Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
File: g-k154ofll0QiRUhXQ8Et2tzPlg.mft (raw, json)
Hash identifier: PWCDUHhnbVQ+bqjJfMQ87X9WOQksQdk/xHiMGUQps24=
Subject key identifier: 3C:44:BC:BE:C7:D8:90:C7:33:A8:BD:4F:20:C4:49:C3:FA:60:2C:9D
Authority key identifier: 83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58
Certificate issuer: /CN=83e935e78a1f965d108915215d0f04b76b733e58
Certificate serial: 0198D65F264E7C63088103F689ED65686FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: g-k154ofll0QiRUhXQ8Et2tzPlg.crl (hash: Ku8mda+GhJCnR5M58ClBE923dJ+fnZpySl7QeoVk6wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:26:4e:7c:63:08:81:03:f6:89:ed:65:68:6f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e935e78a1f965d108915215d0f04b76b733e58
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=3c44bcbec7d890c733a8bd4f20c449c3fa602c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0b:56:8f:c1:34:92:b5:37:45:25:d8:84:55:
a9:b7:99:86:1d:21:84:6e:c7:66:f9:5f:ed:fc:4d:
96:85:cb:c5:b4:ac:94:f2:68:19:59:ab:c2:11:bc:
32:bd:82:47:99:c6:7e:39:39:3a:5e:d1:f2:f9:45:
cc:4f:3d:0a:ac:1d:04:e0:30:a4:ed:40:8d:62:7e:
81:fd:fa:5d:e7:26:5c:33:99:cf:a5:37:8b:4d:cc:
7f:6a:44:c1:3a:4a:17:91:0e:aa:72:a0:d7:7d:5e:
fe:53:82:d7:c7:24:b2:64:0f:f1:cc:e9:76:c3:33:
e7:fe:2a:44:aa:7b:a7:d2:26:8b:22:ee:9a:e5:2d:
77:77:4e:c9:3d:81:62:eb:05:c4:7c:02:ab:3a:47:
7e:92:a0:e1:8a:e9:cc:03:a1:d1:b0:15:5f:cb:ac:
c7:4f:1b:e1:9c:07:35:50:a0:96:10:71:2a:fe:37:
d7:c8:65:5f:33:0f:ce:81:34:3a:c9:81:17:90:02:
7f:b7:e0:48:38:18:94:3b:5a:f1:c6:86:e9:88:b7:
84:01:31:59:85:43:7f:9c:52:47:08:42:73:bd:5c:
75:09:d3:8e:c2:58:24:85:b2:c3:6e:fc:63:e5:9b:
df:2d:16:e1:b3:10:ef:84:f9:6a:e3:3d:ee:68:59:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:44:BC:BE:C7:D8:90:C7:33:A8:BD:4F:20:C4:49:C3:FA:60:2C:9D
X509v3 Authority Key Identifier:
keyid:83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:65:cf:af:9f:f5:fa:bd:ae:53:a8:bc:13:1b:01:1b:4b:c1:
fa:29:31:91:20:bf:a9:6e:a0:c3:89:1b:54:97:df:49:b0:f8:
9f:7a:76:f2:e6:a4:0c:cd:d7:0f:47:8f:5c:51:6d:81:8c:a7:
95:9d:d0:c6:b0:de:19:86:92:40:88:6f:a2:ee:cc:ee:25:8f:
41:54:71:28:47:09:5b:02:93:84:08:49:f1:36:b3:29:19:4e:
a4:19:f9:d6:73:50:39:06:53:5c:d6:16:5a:c0:24:0a:52:be:
68:24:37:14:85:20:d1:33:f4:c0:75:08:ec:1c:db:a1:ed:a5:
e0:6f:28:25:db:69:65:b2:c1:9f:a5:4e:76:e8:b4:4c:a3:ed:
c5:74:02:bd:5f:24:f0:32:91:70:a9:92:af:8f:e3:f9:f1:fd:
df:4f:b0:9b:32:81:f7:dd:39:d6:92:5f:6c:64:64:43:db:71:
66:cf:ea:79:95:4c:8f:60:33:c0:26:47:c1:ec:b2:a4:8d:f2:
46:85:e6:76:67:82:fc:8b:d4:32:9c:0e:05:3f:77:b7:e7:a3:
36:36:4b:cb:cb:67:d9:d6:ee:9a:bb:d9:16:b1:80:e6:3c:3c:
33:ab:f9:79:ba:f1:50:b1:80:ed:0b:c4:8a:53:c9:35:ac:af:
a0:72:85:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:20 2025 by rpki-client