Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier: kZaAkmQcSeRb120a6eoQib4Hd2eRpyQwiU09CctcT5Y=
Subject key identifier: 85:D3:0D:5E:4F:16:AC:4C:71:1A:8F:EF:A9:AC:53:BB:3B:7F:6A:83
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial: 01988BEA6E6A3A194FB204A50D66BB605752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 23:00:53 +0000
Manifest this update: Fri 08 Aug 2025 23:00:53 +0000
Manifest next update: Sat 09 Aug 2025 23:00:53 +0000
Files and hashes: 1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: R5JTOGSnsGYaG1zgQlT0TbeJJ5i+8I9nZbgyDgiWjbU=)
2: tiFC6JqksrztinNgeHjMezLIyQo.roa (hash: AMO7U+NdmFNyNa76WinXG21mQKY3WubeaQslsZeF+HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:6e:6a:3a:19:4f:b2:04:a5:0d:66:bb:60:57:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Validity
Not Before: Aug 8 23:00:53 2025 GMT
Not After : Aug 9 23:00:53 2025 GMT
Subject: CN=85d30d5e4f16ac4c711a8fefa9ac53bb3b7f6a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:ee:56:99:ce:ce:cf:9e:70:c0:c0:e9:a6:
ba:5a:bb:51:03:d7:4b:75:7d:58:fc:ec:f6:80:5d:
8f:aa:82:31:7f:f8:a8:3f:e1:95:a4:9b:90:ad:6a:
54:9d:7b:b9:91:ea:ef:18:6e:3b:9b:d6:f8:00:ca:
b4:fe:73:95:85:ce:ba:e3:41:17:f0:05:5a:6c:4d:
18:a7:87:d9:98:35:df:e8:37:e5:80:9f:b8:08:9c:
27:d3:f0:e8:77:a5:6f:e2:1b:45:ea:91:df:6a:d3:
ba:6b:ba:ca:ab:c6:50:9a:73:2c:fc:c7:21:fe:6b:
51:1c:60:77:e6:46:47:11:25:4e:12:70:a0:66:64:
21:0b:31:2b:a6:88:68:d5:0e:75:a5:55:ae:8f:1a:
b5:2a:a3:59:93:cb:1d:6e:72:54:e1:83:8f:bf:99:
e6:cd:c0:3f:a7:a8:f4:0a:7d:05:d5:c5:9b:46:a6:
e7:e0:fd:e2:93:f5:7c:6e:fd:52:fd:60:39:fc:84:
6d:a6:fc:b5:b3:30:c5:0a:0b:71:18:1c:b1:fb:08:
44:ad:2f:e1:bf:71:25:eb:a0:c1:d0:e8:77:8b:38:
e8:6c:e7:75:3a:0e:55:9b:24:41:e0:c7:02:60:1f:
67:09:1f:4c:c5:75:49:e4:6d:25:0e:d2:dd:f7:da:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D3:0D:5E:4F:16:AC:4C:71:1A:8F:EF:A9:AC:53:BB:3B:7F:6A:83
X509v3 Authority Key Identifier:
keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:84:1c:e2:de:b2:b7:31:92:f5:c8:b7:97:83:22:df:b7:1f:
26:4c:fd:25:b5:c5:a3:cf:3e:e5:6c:c0:57:92:19:fb:cd:d5:
6b:70:2b:67:b8:39:41:65:3a:16:7a:66:07:f8:8b:71:66:5d:
0c:75:f9:9f:ac:8e:e5:7c:2f:9a:35:b5:c9:72:34:71:85:6a:
a1:0f:c5:73:c3:08:05:17:ba:1f:94:b3:77:ff:67:c5:a1:cd:
d7:8c:e2:d8:ff:19:2b:2a:65:1f:dd:9c:1a:7a:95:4d:96:be:
0b:98:c6:1b:ef:95:f9:41:72:2b:d1:32:74:dd:0a:f4:a2:70:
86:b9:9c:c9:69:0d:d7:3c:bb:5f:b2:98:ab:63:60:45:4b:d1:
d3:73:e0:9a:93:eb:45:48:77:79:d8:0f:b8:87:db:b3:30:5b:
05:78:22:ff:51:57:97:de:31:6f:0a:10:13:ec:22:6d:07:89:
20:dd:8d:91:5b:ab:0c:b5:0c:b2:c3:0f:9b:c5:fc:0b:02:2d:
4e:67:36:85:88:4e:bd:a7:52:e3:24:0e:6b:38:e4:b6:e0:cf:
3b:a1:d6:11:0b:d9:66:3f:b4:e8:07:b3:c7:9c:73:4d:7f:ce:
5c:71:1c:ca:5f:c4:e7:d5:ae:bd:bf:74:fc:c4:2b:b9:23:92:
b5:01:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:49:05 2025 by rpki-client