Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier: YVm/lJaXkcanSAMsFLy7GMJX2/7g2O8sK4SuLgbp9ZY=
Subject key identifier: 62:12:23:35:57:48:A2:FB:9F:52:1C:3B:E3:F8:4E:27:78:84:37:F9
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 0198744FD1FF937F36A223D5787E80BD4CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number: 161E
Signing time: Mon 04 Aug 2025 09:00:44 +0000
Manifest this update: Mon 04 Aug 2025 09:00:44 +0000
Manifest next update: Tue 05 Aug 2025 09:00:44 +0000
Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=)
2: bTDx6BY2_bieAYAIiAFgdyKIF9k.roa (hash: qCwMntOeFKqowJO7prWM5i0O+TccBmu2GDJdiZbI22w=)
3: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: M6D3aZww0nuhBZa1/1Pk2P8RifXSePJY2xhhz08MuYo=)
4: kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa (hash: eW1HiHgHjju0NsKcsTSvzT72THKILOyyGeew75G0SSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:d1:ff:93:7f:36:a2:23:d5:78:7e:80:bd:4c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Aug 4 09:00:44 2025 GMT
Not After : Aug 5 09:00:44 2025 GMT
Subject: CN=621223355748a2fb9f521c3be3f84e27788437f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0c:48:ee:36:63:67:5e:40:47:0a:c4:3f:4e:
82:c0:0a:9a:ad:32:b8:b3:f1:88:18:91:3d:a9:e5:
58:68:b2:b6:07:ed:8b:b9:01:ba:c7:24:f0:d3:80:
cb:a9:4b:38:1f:ae:98:94:91:de:9a:fb:c4:30:65:
83:bb:4c:b3:7e:f0:65:a2:eb:04:ce:49:ad:26:c0:
be:76:cd:3f:03:51:25:ad:a7:1a:2b:12:08:1f:79:
18:6e:4a:21:f8:ea:74:4c:55:57:89:fe:25:03:ad:
f5:18:65:6d:d6:56:70:56:66:87:54:7f:a9:09:bf:
d3:ea:3b:e0:45:14:3e:47:ea:28:d6:e5:d1:11:eb:
d6:d0:cd:78:ce:3c:48:1b:f2:b5:57:24:8d:e1:3f:
b1:5a:12:d6:fa:b7:66:02:ad:d9:31:35:1d:f3:4e:
ac:32:02:4d:4d:c5:2f:9e:46:53:c1:09:f8:f9:d8:
75:2a:9f:94:a2:d7:44:fc:3e:48:45:5c:26:6d:34:
e1:a0:f5:db:4a:64:a0:b6:de:7a:3f:7b:b6:da:a6:
0d:1f:f1:cd:17:cb:9c:2c:e7:57:96:64:43:92:f1:
28:34:2b:6c:30:a6:41:ce:f9:e9:75:95:83:2a:2b:
cc:66:f2:9a:58:ed:85:2c:b4:17:ad:5a:35:81:af:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:12:23:35:57:48:A2:FB:9F:52:1C:3B:E3:F8:4E:27:78:84:37:F9
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e6:d6:64:f4:62:c6:96:a5:61:9f:4e:ae:f4:85:92:b6:7f:
20:fb:7d:a6:ac:e8:06:61:3d:dd:b3:85:d2:33:99:23:14:a3:
df:74:b8:ea:0a:f2:0f:12:36:dd:44:94:ee:0b:b9:db:ba:dd:
af:c2:4f:11:c4:0d:0d:e8:46:77:37:48:cb:91:80:2c:d6:82:
f2:2e:61:80:33:31:63:6c:4e:bd:a3:dd:b3:ac:cf:04:56:c3:
cb:45:0f:33:b5:8a:62:96:04:f3:e5:47:15:e7:11:58:c0:07:
73:48:57:da:05:b3:c0:5c:13:b2:a1:49:df:3a:4b:48:69:0b:
9a:a3:fd:09:1b:7b:8c:7e:dd:d1:0c:16:68:1b:57:ad:24:76:
04:9b:ec:54:c5:18:8f:78:08:05:11:3a:92:54:e5:c5:3b:fc:
a2:29:7f:bc:8d:d5:ef:8d:e1:de:19:7d:1c:d3:76:54:19:ec:
38:cd:b7:cf:e7:d6:85:16:d7:d3:2f:00:5e:a5:2d:4f:64:a5:
8d:4c:eb:32:6d:d2:ca:f2:6d:fe:3c:ad:76:4f:0c:e9:b6:50:
fc:8d:15:19:7c:88:0e:0c:2a:41:5f:57:1d:30:b4:4a:b5:cd:
61:54:a7:17:fa:88:20:46:cd:67:51:55:b7:b2:b0:17:bc:9e:
73:0c:7b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:47 2025 by rpki-client