Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json)
Hash identifier: 1rF0fWxoiuxET7zG/goVJg9DF34QnHN0HInrnTxatuk=
Subject key identifier: EF:D2:94:09:B1:2C:40:1B:E2:B7:AC:01:F3:5B:19:AC:3B:BF:3A:C9
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial: 019894B7FCF03255C9AA1C3DC92044E0D941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
Manifest number: 11A3
Signing time: Sun 10 Aug 2025 16:02:22 +0000
Manifest this update: Sun 10 Aug 2025 16:02:22 +0000
Manifest next update: Mon 11 Aug 2025 16:02:22 +0000
Files and hashes: 1: UGrR__PyRipPzdjGAZBG7BppT8M.roa (hash: iYevY5/kIjNolOqwa16r2Chgd87dJ+qeTiEz7+9fEjM=)
2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: mSe3w7P2QQGttK4/MCXt0Oj6mhxdIIvHKnsKcf6pjaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:fc:f0:32:55:c9:aa:1c:3d:c9:20:44:e0:d9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Validity
Not Before: Aug 10 16:02:22 2025 GMT
Not After : Aug 11 16:02:22 2025 GMT
Subject: CN=efd29409b12c401be2b7ac01f35b19ac3bbf3ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:81:ce:ab:09:de:e3:27:84:86:d7:6a:93:
30:7d:00:1f:31:80:b1:ab:cc:72:81:a7:01:35:5c:
34:13:ee:e3:6e:cd:17:7a:14:99:79:eb:c7:f9:14:
17:27:6d:71:e1:c8:ad:00:10:97:33:b8:7a:e5:99:
7e:37:a1:eb:0e:dc:43:04:88:09:52:7f:e0:4a:1e:
40:e4:a4:88:0b:8e:c5:a6:24:e4:4c:04:c5:bc:97:
59:dd:82:50:d1:be:6c:d1:6a:30:ec:93:b8:9f:93:
f0:2f:b9:35:40:98:ad:a8:e9:48:8e:70:78:76:62:
84:d1:7b:ba:21:30:35:f5:6c:18:c0:76:3b:41:7d:
18:fe:be:e1:a0:79:f8:36:c0:f6:e2:0e:b6:89:25:
8c:d7:d4:aa:36:55:02:c2:ff:73:1a:e4:f7:7b:8c:
d1:62:9c:a1:f5:3a:7e:2a:28:da:2c:02:84:fe:8d:
90:f7:2c:76:c8:3a:d6:1b:e3:49:20:bb:fe:ab:d1:
f8:6c:9f:33:14:0c:47:91:2b:86:ef:3a:08:af:53:
62:dd:6c:93:81:aa:fb:a7:eb:c4:8e:b4:77:e3:b6:
3a:68:31:7d:48:c8:90:d3:67:9d:9b:a7:00:4b:f7:
51:9a:01:5d:19:5b:f5:c6:42:78:ef:4d:43:e3:12:
2e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D2:94:09:B1:2C:40:1B:E2:B7:AC:01:F3:5B:19:AC:3B:BF:3A:C9
X509v3 Authority Key Identifier:
keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bf:ca:00:20:10:43:cd:67:d1:f4:a8:db:db:79:6a:cb:d8:
73:11:79:72:38:39:cb:ad:d3:ac:83:7c:d9:2f:a4:67:24:9d:
4c:fb:f0:74:51:cd:45:59:e0:59:25:f6:34:3b:fd:a6:98:b6:
42:89:5b:20:e0:75:7c:be:86:9c:cd:c4:b2:32:8e:ab:8c:d5:
d0:aa:7f:b4:cf:75:17:45:bc:1e:04:40:5f:95:55:f1:73:6a:
54:b7:bc:73:d2:94:3d:3f:94:e2:72:e2:e2:f0:75:a7:20:95:
e1:81:ff:12:0c:fa:b6:50:5b:55:ef:44:1d:fd:bc:e5:fd:8c:
02:dc:70:08:65:29:b9:7d:2c:a2:70:43:7d:84:83:1b:69:56:
66:87:32:12:14:3a:21:34:56:fd:df:02:00:65:ee:4e:44:67:
9e:ba:0e:6a:11:e1:f9:9a:d5:0b:34:26:96:a7:ab:54:9b:51:
b6:3a:d5:c2:8c:d0:c8:7c:a6:c5:de:5f:d7:92:69:54:5d:81:
df:11:b5:04:52:56:5f:0c:82:13:cf:52:3f:3d:08:30:25:35:
5d:e6:15:3a:5d:64:b6:74:bf:32:1c:63:fb:b6:2c:74:6f:4b:
44:be:47:af:2b:cf:1b:6b:40:6d:ef:70:71:2d:14:48:e9:8f:
09:e1:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:25 2025 by rpki-client