Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier: 8gy+hwWEbkyjJ8RYAY0525fI6bGqifIb/6ZagBwdQ+A=
Subject key identifier: 29:2B:13:D3:3D:72:57:A6:BA:0A:AF:44:D7:81:B3:40:E1:0F:F1:7D
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial: 01987DC0A3CEB438488E8FAB4530B4664CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number: 15B0
Signing time: Wed 06 Aug 2025 05:00:33 +0000
Manifest this update: Wed 06 Aug 2025 05:00:33 +0000
Manifest next update: Thu 07 Aug 2025 05:00:33 +0000
Files and hashes: 1: 7Atpb8ICQNgBoE2VxygDoXR916c.roa (hash: 9LfiFF+kHY8QeDVlYR0804RgSHl5CYTGB3eoMEBzGw0=)
2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: 6hVIFG0hZekuGbhqQ0W9gov2wn0hrSixdvhfS9D7+60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:a3:ce:b4:38:48:8e:8f:ab:45:30:b4:66:4c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Validity
Not Before: Aug 6 05:00:33 2025 GMT
Not After : Aug 7 05:00:33 2025 GMT
Subject: CN=292b13d33d7257a6ba0aaf44d781b340e10ff17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:cb:c9:e7:90:28:ea:3c:0d:4b:26:a0:03:
05:6b:4c:50:81:04:db:0b:eb:c4:e4:78:be:1a:22:
06:ce:75:0d:d6:59:49:9a:c8:91:a4:a6:6f:a7:78:
72:5e:b8:74:2b:60:e8:45:43:cb:cf:a0:99:ba:35:
e6:23:6b:e8:fb:5d:77:c8:22:a4:2b:ae:11:c5:0e:
54:98:e0:1c:4e:00:98:7e:b2:7a:06:da:0e:24:8c:
12:ab:bf:b5:5d:0c:22:b9:76:bf:5d:f7:2d:32:db:
ad:bf:77:4f:a4:9f:b1:a1:76:16:36:2e:8e:b5:e0:
67:ad:47:af:a6:81:18:70:db:6f:0e:4d:67:86:fb:
a6:2c:89:03:f0:ac:7c:83:72:45:65:ed:e5:dd:fb:
cc:6a:b3:db:1f:1a:24:aa:37:80:1f:24:79:f5:6d:
6a:36:aa:df:da:22:6d:2e:c6:32:c6:4f:5f:d4:68:
ed:41:4c:de:7e:ce:6d:ad:19:81:07:2f:75:8a:34:
64:61:2d:38:69:99:b9:84:06:14:a5:7d:53:ca:b0:
52:5a:54:c0:ba:89:40:19:3e:6b:17:37:f3:2d:3d:
60:77:5f:74:a0:6c:db:f3:c8:97:8a:72:15:26:69:
b2:d7:42:d5:7d:50:67:27:43:63:96:17:44:f4:4f:
ac:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2B:13:D3:3D:72:57:A6:BA:0A:AF:44:D7:81:B3:40:E1:0F:F1:7D
X509v3 Authority Key Identifier:
keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a9:91:e3:72:5c:23:19:ba:dd:fd:4d:16:5a:11:ae:ff:aa:
53:30:8a:29:4d:13:36:ca:42:98:32:61:d8:56:9e:f4:41:4f:
83:77:8d:c2:ce:eb:1d:0d:a0:0e:49:d5:7c:8d:b4:25:b1:d0:
10:5a:37:f5:9a:98:37:0b:97:54:52:14:51:c6:dc:4d:ee:fa:
01:e4:16:b8:f7:3b:d3:08:dd:c0:fb:02:af:c6:fb:f3:eb:79:
24:96:7b:34:ab:9e:b9:c9:80:f3:75:c6:d8:7d:67:94:71:0e:
f0:6b:88:a0:50:2c:60:a7:45:15:4a:a0:fe:b6:c3:4b:17:af:
84:8b:2e:ad:0c:69:b7:74:f6:6a:f5:e1:0f:02:a2:e7:5f:f1:
61:fc:72:bd:f7:cf:88:8c:8c:89:94:ac:f6:3b:16:31:07:ca:
83:f5:2a:af:b3:b1:5a:4c:55:64:b6:de:87:07:f6:15:92:34:
18:db:7e:95:3b:24:b2:fe:75:07:49:22:2f:56:9a:77:b9:89:
c0:7c:8c:f6:a3:b6:f9:e1:1f:c3:8b:f0:19:b6:79:fe:82:45:
16:31:d1:96:05:a6:83:32:6d:1c:91:5e:9e:97:d6:ad:f1:30:
d8:ae:a3:92:41:9e:22:c1:e5:fa:44:b0:59:f0:6d:20:38:b7:
e8:19:b9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:07:22 2025 by rpki-client