Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
File: ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft (raw, json)
Hash identifier: JAnxrRIUL//EYNlaJ0YtjR/yQZoXsDTsCcS4WHFgY5w=
Subject key identifier: 64:1B:9D:74:D5:D3:EF:DF:08:C3:32:F5:5F:52:F0:08:40:C0:48:D3
Authority key identifier: 82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
Certificate issuer: /CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Certificate serial: 019873E333129A25FCC9F386F004C270DF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
Manifest number: 060A
Signing time: Mon 04 Aug 2025 07:02:06 +0000
Manifest this update: Mon 04 Aug 2025 07:02:06 +0000
Manifest next update: Tue 05 Aug 2025 07:02:06 +0000
Files and hashes: 1: fdOHadbduUc9htmWTS-jPq_zv2U.roa (hash: gZYnTf+6Tdj5UA3epTVfXJljvvit6fFaXTM2YVnS+ZA=)
2: ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl (hash: ozQhF+t6hA89pv5+XHQXMUOfMhH3Kppp2gQy8VTcGds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:33:12:9a:25:fc:c9:f3:86:f0:04:c2:70:df:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Validity
Not Before: Aug 4 07:02:06 2025 GMT
Not After : Aug 5 07:02:06 2025 GMT
Subject: CN=641b9d74d5d3efdf08c332f55f52f00840c048d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:cf:c1:73:6d:40:9a:b3:cc:ca:bf:ab:25:
43:57:1a:59:e6:ce:a1:ae:64:79:08:a6:2e:56:9b:
be:95:01:86:44:72:13:c5:61:fe:40:3a:b4:32:b7:
f2:4d:a6:46:a5:05:fc:09:2e:3c:e5:af:f9:a9:44:
ed:f3:fe:a9:89:a2:1d:ab:f1:d9:e3:1c:1f:b9:b9:
18:da:ec:9e:3f:c9:42:cc:02:b9:d5:55:59:c9:58:
b8:a3:47:02:7d:61:23:19:39:29:bf:7d:e3:f1:61:
44:10:32:a0:13:48:09:f5:ba:fa:c8:01:46:8d:8a:
9f:da:44:46:fe:56:ac:f9:44:b3:e8:1e:46:3d:4d:
f3:f7:53:ad:28:c9:d0:4a:89:0b:d7:c2:2b:ba:8a:
6e:f6:b9:00:28:6e:7c:f0:42:c7:88:6b:63:0c:e1:
23:ef:3e:bb:14:46:2c:16:de:e1:cd:88:cc:38:2a:
96:f8:6a:ab:1c:b8:6d:2d:43:26:2a:31:a6:30:f3:
d2:6d:48:91:9c:ba:02:d7:fb:ef:43:85:79:99:9b:
5f:0b:57:fd:a4:5b:62:db:fb:5c:4b:74:27:2b:45:
93:c3:c9:22:8b:4e:40:d9:0b:f6:4b:11:64:c7:02:
fd:a5:a5:38:a5:40:4d:a2:63:f1:bd:91:09:b2:19:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1B:9D:74:D5:D3:EF:DF:08:C3:32:F5:5F:52:F0:08:40:C0:48:D3
X509v3 Authority Key Identifier:
keyid:82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bf:53:cb:b0:53:16:81:52:8c:96:56:fe:47:09:d0:21:95:
c5:2f:6b:db:68:40:a4:d8:a3:0b:8a:2d:38:aa:cc:06:f4:c7:
35:cc:a7:e7:f6:25:6d:34:97:53:18:c3:67:78:66:69:6a:54:
c1:e1:46:4c:45:b1:ca:c3:bc:a9:f6:75:45:6d:4a:46:fc:91:
8f:8b:83:4c:57:3a:cf:55:cb:d6:17:97:75:51:45:17:f1:63:
73:e5:87:f4:a7:1c:be:7d:47:50:38:70:c3:e8:eb:0b:37:22:
3e:7f:ca:f9:d6:a9:1f:38:02:05:54:bd:a9:22:3e:f5:38:b4:
ae:b0:02:f8:91:00:eb:66:7d:a0:76:d6:c1:bf:8b:97:66:f4:
c9:0c:4a:7f:6a:64:d1:46:dd:e7:9d:f1:fa:d1:d0:7c:ec:09:
33:71:9e:87:13:e0:34:02:16:49:b8:ae:4f:77:f6:ba:b8:7f:
b7:e3:2c:b1:bd:0b:14:fe:a3:35:a9:3c:8e:a9:7e:48:ca:d1:
f6:5a:28:57:71:56:de:1d:89:ae:e5:77:28:3d:9f:c8:d4:b9:
13:cd:dd:c8:ac:d4:a9:4d:b2:c5:fe:04:fc:9a:2e:e4:f4:c1:
ab:97:59:4e:29:2d:ca:2b:8b:bd:ec:7a:e8:91:d7:b3:06:79:
c2:e6:67:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:28 2025 by rpki-client