Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: elAGIjAGhjJAukiI0diPyDj9WKaSBj0UQyJDDf7rYjw=
Subject key identifier: 64:FA:5E:13:63:84:21:C3:A4:0B:BF:A9:27:B4:AC:86:32:22:E3:F5
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 0198974978E44FA5F8158264F7D4178F7BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 0F8F
Signing time: Mon 11 Aug 2025 04:00:31 +0000
Manifest this update: Mon 11 Aug 2025 04:00:31 +0000
Manifest next update: Tue 12 Aug 2025 04:00:31 +0000
Files and hashes: 1: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: mgQpTWRLoWWlZSZx/dFdCPekupZGDD7VcPV4zRT4OGE=)
2: q_rL_wFzPAM2YYi3BD5DV-movBM.roa (hash: /Sn84qQYAJwMH4nFNeAxdZuxTOPDKe5EpdIqdCovILg=)
3: rsYfCDwusLsrJbhFacpTz-HDjfU.roa (hash: O6JB/ggb5jt1mvOF+3NkLkH3JGPJ5nijBG0kU9AI6Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:78:e4:4f:a5:f8:15:82:64:f7:d4:17:8f:7b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Aug 11 04:00:31 2025 GMT
Not After : Aug 12 04:00:31 2025 GMT
Subject: CN=64fa5e13638421c3a40bbfa927b4ac863222e3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:da:70:8b:fa:f9:32:e4:ff:b7:78:f2:e3:
e9:93:a0:c8:ec:54:52:3f:43:41:db:4c:0a:dc:6c:
1c:e5:2b:ba:03:9f:5b:7a:56:4d:21:1b:28:32:12:
1d:6b:70:2c:51:36:74:74:f7:5d:46:5e:49:2b:df:
44:fd:48:ea:95:59:37:b9:e8:0f:1c:54:e9:d7:e2:
67:bc:79:1a:c2:fb:a8:85:ad:cb:4c:fc:93:fa:0d:
1c:c6:6c:6c:9f:09:0d:ff:e9:5d:17:79:01:46:74:
cf:27:fb:11:5d:57:b6:f7:5d:95:f9:43:ad:e8:86:
b8:d5:3e:8e:c2:2c:fe:b6:2a:32:7a:20:93:b2:5b:
72:94:09:8a:38:32:02:8b:eb:14:4a:f7:10:10:1a:
71:84:1a:19:9c:3f:48:9c:74:58:3d:c1:4b:5c:e4:
2b:f5:42:f6:ca:21:ab:27:2c:25:de:40:51:52:f5:
2b:79:20:63:b6:db:15:0c:08:3c:b8:fa:99:0e:9a:
57:c8:52:c2:ab:91:fc:11:d9:df:d9:be:20:31:9f:
e0:65:92:bc:f1:34:d6:5a:88:a5:1e:7d:53:cd:46:
ca:c2:b4:39:58:bb:84:a4:68:b9:a5:02:73:43:64:
68:58:a9:62:94:35:94:77:32:7a:25:7e:2c:dd:ff:
cb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FA:5E:13:63:84:21:C3:A4:0B:BF:A9:27:B4:AC:86:32:22:E3:F5
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d8:c9:5c:f8:5c:4c:79:a3:4a:6a:3c:0e:fb:8a:de:59:2a:
36:15:28:3c:04:3f:61:54:a3:20:b5:5f:a2:97:1f:e0:d9:93:
58:78:19:18:23:d7:fc:d0:c1:e0:8c:3f:b7:dc:10:03:13:14:
71:04:f0:0f:f1:67:00:49:20:ca:cd:a6:75:65:c3:df:62:12:
25:ae:78:7a:f4:99:18:e0:2a:6c:96:11:95:06:11:b2:ef:1e:
f6:21:1b:7b:45:15:af:d5:e8:f5:2b:e8:57:e2:37:a3:49:df:
e4:6f:89:ec:e3:7e:1a:27:9d:9a:24:3f:79:ba:c1:d9:29:b5:
93:db:09:aa:e9:99:61:97:fb:ef:51:32:e8:43:d6:ca:bc:c2:
0c:68:00:c2:bb:4a:c3:83:f1:34:de:98:3a:ed:ff:52:c0:b7:
b6:52:17:56:0a:9d:57:ef:78:d6:b2:5f:89:43:3b:e0:ed:91:
70:a9:00:9c:b0:29:93:0f:cd:49:7e:79:bd:45:85:5a:70:37:
1e:39:44:ba:93:15:e3:62:53:e3:08:d9:0c:31:51:e8:a6:a4:
e6:91:5a:89:a6:80:7a:94:3d:7c:4c:ea:6e:1f:8b:eb:15:75:
9b:06:a6:14:95:03:dd:a5:02:6e:1d:96:97:8a:de:17:03:19:
8a:7d:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:32:27 2025 by rpki-client