Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json)
Hash identifier: Ri9E8ofuaqyBWSt2uADELcuhxONDkWVdmnpXkuKNOE8=
Subject key identifier: 89:3F:4E:D1:9A:0F:64:6C:B4:6C:31:1A:3D:47:09:98:07:AE:7F:09
Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Certificate serial: 01988B0FBEFEC30FC7F9A6AC19E1E27B3C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
Manifest number: 113B
Signing time: Fri 08 Aug 2025 19:02:01 +0000
Manifest this update: Fri 08 Aug 2025 19:02:01 +0000
Manifest next update: Sat 09 Aug 2025 19:02:01 +0000
Files and hashes: 1: W3rPvUkflCFuxF0ug4dEXW6S2Kc.roa (hash: 3G2s7uZotQeaUTGQLu0pJAmRVfSsV9ARqhmMaAPkMDY=)
2: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: Ogb23Ex7Xy3CbmTUomSL01czK/oqpKW06JLhhlb7pzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:be:fe:c3:0f:c7:f9:a6:ac:19:e1:e2:7b:3c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Validity
Not Before: Aug 8 19:02:01 2025 GMT
Not After : Aug 9 19:02:01 2025 GMT
Subject: CN=893f4ed19a0f646cb46c311a3d47099807ae7f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:3e:6f:3f:11:61:9e:26:eb:2d:9a:7f:c7:
19:42:c6:78:0b:8e:df:8f:c5:85:8d:05:fb:89:03:
88:5c:72:22:cf:c0:1f:d8:73:ad:6c:a0:b6:9f:b8:
2c:a7:c8:71:57:74:c2:df:df:77:39:96:dd:19:c7:
fe:7b:d8:4c:84:44:37:24:78:37:bc:c5:92:bb:85:
a1:9e:55:8a:09:f2:2a:d7:c5:43:57:73:46:3d:e9:
e2:df:b5:27:11:03:7d:ed:7f:1b:56:61:9d:f9:ea:
30:3b:e5:cd:d9:cf:33:08:18:77:4b:ee:b0:31:ef:
f4:ab:51:f7:42:3d:32:70:fc:e8:f6:80:cd:28:6e:
55:bb:96:b2:56:07:cf:e9:fa:9b:07:b3:26:5f:df:
a1:0c:52:68:25:2b:5f:b8:b8:22:7e:37:47:64:53:
c4:af:14:8c:db:8f:5c:a9:4e:30:cd:e8:66:83:07:
14:71:cd:57:7a:75:c1:a3:9f:76:54:9a:00:48:70:
0d:91:4b:03:f0:d3:73:82:68:3d:24:62:c6:47:d6:
14:0e:57:b7:f4:ea:36:1d:a0:5f:97:b0:52:2f:3a:
58:bc:ed:b8:bf:da:e1:62:2c:5d:f3:d5:20:58:78:
6f:5e:cb:d9:6e:d4:f2:b2:bf:8c:8e:58:a6:63:45:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3F:4E:D1:9A:0F:64:6C:B4:6C:31:1A:3D:47:09:98:07:AE:7F:09
X509v3 Authority Key Identifier:
keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0e:aa:85:2d:ba:2a:b7:7f:08:6a:9a:e9:c1:8c:dc:7f:6e:
02:c0:ff:f0:a3:85:d2:fd:f2:88:7c:de:94:65:44:4e:2c:eb:
e2:be:f8:a2:6e:ba:84:62:53:27:f2:76:82:fc:a3:44:c5:05:
4e:8a:5d:1c:2b:89:2d:79:b6:24:b9:38:3c:35:a7:4d:36:a2:
aa:ee:6e:14:0d:c1:89:65:33:5b:bf:58:f0:c5:3b:67:76:1c:
6b:26:fa:90:4a:63:c7:08:da:51:60:d5:8c:1a:ba:52:2b:37:
54:d5:98:c8:8e:9e:fe:b5:5d:d8:01:b9:97:c4:13:1e:79:af:
0c:bc:15:84:ff:94:82:9e:4a:e4:91:83:cb:5d:08:ab:ad:5a:
ca:c3:fa:8c:61:5f:3e:b5:66:a1:7d:2b:88:92:b4:e8:a6:2d:
ae:8d:31:e5:39:48:db:3e:4d:8d:ef:8c:14:5b:29:8f:c4:ef:
3d:bd:9c:20:43:47:c3:d1:00:f9:53:aa:d5:de:b1:2a:ec:22:
b9:65:d2:fc:c0:f5:79:19:34:e2:65:a0:57:0d:76:cf:6e:cf:
07:cf:09:c2:4b:64:b0:80:7a:c7:3d:18:82:e3:2f:64:0d:2d:
e4:d8:b2:6b:c6:0d:0e:89:e8:db:60:cf:97:a1:58:96:f3:ec:
36:de:37:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:39 2025 by rpki-client