Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
File: g8t2BW38QWNCZu0C0GkCA6dUoXs.mft (raw, json)
Hash identifier: NxPDUFQNz8r7uqgT9qVIxjnW+TDS3q9LBNuDYS+ULeU=
Subject key identifier: FF:21:AD:EC:68:A8:EA:F5:74:25:AE:3C:90:BE:BB:70:BB:4A:73:FC
Authority key identifier: 83:CB:76:05:6D:FC:41:63:42:66:ED:02:D0:69:02:03:A7:54:A1:7B
Certificate issuer: /CN=83cb76056dfc41634266ed02d0690203a754a17b
Certificate serial: 0198A04D7EB0548A073572A4264DEB0DFEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
Manifest number: E2
Signing time: Tue 12 Aug 2025 22:01:29 +0000
Manifest this update: Tue 12 Aug 2025 22:01:29 +0000
Manifest next update: Wed 13 Aug 2025 22:01:29 +0000
Files and hashes: 1: g8t2BW38QWNCZu0C0GkCA6dUoXs.crl (hash: zjIRs7w5HZXG4PTMg6TJwBMLlLpyYUJaEKr5nt1K4Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:7e:b0:54:8a:07:35:72:a4:26:4d:eb:0d:fe:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83cb76056dfc41634266ed02d0690203a754a17b
Validity
Not Before: Aug 12 22:01:29 2025 GMT
Not After : Aug 13 22:01:29 2025 GMT
Subject: CN=ff21adec68a8eaf57425ae3c90bebb70bb4a73fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dd:f6:f1:77:07:cf:ef:96:93:af:2c:fd:22:
ad:ad:16:c5:73:7b:ad:3a:c3:c5:4f:96:bd:6c:e1:
59:6f:de:4e:d7:ee:18:95:b1:c9:57:99:eb:80:58:
ab:d7:cf:c3:50:e0:da:d2:38:6d:e8:f4:da:4f:27:
71:fe:05:a6:f6:c1:0b:3b:e1:9c:51:63:55:68:e7:
6f:4c:c5:db:54:fa:6b:26:80:a5:f0:1e:6e:6e:ef:
0f:9a:e0:84:cf:37:f3:49:a1:48:99:f1:b1:5b:11:
54:39:ba:6c:94:7f:9b:19:36:79:67:26:27:1e:d7:
7d:99:0d:a9:46:4b:77:d9:1b:fc:54:57:5a:a3:b5:
3f:da:86:ad:f3:e9:ff:2b:ff:05:76:a0:ab:9b:77:
80:3d:0d:90:24:13:df:b2:ba:8c:57:35:a0:0a:7f:
76:ba:64:a3:cf:5e:92:f4:56:e6:fc:64:ff:ed:3b:
76:42:1b:95:6c:28:48:c9:1e:ca:36:18:9d:33:af:
11:6b:eb:a1:2b:06:17:44:ee:09:f9:60:c9:9f:a1:
72:7a:89:09:e5:b4:7b:41:ae:7c:bb:03:ee:8c:ac:
8c:72:b4:36:83:2f:0a:40:ca:9c:47:df:bf:04:1a:
6d:58:ac:15:fa:99:7f:03:c7:0e:b8:6d:0a:65:e3:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:21:AD:EC:68:A8:EA:F5:74:25:AE:3C:90:BE:BB:70:BB:4A:73:FC
X509v3 Authority Key Identifier:
keyid:83:CB:76:05:6D:FC:41:63:42:66:ED:02:D0:69:02:03:A7:54:A1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:97:b6:aa:4a:0b:a9:a7:a5:d7:14:c6:17:fb:92:92:c5:84:
f6:4b:21:81:bc:a4:c1:fa:dd:88:a4:55:ba:81:e9:fc:16:ef:
55:57:a2:58:3d:cf:fa:40:68:57:a9:53:c1:69:07:86:19:6b:
82:cc:40:34:83:26:39:a3:f0:00:77:65:fd:15:09:c2:3f:25:
74:d2:c0:ca:81:29:37:ba:0a:4e:19:c3:6c:ff:70:86:2c:ff:
5b:2f:2d:a8:6a:13:89:79:7a:f5:07:2d:ce:76:3f:34:93:84:
89:fb:07:9c:75:97:6d:25:05:48:0c:ad:ac:6c:cd:91:a0:59:
0b:6e:6a:4d:50:13:b5:2f:bb:e6:1a:f4:9e:67:90:e4:c5:86:
8c:ea:be:aa:b4:2b:38:cc:a1:08:21:9f:58:41:3d:44:df:4a:
78:3f:66:19:ac:d3:21:c2:b4:4c:1e:d1:9c:20:b3:dc:51:f2:
da:e4:e5:e0:64:8c:64:fd:5c:02:5e:c3:82:c3:c7:92:16:53:
af:8f:c2:4d:11:16:fe:fb:28:69:d5:19:96:73:8c:85:3d:c1:
fd:53:9b:17:5d:bd:ae:00:e9:0f:09:ed:8a:fb:dc:3c:0a:68:
1a:51:69:74:5e:a7:ff:75:91:3b:da:79:4c:dc:41:6b:a2:1a:
21:88:c6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:16 2025 by rpki-client