Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
File: g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json)
Hash identifier: zjC5JMbpo4Q0Z59IYrL7pSgt1t2eWJSkWve9VT91Dbo=
Subject key identifier: 88:DC:16:BC:2A:9F:75:D0:30:E7:9B:C3:8A:26:E4:3F:5D:82:2D:6E
Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
Certificate issuer: /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Certificate serial: 019893A3F93FF5EE7A71AA593B3EB36333BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
Manifest number: 132F
Signing time: Sun 10 Aug 2025 11:00:53 +0000
Manifest this update: Sun 10 Aug 2025 11:00:53 +0000
Manifest next update: Mon 11 Aug 2025 11:00:53 +0000
Files and hashes: 1: DobE_GDwj6LglTHnTGTNO49HHQg.roa (hash: BUWVPFb7JdXBEYo3ia6vx/6Nxlayi+TmF4VDb5fiITc=)
2: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: 9o7PI3d0qvT8ahdt/weBjmYS4PYWsjnnSeXJ6+jslrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:f9:3f:f5:ee:7a:71:aa:59:3b:3e:b3:63:33:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Validity
Not Before: Aug 10 11:00:53 2025 GMT
Not After : Aug 11 11:00:53 2025 GMT
Subject: CN=88dc16bc2a9f75d030e79bc38a26e43f5d822d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:1f:6e:8f:8d:3a:c4:fb:90:f2:e5:ce:37:
c2:dc:e5:29:8b:00:86:7a:d7:28:51:a8:28:32:9e:
c9:2f:0c:3f:df:04:b8:a7:ce:e9:6a:f9:1c:42:06:
6d:88:23:04:fa:03:00:c8:ef:e8:33:35:4c:95:35:
3b:09:34:00:64:56:3b:a1:c6:8c:f2:0f:0c:ee:f2:
43:9c:de:46:48:8b:33:4b:29:49:f4:01:4c:2b:f1:
40:8e:0c:80:17:22:b6:fd:8b:02:eb:90:c4:fc:9a:
57:f3:61:dd:8d:6a:8b:03:72:99:0a:e8:1b:6d:9e:
25:d5:c1:93:a0:49:99:7e:d9:19:10:17:bd:53:8f:
12:04:dd:03:ad:7f:2f:2a:9f:2e:0f:19:8d:8e:eb:
eb:fa:fd:45:6a:67:58:ad:22:76:39:f3:f5:28:b2:
e0:93:ee:04:db:77:69:b1:14:49:f4:03:cc:8e:87:
d4:22:ec:14:de:d4:f3:32:29:52:6c:15:a0:ec:bc:
dd:76:7e:ae:a1:15:a4:c1:03:38:fb:ec:14:fe:47:
9b:66:c7:68:6b:d0:d2:a8:b1:40:31:12:0a:6c:c1:
86:52:07:00:31:3c:a5:2d:d5:a1:98:eb:66:03:e8:
99:7b:21:6f:97:d3:d2:75:f4:e6:b1:9f:69:76:37:
e8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DC:16:BC:2A:9F:75:D0:30:E7:9B:C3:8A:26:E4:3F:5D:82:2D:6E
X509v3 Authority Key Identifier:
keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:dd:d3:f5:2e:fb:c8:44:fb:d6:66:38:92:15:f2:6a:71:c4:
8d:ae:be:06:34:9c:29:4a:d9:2f:e5:e2:7f:03:e6:95:81:a4:
93:78:a4:c7:66:8d:62:35:a6:5e:b6:0b:0c:df:6f:0d:03:0c:
86:f7:5b:88:cd:8c:dc:9b:23:31:af:30:19:a9:69:f0:a2:a2:
e9:8b:4d:45:9f:19:ff:b4:8f:dc:17:0f:5f:87:37:6b:56:78:
5b:dc:26:f1:72:f4:71:de:1a:29:fa:8c:0b:95:e5:31:34:3f:
42:69:31:60:6b:c4:81:19:a7:82:4e:5a:d4:7d:9e:62:01:d6:
08:35:06:f5:9e:ea:39:15:47:7e:52:4a:0e:73:bc:e7:bb:54:
0a:02:b0:54:4d:1a:6c:33:83:96:52:63:62:5f:87:83:3a:c6:
74:99:97:41:e6:63:b0:64:34:68:02:ff:a3:46:79:5b:88:48:
a5:c3:ae:37:17:da:f1:41:26:c5:d9:2c:7f:50:87:ac:eb:93:
f8:72:49:75:73:76:6c:5a:31:de:a8:48:eb:59:21:d1:e6:c8:
40:c6:a2:57:d1:1a:0f:ee:7e:1c:e0:e4:01:63:f5:84:d2:5e:
c5:48:45:c3:02:c6:b4:23:e7:21:f9:e7:c7:a0:83:b5:f8:09:
c5:66:50:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:51:54 2025 by rpki-client