Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: NZDZEsWLEgeQflGtx97VU0X9UBgLLNt6MrDTvjaojKI=
Subject key identifier: 12:0F:AE:5A:26:6A:FF:23:DA:41:64:69:70:DE:BA:EF:81:F3:57:14
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 0198752B6E1DAD8A88B2E531FE4F33A1350B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 0FB2
Signing time: Mon 04 Aug 2025 13:00:37 +0000
Manifest this update: Mon 04 Aug 2025 13:00:37 +0000
Manifest next update: Tue 05 Aug 2025 13:00:37 +0000
Files and hashes: 1: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (hash: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=)
2: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (hash: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: FKheuWJZ3/MZlNz3nugrQVSccIcrh3BRca0KLqgzijQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:6e:1d:ad:8a:88:b2:e5:31:fe:4f:33:a1:35:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Aug 4 13:00:37 2025 GMT
Not After : Aug 5 13:00:37 2025 GMT
Subject: CN=120fae5a266aff23da41646970debaef81f35714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:ba:3c:05:07:6d:44:7a:36:cc:48:92:b5:
3c:e7:da:8b:99:19:87:be:0a:e0:ff:94:3b:2f:d5:
27:77:5c:3b:e4:bb:1f:cd:48:05:80:69:30:e8:36:
7f:f3:a1:a1:fa:e4:c7:b0:f4:5b:93:34:e6:68:58:
a0:97:52:4a:66:58:cd:ab:52:7e:81:cb:67:c3:76:
a0:55:d4:fc:84:e1:52:5d:de:6e:3c:41:01:b7:59:
23:90:43:9c:f6:e8:99:28:fb:27:83:c8:b8:94:d0:
60:a4:bc:c4:11:0d:a6:0e:d0:02:e7:16:ae:83:b8:
f9:ef:f7:54:4b:15:06:93:ab:8f:d6:96:2d:6f:df:
94:0f:d5:3a:5f:3c:0e:dd:9a:3c:4f:58:e6:3d:55:
c4:62:c2:72:53:e9:70:7f:8f:e2:6c:58:46:00:41:
60:08:fe:db:2b:65:2c:fc:09:d5:ce:6a:0d:0e:ed:
84:fe:6f:03:6a:f5:2a:53:e0:ac:15:14:4b:c7:7c:
b3:0f:9b:fe:54:52:c9:fb:b7:52:5c:00:e1:4a:18:
24:16:ee:ef:7b:a4:ff:bb:29:26:41:87:c6:37:52:
99:75:7c:f3:32:1d:6c:fc:fd:71:5f:a7:31:35:60:
b8:f7:0a:46:d0:d6:f1:c5:62:87:12:73:4a:f3:f6:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0F:AE:5A:26:6A:FF:23:DA:41:64:69:70:DE:BA:EF:81:F3:57:14
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d2:ff:ae:c2:30:b6:a2:05:3e:e8:8e:76:35:2d:8e:87:1e:
4e:b8:f0:ef:5f:6c:93:c8:89:cc:b9:ac:e2:b9:98:bf:cd:f7:
06:92:b2:ee:45:5a:46:a7:37:12:95:77:65:8f:47:0e:41:71:
4d:ce:ff:73:b3:d9:c9:d6:4c:43:8b:5a:28:9d:78:bf:49:0f:
f5:f5:e8:62:63:54:8b:b8:57:36:7d:1e:bc:81:b0:8e:f4:ad:
a9:d0:e7:ce:c2:0d:00:51:57:59:1b:82:42:19:5a:b0:7a:6f:
97:f0:c5:0e:d0:15:f6:60:44:b3:bf:63:48:87:4f:8b:e3:38:
eb:97:32:b7:cd:c7:0a:77:3f:9b:4c:0a:17:96:fa:a3:cb:6a:
71:b4:e1:8b:73:3d:77:06:21:7c:65:fe:61:13:64:60:9a:2f:
9e:c0:de:a9:cc:d0:0c:ac:75:0f:b4:10:78:bc:c8:f6:de:d9:
60:3b:22:58:c1:16:a3:b9:0c:d3:c4:48:e2:bf:fc:ca:3f:5e:
0f:6e:b8:fc:80:f5:ad:16:44:4a:23:64:89:24:cb:97:ec:61:
dd:f5:b6:6c:2e:62:a1:da:47:8b:e6:58:85:f7:1e:e9:36:ff:
f0:85:d5:19:09:c3:27:80:5d:10:b6:59:87:57:53:52:99:31:
5c:8a:f7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:56 2025 by rpki-client