Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File: g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier: cusrV2s1Vx75Npf9kTK8fgSK/jZheIZzohXO4eMq11Q=
Subject key identifier: 84:09:D4:C3:7E:86:46:8E:42:08:96:CF:74:F3:D9:F1:EE:83:C1:83
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 0198D7060645C68412E09595D982CA07D718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 13:02:32 +0000
Manifest this update: Sat 23 Aug 2025 13:02:32 +0000
Manifest next update: Sun 24 Aug 2025 13:02:32 +0000
Files and hashes: 1: fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa (hash: cTH5l3quR1dZhmY8/pVYGOhtfcq0HdpSh+BT0OKf954=)
2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: aZVydwwEYQ3dMMseN2f6G4R9Ze0f2Hqtt41IJfcNPwU=)
3: owvK-K4xt1xLcc7TBT_SQsn0CJs.roa (hash: i/ROe7RqOf5kAUxhkRxcQuX6NvNJ0cLz8fR53Bhsxmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:06:45:c6:84:12:e0:95:95:d9:82:ca:07:d7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Aug 23 13:02:32 2025 GMT
Not After : Aug 24 13:02:32 2025 GMT
Subject: CN=8409d4c37e86468e420896cf74f3d9f1ee83c183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:c7:d2:54:c2:52:e0:c9:e7:89:bf:66:7a:
cf:8e:68:0a:fc:44:66:82:48:b2:7a:7b:4a:8e:86:
03:8d:5e:d3:e8:c3:e7:da:39:8b:9a:db:a7:27:1a:
a1:8d:62:b5:1e:42:53:73:de:0c:71:40:58:9d:71:
a4:19:97:2e:88:44:37:16:49:b4:ce:b3:8b:28:02:
1b:d9:36:b4:f8:aa:3e:c3:23:64:75:86:ea:d0:c9:
70:0a:d1:19:5d:7a:b2:9e:75:f9:49:d2:c0:08:45:
42:fd:ba:d2:53:83:8e:cb:d6:26:b2:9f:45:c6:e7:
98:2e:6a:a8:87:7a:31:ae:e8:74:aa:96:c8:a7:aa:
b7:db:5d:78:1a:6a:2a:03:73:de:5b:2b:da:03:f8:
26:52:c6:f4:a0:4f:09:26:96:d5:a7:1e:11:25:fd:
67:c5:32:15:e1:0c:9d:3a:de:ed:37:21:cc:8b:b5:
5d:11:16:c9:55:84:ea:c1:ce:40:3c:a5:83:38:96:
01:0a:00:95:4f:e6:d6:83:60:d8:10:83:ba:1f:4c:
31:d1:4d:63:6e:6e:ca:fc:b9:8c:5d:3e:66:50:d1:
a0:d8:5f:1a:df:77:10:68:83:93:78:2d:1d:08:92:
5d:90:53:45:5e:19:a0:c2:ad:b1:94:25:50:c3:cf:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:D4:C3:7E:86:46:8E:42:08:96:CF:74:F3:D9:F1:EE:83:C1:83
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1e:4e:08:b7:33:0f:65:2d:b9:f7:cd:7e:59:8b:fd:11:d1:
9a:34:8f:cf:69:f0:31:fc:3b:ca:6b:6a:76:e6:d8:76:48:7b:
77:db:7d:1d:1e:11:5c:52:6e:02:b4:04:25:31:b7:02:df:28:
8c:52:e0:13:0d:4c:1c:4e:a6:36:76:36:98:83:ae:db:50:cb:
40:fc:41:11:90:ee:18:a4:6e:82:0e:08:99:75:82:b9:e8:49:
6f:a1:c3:64:36:6f:e2:31:a2:73:0b:eb:6e:d7:10:47:a4:74:
61:5d:bf:3e:cd:11:78:2a:94:0d:bb:31:50:0d:c7:06:43:4f:
b8:d2:52:2e:c6:3c:74:89:38:f0:23:02:7f:b4:d3:2c:21:a1:
14:84:9d:d0:3b:a4:7d:21:66:03:7c:3e:eb:15:0e:c9:9d:1d:
92:70:4e:3b:fe:96:8e:77:27:f8:b7:d3:b9:c8:83:a5:1a:58:
6c:ca:fd:9d:2c:b2:2f:eb:c1:cc:16:22:86:d2:cd:15:e9:d4:
b8:87:8c:35:7a:d2:f5:9a:0a:c3:43:3e:aa:d9:79:12:c8:2a:
f6:f5:ba:60:a0:01:02:34:e6:b0:69:7b:02:98:fa:bb:e2:68:
f7:b2:bb:2e:30:ee:da:24:48:63:79:91:f7:86:0c:0a:7f:f8:
4b:54:53:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:38 2025 by rpki-client