Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
File: g1-7knspUGK30KcgR7a0qhsPmyk.mft (raw, json)
Hash identifier: Z7+CrxlryBMXy6E1AtHSePJ8Gc+se14OWQmUzf56QFs=
Subject key identifier: 7F:C2:B3:4C:8C:26:65:0C:A3:CC:32:3E:F2:EB:D6:7B:FD:B9:01:39
Authority key identifier: 83:5F:BB:92:7B:29:50:62:B7:D0:A7:20:47:B6:B4:AA:1B:0F:9B:29
Certificate issuer: /CN=835fbb927b295062b7d0a72047b6b4aa1b0f9b29
Certificate serial: 0198782D69CC8B31125227812B550B5BAA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
Manifest number: 0B4A
Signing time: Tue 05 Aug 2025 03:01:38 +0000
Manifest this update: Tue 05 Aug 2025 03:01:38 +0000
Manifest next update: Wed 06 Aug 2025 03:01:38 +0000
Files and hashes: 1: Xz1rL6dK4mQZieGCdBgSZgZHbZ4.roa (hash: gmK1QKVfo/W+VuZX9S2XVVxCk24nsYt3d8ghU+Ddwrs=)
2: g1-7knspUGK30KcgR7a0qhsPmyk.crl (hash: 5GEXJjpkGJEPJs4E1SN1UKWjeYcoC/jJ9JChFe09xt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:2d:69:cc:8b:31:12:52:27:81:2b:55:0b:5b:aa:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835fbb927b295062b7d0a72047b6b4aa1b0f9b29
Validity
Not Before: Aug 5 03:01:38 2025 GMT
Not After : Aug 6 03:01:38 2025 GMT
Subject: CN=7fc2b34c8c26650ca3cc323ef2ebd67bfdb90139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:f6:cb:47:57:37:9b:1a:aa:f6:2f:c1:92:
91:13:5b:8e:82:ab:bb:9b:b3:43:da:2d:39:a5:37:
60:94:80:85:af:4e:63:f9:bd:71:37:36:f7:2c:fc:
8b:b8:a6:12:90:1f:e3:e7:72:5e:ca:71:ee:ba:45:
c3:25:1e:2f:a7:f1:0a:f3:6d:f8:80:d4:d1:b1:e0:
48:c1:45:ce:1b:d6:82:fe:8b:0b:04:80:14:b2:20:
25:f9:a9:7e:90:b1:2c:fb:ae:96:f3:ce:c9:77:85:
17:6e:de:67:50:56:f6:c0:9d:c7:f7:5d:08:29:68:
0a:25:1a:2e:1d:24:8d:4a:23:24:d1:18:bc:20:60:
f2:3b:46:6a:b9:42:22:40:85:51:60:bb:ba:5e:f0:
2b:f7:e6:71:78:02:0a:96:02:fe:7c:f4:04:7f:8e:
fd:53:f6:64:52:27:2f:83:1e:ab:c4:b9:13:87:c1:
56:f0:2d:9a:41:b6:1f:19:d2:1d:63:76:45:e7:6d:
f3:62:71:d2:48:a6:28:08:cc:ad:b7:2e:1c:5a:98:
46:83:d7:3b:32:f4:06:a2:65:2f:18:fb:1c:f2:90:
1a:35:43:08:e7:b6:55:0f:c3:f9:9c:51:d1:7e:3e:
6d:4d:d8:2b:54:d3:38:23:1f:92:ef:21:55:5a:8b:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C2:B3:4C:8C:26:65:0C:A3:CC:32:3E:F2:EB:D6:7B:FD:B9:01:39
X509v3 Authority Key Identifier:
keyid:83:5F:BB:92:7B:29:50:62:B7:D0:A7:20:47:B6:B4:AA:1B:0F:9B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5e:df:71:21:58:ab:97:f1:4b:1a:e2:e8:d9:de:d4:37:12:
4a:c6:9c:3b:d8:1d:2c:c2:bd:cb:bf:42:92:21:72:5b:ee:2c:
e0:6d:a3:88:2b:4a:95:d9:70:6c:1c:42:98:f3:b8:e9:35:06:
b9:a5:29:6b:83:9d:e5:7f:f8:4a:93:33:05:f7:c2:bd:2d:b6:
6a:0e:8f:2f:df:3b:d9:e3:b7:2b:d6:ca:9a:16:f1:b6:b7:c4:
bd:a0:bf:49:86:3c:a6:b0:2c:38:08:3f:d3:d4:24:91:11:54:
b0:72:6b:e0:3a:a6:0b:22:8f:3c:2c:cf:57:16:4d:b6:d6:f4:
f1:2b:70:06:fa:df:e5:2f:9a:2a:f3:c3:89:c4:b8:0a:d3:d6:
d9:60:a6:89:e2:d3:24:31:7d:c9:d2:5a:ea:08:f8:b5:72:8c:
3c:64:98:8a:df:48:95:2e:a5:42:81:90:8b:7a:9e:cd:15:68:
a9:cd:3c:02:a0:3b:3e:a8:07:a1:e2:fa:01:fb:ba:f0:97:b6:
c6:73:e7:e3:51:be:f2:cb:c6:f8:4d:94:37:22:2f:4b:f2:89:
c1:f7:d8:75:02:c3:53:7a:2c:c7:f2:15:a0:2f:74:52:17:3c:
69:e9:11:d0:ef:1b:23:2b:1d:4e:f6:39:8f:65:75:88:24:0d:
29:00:72:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:23:39 2025 by rpki-client