Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: fqCBERm92f6rJ+kdfyRACTEsKMWAO5HyHTyl5luye24=
Subject key identifier: 60:20:91:58:35:00:E3:83:23:1C:91:3B:33:E9:DF:93:7A:88:9D:49
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 01988D33D29787BC46824414C8FD51B552E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 0FBD
Signing time: Sat 09 Aug 2025 05:00:40 +0000
Manifest this update: Sat 09 Aug 2025 05:00:40 +0000
Manifest next update: Sun 10 Aug 2025 05:00:40 +0000
Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: Mz5Qp4n4uV3LaFZOAm4qYRdvWF+e1fbFrmMMbwXTv7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:d2:97:87:bc:46:82:44:14:c8:fd:51:b5:52:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Aug 9 05:00:40 2025 GMT
Not After : Aug 10 05:00:40 2025 GMT
Subject: CN=602091583500e383231c913b33e9df937a889d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:5c:a0:8f:ad:42:34:cc:6c:d4:65:54:01:
54:80:5c:98:42:ef:1a:64:6a:26:71:54:9c:10:eb:
a5:49:d8:55:23:2d:8f:78:37:28:91:01:04:9a:d5:
86:fe:49:68:d2:28:d7:62:41:3c:1f:2b:26:8c:2a:
7d:05:d0:86:25:b1:c0:31:f9:44:7d:25:83:e7:fe:
e1:c2:28:6b:4d:ba:6e:1c:7d:55:f9:bc:ef:f7:7a:
98:8f:3d:08:f1:35:71:e8:50:de:00:92:ef:95:19:
e7:7b:81:68:7c:79:db:8f:cf:f9:fe:25:46:ff:ce:
2e:4d:10:c4:8e:5f:44:dc:43:e6:24:92:2c:a7:76:
52:55:78:81:1a:89:fc:26:9b:cb:8e:a2:2e:4b:cf:
4f:4e:a9:cd:a7:74:c5:a4:7c:aa:ec:59:7f:a9:87:
f0:8e:a0:b4:82:91:26:b3:e5:74:3d:54:8c:e7:fe:
d8:d6:d7:fa:79:c1:03:cd:c7:74:e2:0f:25:f6:62:
f4:c1:14:6d:30:e5:6f:99:65:ad:8e:6d:d5:92:fd:
a9:b4:1c:20:60:be:fb:68:48:3d:c7:f7:b1:11:2f:
1a:cb:69:ae:84:a2:81:9c:9a:e7:9e:c3:f7:6e:19:
84:f7:c2:a7:5f:67:f6:5c:bf:ed:ff:3c:c7:64:ac:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:20:91:58:35:00:E3:83:23:1C:91:3B:33:E9:DF:93:7A:88:9D:49
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:39:d4:1c:9c:1c:4a:18:d6:e2:2b:a1:c8:bc:87:8d:25:77:
00:cb:f6:83:8b:47:66:16:7f:72:fc:6c:cd:03:cf:50:9f:53:
57:2f:ab:da:b4:f7:79:d8:24:9c:37:e0:49:6a:3a:11:37:86:
ad:7d:b5:f0:26:a6:9e:80:88:7a:b8:28:88:12:4f:66:27:89:
cd:a8:7f:02:8f:b0:c0:bd:aa:e8:8e:0d:75:9e:1a:01:35:ed:
a8:99:86:93:cf:b1:0d:2f:9a:0f:04:54:c7:08:33:c7:88:c8:
8d:10:02:f8:a8:5c:84:19:4b:a8:64:bc:a1:73:4b:3b:6f:30:
ca:1c:eb:1b:85:43:43:cd:16:0c:26:cf:02:f4:c8:f1:27:1a:
c1:f0:9a:a0:60:fc:71:52:98:6f:7f:c8:0b:0e:5c:ce:67:24:
da:50:e0:75:e1:63:1b:62:80:bc:fe:62:8e:8f:cb:2e:08:ac:
83:a8:88:60:2a:e0:83:c3:07:ff:eb:1f:03:0a:52:e9:47:cb:
5b:50:14:9b:64:cd:7c:75:ef:fe:e8:09:5b:ca:6e:df:46:53:
a2:9d:6f:46:df:58:ca:63:c0:58:f7:d3:8e:9d:29:91:bb:d1:
2f:25:f8:c0:7e:3c:4c:99:bc:e7:43:e2:3b:f0:e6:95:63:c4:
19:70:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:53 2025 by rpki-client