Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
File: g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft (raw, json)
Hash identifier: qAt+bceWFnLw75/jLalPI5lslCLZlIW45/W/KWlveiw=
Subject key identifier: DB:18:0A:75:A0:86:4C:3D:96:FA:D1:F6:64:B7:4A:4B:16:F5:4E:D9
Authority key identifier: 83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
Certificate issuer: /CN=83646ab7062148edb8fa9b60a831c8240dcab804
Certificate serial: 01989D82CD18A2A7C0AE16F9196311104EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
Manifest number: 0D02
Signing time: Tue 12 Aug 2025 09:00:51 +0000
Manifest this update: Tue 12 Aug 2025 09:00:51 +0000
Manifest next update: Wed 13 Aug 2025 09:00:51 +0000
Files and hashes: 1: 20epV1j0HCMZ-uCYpk_kUZek4Go.roa (hash: 0IJbxaBTBJrWj2eiqCnd7zV+Z0NBZxwRizr0fkaGu8A=)
2: g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl (hash: xIGAa1V6dx8HC9Yr+v7V3nJWCJtXK+FINOwgEKEZEII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:82:cd:18:a2:a7:c0:ae:16:f9:19:63:11:10:4e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83646ab7062148edb8fa9b60a831c8240dcab804
Validity
Not Before: Aug 12 09:00:51 2025 GMT
Not After : Aug 13 09:00:51 2025 GMT
Subject: CN=db180a75a0864c3d96fad1f664b74a4b16f54ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:09:c2:fe:e6:a4:3f:44:aa:bc:4a:1c:1c:
cf:33:4b:c0:3f:16:38:4e:b6:fa:67:4a:a1:c1:33:
bd:95:ea:f9:98:67:59:d1:07:62:4c:5e:a5:d3:38:
02:03:9f:2a:81:51:c2:f1:c9:f5:e1:1d:2f:ba:7b:
db:5c:69:6e:ba:26:11:f1:01:09:1b:e1:6b:e3:36:
f6:86:72:8b:78:b7:d9:14:e3:e4:e7:66:27:f9:7e:
6d:9c:d5:58:ad:93:b5:de:dc:92:6d:f7:92:b6:a5:
9f:73:33:4b:2b:d1:7c:77:63:d9:4f:16:90:d2:24:
6f:7b:39:a1:c4:ea:03:65:0d:af:33:0f:c9:a2:45:
d6:7c:16:47:70:8b:53:a9:2a:d2:00:f7:6c:ed:3c:
61:fe:23:d5:c4:78:b2:fd:d2:01:63:48:5d:e3:bf:
cc:5c:ed:af:61:f1:8b:e5:40:a7:16:07:7f:24:bf:
5f:6a:61:bf:3a:a4:9b:2a:73:70:d8:ab:17:6f:a0:
c3:18:a5:10:61:10:46:a8:0e:aa:1c:eb:62:e5:1e:
d0:a1:e9:e5:18:24:b6:a1:5c:bb:06:40:fb:96:bd:
71:92:ea:82:fd:dd:bf:b8:bb:7c:d5:77:77:9a:c8:
dc:20:28:47:b0:81:b5:15:c4:67:4d:cf:8f:7c:aa:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:18:0A:75:A0:86:4C:3D:96:FA:D1:F6:64:B7:4A:4B:16:F5:4E:D9
X509v3 Authority Key Identifier:
keyid:83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7a:c4:cc:9a:7a:0c:8b:ac:33:2e:1b:55:19:33:4f:29:48:
77:83:fb:5f:27:24:c9:4b:1a:d6:c3:55:b6:2e:5f:3e:13:ac:
55:fd:a4:70:ce:fb:e3:03:c4:c9:d8:98:bb:57:06:74:22:c7:
a8:98:31:09:a7:0c:b7:df:46:b7:24:04:a9:71:ca:40:df:64:
af:c2:ee:86:a6:86:1e:3d:a6:eb:56:27:d2:4b:c6:95:ef:55:
9b:b1:8a:b4:e0:3a:d9:bb:b4:1d:b9:26:cc:7b:9a:60:ad:b8:
88:9a:13:c5:c6:81:cc:3e:34:04:9a:8e:1e:e6:bc:34:a5:46:
25:bf:b1:8e:f5:6f:34:e6:52:63:c0:c2:d5:c2:f6:ae:53:c4:
b9:ca:f3:77:af:63:6c:08:8d:af:89:38:55:07:bf:0a:92:4e:
e2:9a:4f:3b:82:29:28:ad:80:56:7e:29:9d:d3:16:3d:55:0a:
58:38:c0:f2:6a:bb:e4:2a:f5:89:65:55:cc:89:cd:18:d0:23:
c6:ee:9c:6f:f6:07:3c:67:17:7a:50:b1:85:22:22:7e:e2:bd:
48:31:8e:95:7e:82:59:3c:da:f3:74:ee:37:a4:70:60:04:b0:
e8:4b:e6:8f:a5:2d:9c:ec:dc:fd:9b:b8:91:a9:b0:f5:50:59:
10:de:76:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:46:24 2025 by rpki-client