Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier: mf0cCDLoLEhvHgUwVZh3/62xoZf0VaL23XJjfOSQTF4=
Subject key identifier: BD:AA:9D:13:3D:9A:94:8E:5B:53:0A:B6:90:32:6D:03:93:FE:71:BD
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 0197B6A156B83988880EAAE18D687A106CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number: 04B9
Signing time: Sat 28 Jun 2025 13:01:56 +0000
Manifest this update: Sat 28 Jun 2025 13:01:56 +0000
Manifest next update: Sun 29 Jun 2025 13:01:56 +0000
Files and hashes: 1: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: JXKO0yiAqKY8TwjO8WHWbJ8+Rc6X0NO+ORknUjyXjrE=)
2: hQt6fLvth7yhZ_gy-eWM04fH0Vo.roa (hash: 5eRa0XK3oy+0XVVEDTa2qZR1cDbvimVVidnig16u0uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:56:b8:39:88:88:0e:aa:e1:8d:68:7a:10:6c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Jun 28 13:01:56 2025 GMT
Not After : Jun 29 13:01:56 2025 GMT
Subject: CN=bdaa9d133d9a948e5b530ab690326d0393fe71bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:0d:21:b9:2f:98:87:14:11:b3:1f:89:97:
77:75:da:3b:65:6b:1f:89:d4:f8:38:72:10:c7:f1:
86:ee:58:01:e2:22:1b:81:e0:3e:62:a7:50:8d:89:
31:43:28:91:e6:1a:b4:17:39:22:7c:8e:32:f2:78:
bb:de:8c:e3:06:f8:73:2e:94:c1:c7:b7:bc:2c:5a:
8a:dd:ad:e0:89:40:47:d1:62:e1:9d:3f:a4:bf:bb:
ca:ba:2d:40:a9:6c:84:8b:cc:4b:5d:0d:13:c1:d3:
dd:da:c6:9f:52:f7:06:f2:05:3b:a8:f6:de:38:b5:
0c:9a:0b:8f:05:d1:91:09:db:49:ed:9a:c5:d7:1f:
c7:1b:18:39:bb:0f:52:4e:4e:6d:21:04:5d:e7:7a:
2b:f9:b2:76:14:c4:de:0f:9b:6c:74:39:aa:df:4b:
a3:c9:aa:a7:d3:d6:8c:df:a2:08:09:bc:b6:65:e4:
71:89:08:43:b9:17:a7:80:7a:e5:a5:85:c2:01:b6:
e5:c4:3b:6c:ae:f1:dc:07:bc:c2:08:f3:86:c1:b5:
e0:29:ef:7e:2b:aa:65:fb:e3:a6:0b:da:64:5b:78:
0a:ed:e4:50:bd:c0:50:f8:6a:1f:b3:b6:73:f2:b9:
99:e2:e7:8e:c3:a2:f3:67:ae:02:54:09:02:cb:8b:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AA:9D:13:3D:9A:94:8E:5B:53:0A:B6:90:32:6D:03:93:FE:71:BD
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6f:ff:8e:85:eb:d4:52:92:88:92:38:66:24:fd:bb:02:77:
95:28:e0:69:6e:ff:3b:61:f8:5a:50:78:0b:5e:be:e2:85:07:
7e:20:cb:2f:92:5c:74:e2:9a:2c:8d:66:ae:9f:62:9b:4e:57:
54:ac:af:00:b3:8c:b4:b9:d9:83:de:98:b3:c7:fe:5e:3f:bd:
f5:55:c6:98:4d:78:9a:91:ad:34:cd:f2:68:a4:33:3a:b7:ca:
67:5b:3b:6b:46:ea:13:38:95:4e:d1:8c:d1:09:32:e2:53:a9:
55:69:00:2d:3d:f5:cd:a3:fd:0b:d1:4d:d3:6f:54:8b:ba:a0:
fc:45:1b:40:c9:d2:53:73:9d:2c:93:20:0a:35:c4:ed:8e:ad:
4d:a5:96:65:eb:62:7d:c0:ad:01:6d:cb:e0:fc:b2:08:c7:34:
ee:c1:d0:12:84:9c:d9:6c:87:e0:8d:e6:e2:c8:50:bc:52:b7:
01:3b:3c:f7:58:f9:b9:71:f0:17:74:ff:a2:19:44:53:a6:0f:
13:a4:81:14:71:1c:2a:74:4c:41:6c:10:b6:4c:c2:af:85:9d:
42:a5:8d:77:ec:0c:4f:91:2a:80:9e:49:d9:b3:fd:23:4c:d3:
ee:0c:1a:c8:04:25:fa:69:81:02:84:76:50:a3:30:1b:bf:86:
8f:78:40:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:00 2025 by rpki-client