Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
File: g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft (raw, json)
Hash identifier: TLr4Jr85JFW1AiURcl2E75EUBJlc8D18BSFJVzoARxI=
Subject key identifier: 83:37:45:D1:4B:9E:E3:D8:CF:3B:0B:ED:DA:C8:8A:33:F9:40:75:B6
Authority key identifier: 83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
Certificate issuer: /CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Certificate serial: 0197B88F3ADE19B59385218DF09F041E0A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
Manifest number: 8D
Signing time: Sat 28 Jun 2025 22:01:23 +0000
Manifest this update: Sat 28 Jun 2025 22:01:23 +0000
Manifest next update: Sun 29 Jun 2025 22:01:23 +0000
Files and hashes: 1: g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl (hash: Xu0chZOEhnIsP3c7iVKlhA1MLMnxh0z35gs1TBh955w=)
2: msDEeS6sASlV5Nrug60HOmxHAjw.roa (hash: td9s2j9cTMVJ/N4A25CfBZ5lbq+TNEGFP43f11ycPe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:3a:de:19:b5:93:85:21:8d:f0:9f:04:1e:0a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Validity
Not Before: Jun 28 22:01:23 2025 GMT
Not After : Jun 29 22:01:23 2025 GMT
Subject: CN=833745d14b9ee3d8cf3b0beddac88a33f94075b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:29:4c:9c:28:c0:51:36:b0:e7:70:6c:9c:7f:
be:13:8b:c7:39:0c:c8:8b:98:e3:c5:f2:d5:88:05:
24:9e:47:11:7b:92:c1:5b:c4:40:44:25:41:4a:29:
2b:e9:13:1f:bd:17:58:8d:e3:eb:ff:a0:68:2d:97:
63:9a:ef:88:57:09:58:d8:84:15:2b:c6:b2:6d:9e:
70:08:f1:92:24:8e:9d:48:5e:82:27:ed:78:25:c5:
81:cb:97:a0:96:61:f9:4a:29:4e:fb:af:ce:ef:25:
f0:87:b5:00:7a:fb:5e:67:37:d9:8c:6d:ef:ff:53:
77:1f:a1:4f:a1:be:ad:10:c7:73:5c:b4:01:a4:50:
d5:ac:ab:8d:d1:29:08:d7:97:99:6d:10:dc:40:90:
2d:47:a4:43:7d:8d:25:18:c7:ea:98:a8:73:38:06:
29:2d:02:38:ab:43:0d:74:6b:18:db:85:de:77:ef:
97:50:3b:7d:e3:ba:a2:f1:bf:9e:13:8d:99:e3:cb:
5c:95:04:a8:3a:a8:09:25:ff:e5:66:ec:bc:65:7c:
8a:8f:da:68:b4:5e:82:7f:54:76:46:2c:91:79:a9:
8b:2f:13:27:14:7c:5d:50:44:be:8e:b5:13:5b:b5:
f4:45:56:b3:57:d0:2d:bc:af:37:11:24:03:e2:7e:
1f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:45:D1:4B:9E:E3:D8:CF:3B:0B:ED:DA:C8:8A:33:F9:40:75:B6
X509v3 Authority Key Identifier:
keyid:83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:92:f9:96:18:c6:e9:b2:87:d0:89:a1:c8:33:7e:0b:e8:54:
06:47:31:70:d9:0c:f3:5d:12:91:69:4f:88:80:8d:6a:50:92:
f3:66:09:04:80:ef:60:7c:59:dc:80:15:cd:da:5a:05:bc:86:
05:a9:68:da:9e:5a:de:cc:7a:97:d2:6d:b8:82:d9:00:82:f0:
11:3c:c4:6a:aa:9e:00:88:ad:47:87:15:8b:63:35:ef:03:44:
f8:33:87:cb:ed:54:53:4d:c2:fc:1d:13:9f:d9:4a:28:df:54:
7c:e6:18:58:1a:31:5b:98:2f:d4:f9:2b:f7:98:9c:be:9f:1d:
e9:8e:30:f9:f1:77:51:0e:ef:8e:59:22:15:b6:3d:0e:2a:a2:
85:08:6b:e5:c6:53:d3:ce:53:f8:1e:38:c2:50:44:f7:9d:da:
0c:b5:3a:15:7e:b9:ca:e6:b8:bd:21:b6:25:7d:97:f4:df:af:
71:29:b3:9b:cd:97:f6:a0:06:4d:78:f5:65:8f:63:d3:de:07:
e2:f7:60:11:b4:da:77:5a:13:d0:68:35:fc:ac:f2:a9:92:81:
21:16:96:5f:33:b2:12:1e:0b:49:1d:a2:23:ad:75:a5:a2:f9:
39:12:62:53:ad:eb:fb:c1:ae:d4:ee:73:78:cd:13:3d:84:c7:
55:c4:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:07:07 2025 by rpki-client