Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier: 88nqQVxWRLIwHYG8xoC396QXQFXPkCBmv5gawe19tEc=
Subject key identifier: 1D:B2:36:D4:BD:12:21:EF:03:A8:A1:28:DE:16:A3:E4:3E:27:E3:BD
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 0197B7EA6095913896449AB0EB9593F0B704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number: 0C24
Signing time: Sat 28 Jun 2025 19:01:19 +0000
Manifest this update: Sat 28 Jun 2025 19:01:19 +0000
Manifest next update: Sun 29 Jun 2025 19:01:19 +0000
Files and hashes: 1: 1-eVtiZIJZtejkcxnJZbMOuqtkvM.roa (hash: /dozujzBruht/lOgqwCLtQNFBrpieolWDy5kZ5Mel3s=)
2: 56FwlKZ7KIhARLPC6HlmmMABBnU.roa (hash: Z+1GZvGlxeBEP1crVQ4oVXjpJKgbOm4WDdf1clBCOOM=)
3: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: V7iGPYLVwO962LszvYuutkYFECBjr0263F7XRe703z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:60:95:91:38:96:44:9a:b0:eb:95:93:f0:b7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Jun 28 19:01:19 2025 GMT
Not After : Jun 29 19:01:19 2025 GMT
Subject: CN=1db236d4bd1221ef03a8a128de16a3e43e27e3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:0a:c4:12:31:1f:99:aa:ab:c6:65:14:5d:
28:7e:26:94:a1:d6:60:a3:58:b8:2a:c9:bc:bf:6f:
92:a0:15:dc:b2:8a:a1:00:6a:77:9b:ae:f3:2b:0b:
e0:d7:b2:5b:42:6f:3a:a4:7d:3e:85:94:07:c5:a3:
54:86:84:23:d8:ea:b9:6d:1e:3f:47:46:d7:be:9b:
a9:7c:58:71:4e:a1:26:ab:a6:1c:cb:5a:00:a1:e6:
54:6d:9d:fa:41:dd:47:83:0c:5c:d1:1f:84:c8:62:
f9:a8:4c:cc:9a:a9:43:4e:04:28:43:b3:13:c5:44:
28:f8:b7:a5:20:ac:a6:75:8e:4d:34:f6:f2:f6:29:
95:b0:97:ac:4e:a9:a5:ee:37:a8:c4:ae:4b:ea:b9:
f1:ca:bf:5f:cc:9f:ef:54:c8:8a:1f:15:a9:59:c6:
0e:3b:32:b0:b9:9f:9c:83:e6:a0:c4:f9:34:3d:6c:
cf:0b:17:92:65:84:1a:1c:ed:38:77:b9:c2:e3:19:
02:0e:f2:82:77:56:bd:9f:16:9d:b6:c8:85:f7:4a:
85:cd:81:1b:58:86:80:8b:b0:49:58:c1:0f:cb:d9:
16:0f:12:ad:39:f0:50:29:9c:3a:aa:7a:0d:bc:86:
42:b1:ac:47:4f:1e:c1:1b:7a:29:7c:23:fc:38:32:
22:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B2:36:D4:BD:12:21:EF:03:A8:A1:28:DE:16:A3:E4:3E:27:E3:BD
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:48:68:d0:c3:38:ea:01:27:e5:6f:9a:f2:5a:ab:1e:8e:5a:
60:dd:f3:ff:c6:9d:5f:66:8c:a2:e6:35:33:34:a7:c4:4a:07:
26:f7:39:60:d6:12:61:02:36:78:9c:89:36:ab:3c:5d:44:4e:
ef:f0:02:07:57:83:67:aa:32:c3:cf:3c:c8:29:26:0a:e2:e0:
88:1f:1a:c9:f0:4a:b9:ba:e3:8c:51:d3:22:17:61:ce:c8:55:
33:19:e7:d1:e7:8f:fc:ed:83:ca:8c:a3:c9:5a:76:85:c2:91:
b9:5c:44:c0:ff:70:a0:3e:e0:41:39:0b:da:dc:3e:21:e0:5d:
6b:60:8f:f1:4f:01:0f:f5:b4:dc:80:84:f7:5c:cf:ae:a9:84:
3d:2f:ff:25:59:45:3e:ac:7b:a3:27:b8:7b:59:09:ea:58:72:
53:9f:5c:22:75:f5:24:92:e7:97:47:9e:4f:8d:f1:f7:c7:61:
50:4d:7d:9f:6b:1e:f2:c3:3c:e2:00:ad:78:6a:70:5f:5a:f4:
06:3d:33:6e:ee:a4:c6:0e:f9:8b:a5:ef:36:5f:0f:54:c7:79:
d9:2a:d4:10:45:84:6d:90:03:b7:99:5b:bc:60:2a:a1:74:55:
ba:2c:0b:26:08:0f:86:a6:06:5d:f3:70:11:64:58:ca:f8:91:
5b:fd:4b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:24 2025 by rpki-client