Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier: Au7yW96pkckQyUbQFnnSU03xQ6pWm+4S1D5fpz34Mk8=
Subject key identifier: 63:2D:35:43:4B:AE:9E:FD:95:CA:4D:0A:80:01:01:5C:43:65:1C:A9
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 01987A1BC07F3CCA158C97BE36F6170ED0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 12:01:35 +0000
Manifest this update: Tue 05 Aug 2025 12:01:35 +0000
Manifest next update: Wed 06 Aug 2025 12:01:35 +0000
Files and hashes: 1: fYK373nYUB0XvmUvg-oovkxaiNE.roa (hash: xzFxyXs3TjE095d1PcNasH+Goh3HeA3NihMPCGecT0o=)
2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: 3GIf/lzIZ6ji/HSFB11cOZA8bRsKnmLu6gQJ9tf3JG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:c0:7f:3c:ca:15:8c:97:be:36:f6:17:0e:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Aug 5 12:01:35 2025 GMT
Not After : Aug 6 12:01:35 2025 GMT
Subject: CN=632d35434bae9efd95ca4d0a8001015c43651ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:79:17:bc:f9:67:d6:69:ee:da:5e:60:ca:
d9:68:4c:09:51:63:2c:bc:97:02:74:4c:e2:96:a7:
1c:19:91:33:04:d4:d9:bc:da:b5:d0:1b:d3:78:5f:
40:e8:80:60:c6:18:0b:19:4c:ac:51:81:21:fc:df:
e4:81:87:ae:f3:ad:29:3a:71:f8:62:3c:19:50:03:
cd:34:f9:27:01:dc:50:cf:24:bc:d4:ab:2a:c6:4e:
86:5c:28:a8:2b:f5:f9:2b:93:f6:df:98:d6:6f:a6:
f4:f0:d2:14:68:6c:d9:d4:ac:54:c7:ac:b8:9b:40:
68:2a:46:e9:31:8f:67:36:eb:c7:e2:4b:da:cb:14:
28:d0:a6:42:59:bc:de:78:c4:7d:9e:06:1d:f2:ea:
c7:06:b0:b9:24:80:f9:1b:31:78:42:ce:a4:a1:ea:
a4:e8:96:15:e9:d4:b5:2f:8a:36:3e:15:03:dc:c2:
d6:4a:2e:92:2c:0d:a3:bc:e4:1d:a6:b3:47:2d:bb:
9e:f6:eb:38:fe:f0:82:fd:ce:af:91:08:5e:3c:44:
c8:a9:c7:81:87:51:cb:11:9a:0f:d3:87:d0:66:8e:
e4:31:a4:3e:39:a7:f7:d0:1d:db:58:6b:98:c2:ac:
98:4c:40:11:79:1b:9e:17:d1:f2:02:20:d8:90:03:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2D:35:43:4B:AE:9E:FD:95:CA:4D:0A:80:01:01:5C:43:65:1C:A9
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f7:90:90:cc:09:a6:5d:33:53:4c:3b:c9:b7:dd:a2:d9:71:
28:53:53:bb:85:d5:c9:27:37:de:eb:6d:83:ae:81:ea:50:1e:
7d:c2:a6:9a:0e:c4:2a:08:cf:dc:a7:ca:c8:20:44:08:0c:2d:
43:5d:0d:2d:11:09:6a:41:28:7b:7c:ad:36:c6:40:33:e4:9a:
1b:4a:0f:ed:cd:3e:08:74:c8:3d:2a:5e:4d:09:62:63:51:3a:
d7:d2:05:53:06:6b:ea:70:c3:82:18:a3:65:78:64:8d:74:10:
df:7c:ec:cf:9e:4a:c7:6b:e6:44:99:f8:1f:82:44:85:2b:4b:
d0:be:73:02:a4:60:a6:d2:2b:16:1f:5b:1d:8d:8e:eb:fc:de:
4f:f7:b7:8a:36:6e:b4:e7:d1:b3:d4:b6:bc:dd:aa:d9:a8:06:
ce:61:1b:bb:6c:c7:f3:0b:f4:dc:7f:4d:63:51:78:00:53:15:
e3:85:d7:ac:05:8c:27:14:f7:e9:66:ae:d8:da:1d:78:11:a5:
d9:71:4f:55:ce:b6:34:76:9f:29:13:36:f6:e5:72:25:77:80:
df:c8:1f:16:09:5c:8f:2e:02:c2:eb:97:f6:5c:4d:ed:87:48:
3b:8a:f9:47:08:0b:2f:e1:28:37:29:58:48:07:ae:48:b1:93:
51:7a:40:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:38:59 2025 by rpki-client