Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier: pF2Qzsl1Z8bxKeELHab7PBFzjRvKHCNsUVW0Lcc7qU8=
Subject key identifier: 55:3D:BA:79:CD:4A:BB:B6:43:17:F9:CD:F8:99:7C:74:31:EA:BA:2C
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 019873E1E4FBFB3BE1F3FAEB3C447D537872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number: 051B
Signing time: Mon 04 Aug 2025 07:00:40 +0000
Manifest this update: Mon 04 Aug 2025 07:00:40 +0000
Manifest next update: Tue 05 Aug 2025 07:00:40 +0000
Files and hashes: 1: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: XbDPVkxvGh3e2y4t5NveMTx2gliYrE2hMkSWdflj5go=)
2: hQt6fLvth7yhZ_gy-eWM04fH0Vo.roa (hash: 5eRa0XK3oy+0XVVEDTa2qZR1cDbvimVVidnig16u0uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e4:fb:fb:3b:e1:f3:fa:eb:3c:44:7d:53:78:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Aug 4 07:00:40 2025 GMT
Not After : Aug 5 07:00:40 2025 GMT
Subject: CN=553dba79cd4abbb64317f9cdf8997c7431eaba2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:ae:fc:26:ec:6d:17:13:4b:d0:df:ae:6d:
48:5d:c2:49:ba:5f:12:66:79:20:e9:5d:c3:3e:26:
ac:ad:93:0e:53:b4:66:cd:c8:a3:f3:ca:6d:12:4c:
b3:5c:5a:99:d7:f1:a0:8e:a7:05:7e:4a:68:00:62:
55:0e:ea:c3:4e:2c:2c:4d:55:8b:38:53:8a:cc:3a:
a6:38:f0:b6:a8:8f:bd:b5:1c:15:6c:7b:45:6f:77:
b8:ac:da:b0:bc:1b:67:14:8f:d6:d0:60:24:ab:69:
b4:ed:77:7b:2b:4c:53:ef:a4:54:0a:03:19:04:85:
e7:ad:24:c4:45:c7:72:ee:8d:d6:69:45:04:cd:d5:
0c:dd:82:2b:19:07:28:98:7e:87:0c:bc:3a:e3:9d:
f9:0d:d1:52:6b:4a:d4:a5:8b:a4:1c:16:2e:13:5e:
cc:89:06:18:4e:9a:3c:5a:26:9e:45:07:d6:49:65:
61:07:77:ad:8c:9d:28:dd:9b:1d:72:4b:d4:78:66:
c9:60:d6:0c:76:a5:51:9e:4b:c4:08:38:f5:4a:e5:
1d:1a:1f:7e:d7:9d:ff:8d:e4:40:50:50:77:85:d4:
43:57:fa:bb:bf:45:47:8a:a1:ef:35:db:cb:ee:73:
b5:a4:c5:fd:40:c0:2d:94:ac:c0:29:7f:ac:ba:c9:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3D:BA:79:CD:4A:BB:B6:43:17:F9:CD:F8:99:7C:74:31:EA:BA:2C
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:02:44:e6:fa:47:eb:23:43:52:e0:b6:60:ac:7f:9d:a3:69:
43:c3:12:f3:a7:b9:4c:e6:02:7c:04:24:94:f3:ab:dc:c8:84:
24:8a:78:e3:32:0c:45:8f:ca:26:c6:9b:12:49:0d:7d:ff:87:
2c:5d:8c:39:e3:bf:a0:ab:50:32:96:fb:86:c9:a1:27:0a:22:
88:33:2b:ed:a8:3d:f3:3f:4a:55:64:f5:59:26:1e:85:d1:26:
6b:48:64:d1:38:4e:76:8e:22:f6:92:d7:24:d9:f9:05:67:cb:
c0:ec:a2:c6:c6:0b:6f:fb:0e:e8:ef:bf:05:22:03:4d:2c:ce:
e7:fc:4d:65:63:db:ac:34:b0:03:8f:d5:ff:bf:06:31:8c:58:
2e:9e:ae:2f:12:3c:c2:a8:80:1f:46:46:44:e6:80:fa:5b:44:
16:61:9d:cc:6c:91:7e:03:60:83:c4:9b:37:39:60:6a:ee:3c:
13:69:22:85:a9:ae:6e:66:91:5c:5c:9b:31:da:ea:34:7d:d2:
25:8a:fe:c8:2a:5c:1e:f8:16:5c:c3:b6:05:d9:9b:05:9b:47:
10:ba:3d:4e:e8:1b:31:09:18:57:b3:56:f2:4f:6c:d6:c9:36:
ba:ac:17:cd:84:4f:76:5b:60:02:af:de:a5:43:28:fd:18:1e:
b7:e0:73:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:28 2025 by rpki-client