Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
File: g_gpRGn7euwmAbsDdy0BVvRwt00.mft (raw, json)
Hash identifier: M+whnHlGJnIncrnHRbHjozcF8cKOjGki1tn3uvSpJNQ=
Subject key identifier: 43:13:BE:F6:EC:99:93:56:C7:6D:48:9E:E4:8D:B2:CE:FE:1C:E7:90
Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
Certificate issuer: /CN=83f8294469fb7aec2601bb03772d0156f470b74d
Certificate serial: 019896DC94FBFE3F5D3D9AC4E3A2E9D77C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 02:01:35 +0000
Manifest this update: Mon 11 Aug 2025 02:01:35 +0000
Manifest next update: Tue 12 Aug 2025 02:01:35 +0000
Files and hashes: 1: atkABp03ezo3IQf9p_BdcUMTGKY.roa (hash: XIGewf/YhXuM1/3dqCaqTKBoy+0/E1uQhatEfe1jkfI=)
2: g_gpRGn7euwmAbsDdy0BVvRwt00.crl (hash: 83udi6vELdg6vb/66EUgYTRtB9/8295u7JCT3GgdTHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:94:fb:fe:3f:5d:3d:9a:c4:e3:a2:e9:d7:7c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d
Validity
Not Before: Aug 11 02:01:35 2025 GMT
Not After : Aug 12 02:01:35 2025 GMT
Subject: CN=4313bef6ec999356c76d489ee48db2cefe1ce790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:26:6d:d3:66:f9:bc:8a:8b:3b:c1:9f:7e:01:
c3:fe:c4:2f:92:19:2f:bd:35:db:e3:4b:df:87:5e:
75:18:4f:3b:71:8b:12:0d:13:70:fa:03:bd:fc:e8:
54:22:4b:85:54:4b:e1:df:40:8a:1f:9f:59:93:41:
08:c0:fb:36:4a:99:41:36:24:cd:cb:fe:77:92:cb:
c5:3d:4e:12:0a:02:20:5c:37:7c:92:7f:a0:a3:72:
a6:e9:d2:cd:1e:27:c7:2d:08:5e:1e:c8:2a:24:24:
21:b9:22:44:41:e3:e0:2e:a1:86:ec:44:f9:57:82:
47:90:2c:d4:c6:20:ec:a8:f9:94:61:b2:dd:4f:f9:
6c:fa:18:e9:6b:f1:f1:e5:a0:7a:42:7b:33:03:b5:
23:46:e0:b6:bf:49:8f:19:2e:a3:a1:92:9e:40:a8:
21:80:2b:5e:d8:5c:5d:08:ff:1b:67:7b:d9:31:1e:
f8:7c:19:08:35:16:bb:d1:30:a7:72:e9:54:1f:61:
32:e6:91:2d:80:9b:91:80:fe:57:05:c7:27:99:a7:
59:c9:9e:23:69:f2:e2:3f:a6:8c:b0:2b:4e:77:69:
eb:e2:30:e9:a6:88:83:6a:cb:8b:9c:31:02:da:07:
47:4f:32:2d:67:d0:7d:4e:2d:e9:b5:2f:e8:d0:73:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:BE:F6:EC:99:93:56:C7:6D:48:9E:E4:8D:B2:CE:FE:1C:E7:90
X509v3 Authority Key Identifier:
keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:55:86:25:6f:8f:6b:01:81:bc:e2:7b:c2:bc:67:99:40:93:
79:94:ee:78:ee:fe:55:c1:1a:47:79:21:8d:89:6e:2a:4a:53:
e6:1f:83:ba:0a:1d:ac:5e:7e:59:74:ba:21:92:62:8c:ff:78:
76:95:d9:e0:8f:5a:7e:43:a8:da:83:99:e4:45:16:7e:04:e5:
eb:50:05:48:05:bd:f6:12:60:e4:f6:38:c4:a9:1c:41:cd:c6:
9a:79:81:52:93:a8:b8:20:04:9d:9a:a0:74:7a:5f:06:bc:25:
4b:06:36:1b:00:e8:cc:97:43:bb:e8:4b:ba:7b:04:c6:c3:1c:
da:5e:8b:5c:28:d8:9e:3e:d2:c2:58:ee:ce:2c:4d:45:19:46:
8f:b9:81:62:6e:1a:1d:b0:7d:b1:1c:6b:10:36:15:48:07:ae:
3a:99:c8:4b:01:7d:b0:ce:5f:e8:3d:54:ae:06:21:d2:24:6b:
ba:65:6f:0a:cf:e0:25:8a:d5:23:9f:e7:5b:ec:42:cf:a7:c6:
9d:cf:32:20:22:cc:1c:ba:6e:e7:f6:bd:2e:8d:aa:b8:ee:8b:
4f:19:52:ec:c5:92:db:d0:b7:d5:ec:43:58:06:e0:7b:9e:cd:
50:fc:50:5c:ad:b3:de:96:07:13:db:02:48:06:b7:70:c2:72:
a2:4f:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:08:51 2025 by rpki-client