Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
File: g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json)
Hash identifier: +N5czibe1kVoMunoJS6gByGHTF4+5hl2Ei6i970PeIg=
Subject key identifier: 28:ED:69:CA:B1:D8:7E:64:B7:C9:27:28:44:A6:4F:EE:49:79:D0:81
Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
Certificate issuer: /CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Certificate serial: 019894B7FB622303A336DC37ADC5D586754F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
Manifest number: 03DA
Signing time: Sun 10 Aug 2025 16:02:22 +0000
Manifest this update: Sun 10 Aug 2025 16:02:22 +0000
Manifest next update: Mon 11 Aug 2025 16:02:22 +0000
Files and hashes: 1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: wyCwbpTdEDlQaJVMcmgmXCvjKlqzyyK6IemdemjhCGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:fb:62:23:03:a3:36:dc:37:ad:c5:d5:86:75:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Validity
Not Before: Aug 10 16:02:22 2025 GMT
Not After : Aug 11 16:02:22 2025 GMT
Subject: CN=28ed69cab1d87e64b7c9272844a64fee4979d081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:79:40:b8:1b:13:9f:8c:7e:6d:06:53:41:f6:
4b:28:9d:47:ac:9c:17:be:2c:20:f7:e4:5d:6d:a6:
6b:d2:d7:ac:a9:96:87:96:dc:c4:b1:6b:6b:95:1b:
59:aa:b6:8c:b9:40:b6:47:44:56:0b:f1:c7:f7:87:
ed:66:a1:9f:bb:77:d7:4b:44:d2:f5:70:c5:43:17:
a7:b6:8d:eb:a0:53:b5:c0:b5:77:56:a2:2b:f9:5b:
8e:8d:13:2f:fe:b4:94:a5:60:8a:67:b4:ef:45:92:
ca:ba:c6:ef:22:46:5d:c0:4a:9b:58:72:e5:69:32:
74:d3:7a:f9:09:c9:5f:e7:5b:1c:3c:ce:54:75:7e:
b7:03:72:93:cc:fb:2c:93:14:e0:7e:a4:bb:57:a5:
37:17:7d:39:0b:ba:d8:c7:7a:25:5f:72:79:c7:81:
6a:96:e8:f8:1e:c7:c3:00:12:24:bc:90:df:61:61:
21:a0:94:93:38:bd:d4:92:63:ef:b5:6e:9e:2a:d5:
2b:61:f2:76:be:d5:a1:32:35:18:18:fc:9f:2b:95:
dd:ec:3d:f0:7d:d3:b1:d7:00:c1:19:1a:33:4c:57:
7d:db:ea:18:3f:32:f9:4b:80:c0:0a:76:dd:d3:5f:
da:83:58:c9:b4:ac:c2:4b:c9:15:50:65:a4:02:f1:
2a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:ED:69:CA:B1:D8:7E:64:B7:C9:27:28:44:A6:4F:EE:49:79:D0:81
X509v3 Authority Key Identifier:
keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d9:68:45:62:48:33:84:45:09:d6:56:e8:5b:ca:8a:7f:78:
99:10:e8:2a:c5:97:65:5d:6a:82:01:dc:9d:36:87:7e:d1:83:
ad:a5:51:83:a1:6b:df:6b:2b:af:24:75:51:a9:f9:30:49:ca:
0e:bf:22:d3:8e:d8:d4:14:76:d2:e0:7c:ee:40:50:d8:f7:e4:
a3:00:86:dc:97:d9:93:1a:72:89:fe:72:71:68:3e:7b:45:53:
e7:48:46:d9:73:bd:15:52:a8:9c:ea:2a:5b:d9:bc:93:49:34:
24:57:b6:94:9a:42:45:3a:c6:df:c6:d4:58:6a:c4:46:ac:19:
46:e8:e0:d1:be:8b:cb:34:d6:d8:94:66:10:b7:52:41:52:df:
ec:a4:b3:12:95:72:81:c9:c6:c5:ea:af:41:47:53:97:fc:1e:
25:ad:0e:bb:f4:f4:67:cb:80:90:f7:42:ff:7c:9d:73:10:82:
16:a7:03:47:9e:06:39:9f:c8:e7:8d:98:ce:f8:ab:21:fb:d4:
5e:ba:dd:44:2d:a3:8a:92:16:6c:79:22:9a:5e:f9:83:35:fd:
01:d4:4a:98:af:fe:96:d3:05:99:9a:cb:8d:63:47:90:d8:53:
72:82:9c:ae:83:8b:1f:fb:85:55:f6:2f:fe:7a:89:17:34:a4:
f0:77:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:05 2025 by rpki-client