3c:4c:3b:19:9a:0d:13:3d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Jun 28 20:01:12 2025 GMT
Not After : Jun 29 20:01:12 2025 GMT
Subject: CN=f5fe8a81fbe1a1e7c5126808bfbca8d8168bbc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:fb:68:b4:e3:0d:b2:b6:b2:61:dd:33:06:
80:84:b7:9b:99:21:11:cf:9f:fc:c5:d7:11:f2:5f:
94:60:b0:16:e9:aa:97:fd:fe:e6:50:4e:01:34:c8:
af:17:6e:91:96:06:c7:c8:30:72:48:d1:f5:ae:70:
ad:78:ab:e4:2e:a6:0e:dc:63:de:bb:a7:80:08:d2:
8e:62:09:ad:82:33:c3:9d:2c:89:80:9b:08:be:11:
9c:15:6b:07:09:ce:0b:bc:1f:f3:97:b4:15:c1:e0:
17:ca:a9:43:b2:a6:07:59:64:16:b9:20:a9:b0:22:
45:b7:d1:ca:95:b8:84:69:d9:99:8c:77:28:96:81:
08:cf:e2:58:5c:b1:6e:ff:cf:aa:cf:7b:51:6d:36:
59:12:8d:42:f7:64:ad:99:77:ac:e4:0e:45:f1:c1:
30:7f:30:c2:ed:ef:25:47:2e:72:0f:e3:a5:e5:87:
3b:44:94:ad:d8:47:64:07:20:74:11:14:30:fd:00:
96:9d:37:60:5d:6a:9c:0b:d0:b9:1d:c3:e4:e5:dc:
5b:9f:d7:de:e5:57:7d:83:08:78:af:fc:7f:d5:aa:
41:00:5e:c2:6f:0c:2c:96:40:81:99:52:ca:b3:94:
36:b2:4a:ab:76:1c:f5:d4:eb:51:f1:1b:4c:b2:7e:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FE:8A:81:FB:E1:A1:E7:C5:12:68:08:BF:BC:A8:D8:16:8B:BC:9A
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7e:88:54:a5:40:3a:d4:f2:72:ff:ec:df:58:e2:18:ab:5f:
a0:a5:3f:93:44:9a:f9:79:f3:cf:e1:d8:77:d8:ca:68:52:b3:
06:85:1b:bc:e7:06:cd:ab:9c:35:5c:63:9f:63:78:96:58:83:
47:f2:43:0e:79:1f:5e:a7:64:60:54:ac:51:79:f5:c8:07:a1:
47:46:e1:0d:bc:91:7f:4c:d0:b2:89:e1:73:4e:8a:78:83:47:
37:1e:54:78:dd:a9:31:87:fe:de:e5:59:d2:cf:ee:dc:32:44:
4a:2d:e2:ad:9d:bb:18:40:70:4c:f6:78:11:79:5f:97:3d:1c:
17:a4:b9:72:35:2b:03:e4:ad:c0:5b:36:8a:6d:dd:b3:76:82:
13:f6:d4:db:63:cb:28:6e:e7:1a:84:2a:79:0b:18:59:ff:79:
3c:7e:1f:41:fc:76:13:1a:6c:9d:45:5a:8f:86:24:44:a5:7f:
e6:13:50:bc:a1:73:72:cb:38:8c:4a:02:60:62:0e:48:52:23:
f3:af:dc:9c:64:6f:88:58:da:76:9d:69:b9:66:f0:0d:86:21:
d2:af:1d:88:e5:7e:89:76:54:99:16:ff:c6:04:ed:55:de:1f:
9d:b3:df:9c:ec:91:61:bf:2c:82:86:4a:2f:2a:39:ee:11:bb:
cc:c3:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:06 2025 by rpki-client