Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: LI/uxDCb5NHfJqbUgADCt39XZCdpNKG/8ntAHRCzgDU=
Subject key identifier: 98:BF:78:11:ED:E1:F4:35:8E:35:F0:1E:25:89:62:A3:AE:1D:0B:09
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 01977F0CBE33D1D9FB2676ADFFE52D0618CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 0DA6
Signing time: Tue 17 Jun 2025 18:00:30 +0000
Manifest this update: Tue 17 Jun 2025 18:00:30 +0000
Manifest next update: Wed 18 Jun 2025 18:00:30 +0000
Files and hashes: 1: V6KVY7G6GgYfsN-YsqV35GGJJzk.roa (hash: eItdy8LiVFAx1foSIby+xCbrZCjTXV9gcCfQg6telps=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: aSJaM/iXcnZwqwykeUqueOzu6nq9OOeHm/nM1m7wCNQ=)
3: va7G1Etlo6KFOzv3RXEcOofD7SM.roa (hash: rBy+ju7usynwUPKEj3xmeZHIvCFI48Q0Gca4wzYHCUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0c:be:33:d1:d9:fb:26:76:ad:ff:e5:2d:06:18:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Jun 17 18:00:30 2025 GMT
Not After : Jun 18 18:00:30 2025 GMT
Subject: CN=98bf7811ede1f4358e35f01e258962a3ae1d0b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:f4:37:d1:da:64:fc:93:ed:02:60:61:28:
8a:ff:a9:a0:b7:92:d3:33:e2:20:f3:46:ce:58:63:
db:36:92:f3:fc:66:09:2d:97:e2:27:f8:75:33:71:
f1:d6:0c:ec:47:28:7a:9c:84:69:cf:f7:09:99:fa:
ac:c9:87:46:e1:15:a6:c6:b8:40:4b:8e:d7:5a:64:
63:1d:7b:8d:6a:6e:dc:4e:35:14:b4:ff:82:23:61:
20:88:a9:bc:09:b9:38:21:85:cf:8e:3e:b8:f8:19:
ef:3b:63:fc:a1:99:02:18:15:a1:70:20:fe:1c:fe:
4a:78:5f:6b:d6:ac:95:aa:55:fb:f6:56:cd:d1:0d:
6b:0f:0e:f5:4b:f5:97:ba:c9:58:36:67:b3:da:eb:
55:d7:81:00:5d:56:b8:a6:34:7f:e0:01:ff:2b:26:
08:b7:a5:a2:6a:13:a7:2c:20:b1:d8:e2:75:ac:75:
70:65:26:08:fa:9c:bd:cd:44:2e:da:d0:f4:91:59:
78:2e:e8:e6:90:a3:df:b0:71:69:0c:7a:3b:83:e8:
7b:3c:ad:89:d8:0e:6a:85:22:5e:d2:9b:33:89:ce:
52:00:50:0c:5e:9d:f6:ce:fe:d1:f7:a1:8e:0c:65:
c7:a0:04:04:13:17:0d:9c:cd:af:3f:b8:0d:13:bf:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BF:78:11:ED:E1:F4:35:8E:35:F0:1E:25:89:62:A3:AE:1D:0B:09
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:41:04:94:b3:68:a7:6f:25:de:fb:46:d1:dc:5b:61:fc:73:
1e:f9:3e:25:0b:af:94:8b:ae:ef:0e:2c:e4:a4:4f:4b:49:b5:
ab:c2:1b:cf:3b:1a:cf:67:1b:56:06:11:04:4d:21:27:d3:49:
0e:9c:94:68:23:c3:3e:13:d0:10:27:1a:0c:b2:10:03:da:30:
86:f8:ea:b9:26:45:84:9a:f5:b6:81:55:66:c5:98:32:a0:00:
b1:4a:42:85:f1:5f:89:1e:0e:9b:e5:0a:c7:e8:6d:7e:d9:9e:
94:dd:00:0a:c1:51:ee:08:12:c2:f1:3a:32:95:96:c9:72:bf:
2f:c4:de:31:4f:84:09:01:9d:6e:1b:05:e2:8b:e2:eb:e6:f2:
4a:82:1c:54:bb:b9:7a:97:4d:c5:99:55:52:62:06:a2:27:d5:
38:cb:59:ce:6a:68:b2:8c:f1:68:ac:39:10:ee:ee:22:27:28:
0c:09:04:2a:a7:74:96:16:d4:b3:5b:92:e9:89:72:a1:27:86:
a8:a8:50:98:57:96:8a:9b:73:17:d4:4c:f7:d5:88:de:77:fb:
ff:8a:52:1e:94:fd:3e:7b:1c:1b:27:4b:de:a2:87:87:84:e8:
54:3a:53:4d:d4:b0:d0:5a:38:d2:27:e3:78:f1:35:4c:8e:4e:
35:f5:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:25:32 2025 by rpki-client