Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier: 3ScwTtGj28KU7XS8ZJ+5oVAlNsqtCcs2zLY8yg33/2Y=
Subject key identifier: 20:0B:05:2E:86:E6:1F:03:6E:AF:05:CB:9A:60:5C:C4:59:91:5A:30
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 0198978119E8788A96C9A11D2E6C8AFEA332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number: 0B16
Signing time: Mon 11 Aug 2025 05:01:17 +0000
Manifest this update: Mon 11 Aug 2025 05:01:17 +0000
Manifest next update: Tue 12 Aug 2025 05:01:17 +0000
Files and hashes: 1: Ep6x42DXRSqizolUteEfvKxUcLA.roa (hash: R7QtcNnXyeV8OJfFTG/3xT0jdYWPM+BRX6IIEmRZyXk=)
2: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: dpLkI4ea+bn9oAJz5Oh9pFawMIFV/aldR9G4+Uj062Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:19:e8:78:8a:96:c9:a1:1d:2e:6c:8a:fe:a3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Aug 11 05:01:17 2025 GMT
Not After : Aug 12 05:01:17 2025 GMT
Subject: CN=200b052e86e61f036eaf05cb9a605cc459915a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:f7:f8:26:d8:36:1a:75:9b:42:d6:6c:cc:
ee:74:c2:d6:8a:de:8d:79:2a:1f:40:81:1e:f2:d3:
64:2a:f4:80:c0:e8:ee:e1:6b:6b:2f:51:a7:25:0c:
5c:58:12:82:16:1f:c1:96:62:ee:b0:7d:03:69:66:
2e:de:b8:dc:b1:83:d9:21:a3:b3:0d:7e:ac:e0:1d:
91:71:5e:f2:bb:26:30:fe:7e:05:bf:b1:d9:fd:73:
77:b3:b7:1a:f0:38:ac:f6:6d:ec:6e:2a:a0:a9:b1:
5c:c2:0d:11:e9:98:ae:20:8d:b4:54:fb:f4:10:29:
1b:80:8c:5f:5d:ca:a8:1f:75:ed:57:ab:77:67:24:
73:40:53:74:e5:ad:31:78:c8:36:46:a6:4c:23:3a:
d7:c6:e1:70:0c:71:06:80:64:1a:a6:7f:4e:bc:fa:
b1:9b:08:d6:e8:24:de:22:f2:53:15:78:11:b4:a9:
37:ff:65:e7:a7:e7:c3:a2:2d:dc:42:f8:79:d4:2a:
be:77:98:f9:51:6c:14:18:33:6a:e2:84:76:0b:ae:
e3:41:73:7e:f4:3d:d6:1a:b1:32:60:b2:4b:30:41:
6c:cf:c9:1b:45:d0:bd:5d:49:e0:cf:ec:54:a9:c1:
7b:b9:a4:53:cb:06:af:04:f9:05:03:07:ec:1a:72:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0B:05:2E:86:E6:1F:03:6E:AF:05:CB:9A:60:5C:C4:59:91:5A:30
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a6:2c:71:7b:ea:d5:c1:a0:18:24:9c:5e:14:73:4d:3e:28:
97:8e:67:07:25:70:7e:62:39:02:d3:70:de:10:d7:7d:d2:3b:
03:5c:4a:e3:a9:b5:19:04:24:6f:a2:ba:b8:88:bf:63:60:9b:
6f:ef:1d:45:c8:0e:f3:a9:f1:f3:cd:a2:73:29:0e:f6:9d:1d:
66:4f:c4:a4:7c:cc:56:13:ab:01:3f:21:15:33:0d:72:e5:88:
53:45:d8:1b:c6:0b:39:f8:89:c9:68:b6:4f:19:e8:4f:fb:84:
f7:28:49:6d:56:b4:36:c3:46:ee:c9:0b:3b:80:e5:0d:36:e6:
52:e1:37:3b:f8:39:34:14:8e:f4:54:8c:1c:50:61:42:d3:9a:
b1:57:6e:60:f5:0c:d5:e0:b1:a6:dd:52:0e:d7:28:b6:51:f7:
cc:00:3a:bb:13:f8:eb:48:4e:b0:46:30:b3:bb:cc:0d:3e:e9:
0b:07:4a:99:6c:99:bc:00:8f:b4:ff:2e:7c:09:9a:ee:12:0f:
d0:c5:98:81:f8:8f:f0:47:df:a0:db:c5:13:81:03:82:7a:e0:
76:6c:08:aa:1f:5c:97:7b:fb:f1:a9:77:e0:35:af:31:26:0c:
ac:4f:6a:d7:c8:af:99:d7:33:fc:a6:f1:00:30:df:18:71:cd:
19:4f:f2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:27:45 2025 by rpki-client