Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
File: g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft (raw, json)
Hash identifier: KIKcUsHD7PWH48tTYqtpgqCq5jmIzSbhNitC9tgs7IE=
Subject key identifier: 89:7B:AE:F3:7D:A3:02:2C:85:9D:2B:EE:2D:67:C5:9A:49:F2:AC:A0
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Certificate issuer: /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial: 019882E77091FB60AB189347BF88604AF536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
Manifest number: 0BEA
Signing time: Thu 07 Aug 2025 05:01:02 +0000
Manifest this update: Thu 07 Aug 2025 05:01:02 +0000
Manifest next update: Fri 08 Aug 2025 05:01:02 +0000
Files and hashes: 1: EvTzLNAJ6H7qRnNSh82gSKiMMgg.roa (hash: qhUzbtll1fZR91tCmRG4V9VmK3ep2kPWk4uvDeplZCU=)
2: g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl (hash: fH9qegl+zSu9i48N50loMqe6S+i14ATbUUxshmUB9ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:70:91:fb:60:ab:18:93:47:bf:88:60:4a:f5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
Validity
Not Before: Aug 7 05:01:02 2025 GMT
Not After : Aug 8 05:01:02 2025 GMT
Subject: CN=897baef37da3022c859d2bee2d67c59a49f2aca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:55:6c:93:78:ae:e4:9b:58:7d:51:53:49:87:
f4:90:b5:35:61:91:78:99:94:3e:a6:c1:d0:46:f6:
14:25:55:14:28:d9:bc:b4:bc:9e:d1:cb:e8:94:f4:
ac:d8:38:a8:ea:7c:db:df:67:87:23:d3:18:42:27:
c2:8d:d6:c0:4e:06:c1:9d:be:75:93:9a:10:0a:b6:
95:aa:db:75:e7:73:ac:bd:14:43:dd:9a:82:71:d9:
4c:92:41:9a:32:4c:0f:ae:73:40:e5:2e:73:12:13:
07:73:92:b3:80:79:b9:0f:39:8b:3d:25:e9:ea:fd:
17:96:04:45:db:98:fd:88:ff:a1:60:9c:a6:03:93:
46:88:82:db:d9:b1:1c:19:1e:a5:fa:34:a9:00:8a:
ea:7c:6b:32:d1:49:29:df:18:23:73:80:54:26:e6:
fa:39:c1:2c:6f:a2:34:f8:7a:ae:91:80:30:d5:c5:
7d:46:42:77:07:f4:90:47:2d:7b:e5:11:b5:b9:fc:
74:57:d7:18:16:c3:84:2c:07:62:72:62:ea:36:da:
45:cb:d8:96:f0:73:6d:08:af:ec:74:2d:d5:41:7d:
0a:65:75:f7:1d:17:0a:85:b0:7e:8c:00:c8:b4:35:
d1:58:0a:cc:fb:18:8e:d3:f5:d9:fe:f0:fd:29:1a:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7B:AE:F3:7D:A3:02:2C:85:9D:2B:EE:2D:67:C5:9A:49:F2:AC:A0
X509v3 Authority Key Identifier:
keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ea:48:2d:82:27:b9:57:61:a4:f7:30:d8:b4:2f:5e:aa:ba:
5a:6b:f8:6a:9d:56:51:7e:1a:63:0d:ba:e5:64:69:1c:00:28:
6a:af:ff:63:f8:aa:13:87:df:3c:0b:6b:94:96:16:31:dd:8c:
6a:e0:5c:b3:23:93:fc:d6:bb:e6:21:2d:b6:78:c9:b1:bd:63:
c9:1c:9a:17:a9:7a:a4:1f:f8:08:ac:7c:ec:92:90:4e:b0:1e:
d7:52:21:32:ee:65:87:03:fb:50:b1:f2:eb:5f:7f:56:21:80:
c1:d0:59:b3:1f:0f:ed:1c:46:f5:f9:31:fe:f1:b1:46:d5:ee:
ad:5c:5f:b4:1f:83:2a:02:de:49:0f:03:df:1c:e1:0a:82:a6:
3e:8e:b4:5d:6f:ad:7a:88:95:c5:6e:35:17:4d:28:44:47:36:
c9:ff:c1:4b:5d:aa:3f:2e:8d:11:45:5a:82:59:ee:52:a0:a3:
9c:7c:ef:5e:2d:39:96:b2:79:32:bf:90:26:f7:57:1b:c4:6d:
0f:2b:77:61:41:97:50:df:02:fe:45:3b:16:b1:2f:b5:8c:df:
fd:4a:2c:31:46:85:4c:4f:8d:31:02:34:eb:bc:d5:f2:32:94:
3d:29:5f:d9:eb:a3:32:23:ea:cd:58:e8:6e:0b:46:2e:c5:ad:
64:6b:5f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:28:33 2025 by rpki-client