Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json)
Hash identifier: ryEmGCFgs5GESqnRNneIS7Sf1SihPDP0tIGmr+fN9Yc=
Subject key identifier: 9B:48:3C:7A:8B:58:EC:9E:37:6E:C2:7C:23:CC:8F:D6:81:11:21:21
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial: 0197789CC10F5B22538A4BCB6D3EF564C501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
Manifest number: 1110
Signing time: Mon 16 Jun 2025 12:00:28 +0000
Manifest this update: Mon 16 Jun 2025 12:00:28 +0000
Manifest next update: Tue 17 Jun 2025 12:00:28 +0000
Files and hashes: 1: UGrR__PyRipPzdjGAZBG7BppT8M.roa (hash: iYevY5/kIjNolOqwa16r2Chgd87dJ+qeTiEz7+9fEjM=)
2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: zM4/aJD+yIbySbA4vkgaeeeejS+Qg6plStcxGr9bWfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:c1:0f:5b:22:53:8a:4b:cb:6d:3e:f5:64:c5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Validity
Not Before: Jun 16 12:00:28 2025 GMT
Not After : Jun 17 12:00:28 2025 GMT
Subject: CN=9b483c7a8b58ec9e376ec27c23cc8fd681112121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bf:fe:30:82:3f:82:87:06:15:61:cc:d2:25:
8e:6a:b0:f3:90:d6:1e:8a:43:eb:ef:05:c0:68:64:
7f:6b:97:0f:ba:1b:39:22:c0:57:47:05:86:2c:dd:
e1:5c:d9:95:2f:85:2c:44:95:12:38:ab:8a:58:ec:
97:37:6a:e8:3e:e9:50:95:4d:84:c1:24:a3:9c:36:
82:d6:64:0a:4a:e6:0c:6f:44:b9:bf:75:1a:2f:92:
3c:6d:28:8c:92:fc:71:ae:c2:c8:82:3b:d2:7b:9e:
fa:91:ed:20:f5:78:1d:89:60:9c:57:96:ad:3b:1b:
1a:1e:46:71:ca:f0:ec:93:e8:4d:e2:d2:f7:3a:c2:
28:97:f1:25:e5:47:64:97:ad:73:0e:22:9a:f0:57:
13:d9:07:e8:31:9c:0b:a5:8b:77:6c:12:2c:93:fc:
21:c0:a5:19:5b:63:f1:e3:6f:d6:9c:70:25:0d:9e:
61:cf:cb:d0:38:55:92:7e:b6:7b:69:10:c0:3f:29:
58:9f:7b:3a:bc:85:32:61:ed:19:3a:6d:73:79:5c:
2b:f7:2c:0c:bc:22:df:57:a2:23:fa:65:cd:87:50:
74:5e:09:64:9b:e0:6a:4c:29:ef:28:7b:5c:bf:02:
84:e0:13:4d:96:57:73:92:ea:e6:da:c6:27:a6:d2:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:48:3C:7A:8B:58:EC:9E:37:6E:C2:7C:23:CC:8F:D6:81:11:21:21
X509v3 Authority Key Identifier:
keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:55:46:f2:40:39:45:fb:3a:96:07:f7:b2:11:6d:5b:f8:ed:
75:66:c2:bf:9b:16:c7:da:b7:17:87:ad:57:6e:9d:7a:3c:63:
8b:de:bd:23:b8:3e:81:9b:ee:c4:ba:74:e2:09:0e:97:54:38:
fb:83:6a:cd:7e:b4:66:9a:53:b1:82:39:ea:57:79:96:7f:83:
fa:bf:07:bf:ac:fc:a2:f9:0c:07:f0:7f:70:ff:77:f8:62:4a:
21:0b:5e:dd:c6:2b:af:8f:64:57:de:73:99:62:45:45:fc:47:
8d:3d:88:65:52:60:09:c2:90:41:c4:be:3c:3a:76:28:de:18:
bc:33:33:8d:50:fb:71:e4:e2:ff:a3:c1:7e:4b:af:fe:d3:91:
2d:8f:8b:5d:8c:25:46:f2:eb:4f:88:73:15:21:f9:37:05:3d:
d8:f8:13:ce:ba:28:2a:a2:8d:37:a6:cc:90:95:84:80:d9:f6:
a5:99:89:48:31:c0:b7:93:49:a4:f7:e0:39:29:cb:00:98:42:
1b:75:1c:06:72:e1:1b:eb:6a:6a:a5:f2:16:d5:31:24:37:fa:
77:82:52:93:19:25:f9:29:b7:c0:66:97:f0:d8:12:22:8e:b1:
4b:73:44:7c:cf:46:a3:58:2d:48:80:b3:d6:f2:4a:99:c4:9a:
b0:87:4a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:32:04 2025 by rpki-client