Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: HSq8eFQJPUeU3XoG24Fmgd4cD+PENChcNE19XSFMOpE=
Subject key identifier: 94:D2:65:4E:65:DB:7B:E4:E9:9C:25:CE:B4:E1:E3:92:D9:FC:0A:65
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 0198748728B17DC97A52170BD017263F0CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0B3B
Signing time: Mon 04 Aug 2025 10:01:11 +0000
Manifest this update: Mon 04 Aug 2025 10:01:11 +0000
Manifest next update: Tue 05 Aug 2025 10:01:11 +0000
Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: EuD/xiwL1mJDAzyzjuNMAvLW7Sl9Hlf+UM98CgQ866U=)
3: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:28:b1:7d:c9:7a:52:17:0b:d0:17:26:3f:0c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Aug 4 10:01:11 2025 GMT
Not After : Aug 5 10:01:11 2025 GMT
Subject: CN=94d2654e65db7be4e99c25ceb4e1e392d9fc0a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:dd:ce:ec:98:e8:a6:13:c7:6b:b5:b3:48:
f4:d2:65:88:78:75:0b:db:a9:ec:52:14:3a:cd:22:
e5:8e:18:39:18:c7:1f:1b:73:31:09:54:98:65:b4:
e8:0a:9d:84:28:3e:98:01:fa:1b:db:73:e0:bb:2b:
f4:bb:40:be:a7:6b:02:d5:dd:1c:16:60:11:17:34:
d0:76:05:99:a7:d5:63:66:ba:70:9f:9d:cf:a7:9e:
51:45:1c:b8:86:a1:34:58:01:ca:db:99:8b:f5:ce:
39:76:db:c4:8c:74:03:af:a4:2b:cc:dc:5f:9f:93:
12:9f:a6:4a:08:57:d1:bb:5e:61:f6:2f:af:ea:32:
3b:c7:a0:12:80:92:67:ce:a1:e9:d4:e8:e4:b3:c7:
3f:a9:8e:e4:05:0b:e0:48:2e:e5:55:7b:2a:e4:13:
6d:48:84:f7:65:78:ac:e2:06:cb:ac:e8:e2:07:92:
9e:f6:37:eb:27:6b:a8:b0:3b:06:b3:e9:35:ea:c8:
76:78:98:18:98:56:36:35:7b:f1:93:4c:1f:24:c5:
1e:b0:a5:fd:84:96:64:14:58:eb:2f:f2:c7:48:58:
13:38:d4:55:00:30:6e:be:45:d7:3a:44:68:f5:8d:
7d:e8:25:84:9f:bb:00:f3:62:ff:ee:a7:d5:f1:85:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D2:65:4E:65:DB:7B:E4:E9:9C:25:CE:B4:E1:E3:92:D9:FC:0A:65
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:40:80:83:eb:d6:3f:09:a7:a2:cf:20:46:e8:ae:98:8b:c1:
3e:b2:b5:01:cd:b4:a3:e5:c7:34:5c:22:dd:41:56:19:b1:27:
8a:d3:6c:d9:22:41:a5:63:36:87:ab:a7:09:be:cb:9c:1d:b8:
30:09:36:ef:78:06:d8:b6:d5:6e:4b:ff:d4:8e:1b:81:09:a7:
56:ea:75:08:de:c6:b7:e4:2d:6f:ad:f3:37:ce:c9:a1:77:44:
3b:6a:a4:16:c0:b6:5c:d2:15:74:0c:ef:74:89:87:0a:5f:9c:
92:1a:d9:69:77:b0:84:bf:34:06:d3:0d:fd:a9:b2:2a:18:c8:
78:67:94:ab:1e:28:3e:69:d6:49:58:3e:17:d3:de:54:8e:ce:
1a:92:68:bc:44:fb:b0:ce:ac:82:11:48:13:17:09:eb:a7:49:
8b:67:a7:ec:4f:6d:04:84:59:97:66:2c:7a:54:18:2a:0f:57:
1c:60:75:52:7f:ec:51:ce:5b:5f:cf:77:6d:e1:0b:c8:e8:8e:
9d:a7:6d:37:ee:fe:00:c0:3e:59:c1:f5:b3:0c:55:7c:ed:e9:
fe:75:0c:73:3d:e1:76:57:ec:b2:cb:57:9b:a9:87:d3:c4:9e:
c6:9e:ee:78:f2:df:9d:15:fb:a6:b6:7a:b7:47:fc:80:30:eb:
cc:93:61:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:37 2025 by rpki-client