Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier: 6BH+K8TsdDIl8iGN0aml7l2eCmXx3vb/yWmm6Vy5v+A=
Subject key identifier: 07:AF:02:1F:1A:1B:AE:2F:39:BD:36:B0:B9:60:E4:26:70:F5:A5:58
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 01976A3C3B6655BE7AA355EA8412F0460860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number: 0A7A
Signing time: Fri 13 Jun 2025 17:00:21 +0000
Manifest this update: Fri 13 Jun 2025 17:00:21 +0000
Manifest next update: Sat 14 Jun 2025 17:00:21 +0000
Files and hashes: 1: Ep6x42DXRSqizolUteEfvKxUcLA.roa (hash: R7QtcNnXyeV8OJfFTG/3xT0jdYWPM+BRX6IIEmRZyXk=)
2: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: UcoW4EEbbDRAoXHBdHmNPSDnzn2uFq6DVKa0C8Gskgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:3b:66:55:be:7a:a3:55:ea:84:12:f0:46:08:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Jun 13 17:00:21 2025 GMT
Not After : Jun 14 17:00:21 2025 GMT
Subject: CN=07af021f1a1bae2f39bd36b0b960e42670f5a558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:82:5b:90:c9:7f:d0:7a:01:68:88:dd:b2:
b9:b0:6b:b9:36:74:68:b2:47:db:14:b2:9d:14:de:
f2:21:e6:2c:0c:10:89:f4:68:c5:28:22:f6:17:b3:
1b:fd:6d:03:ab:02:b0:00:ea:7d:32:de:e9:b7:bf:
d4:07:f0:36:32:d2:97:57:cd:fb:a5:18:3a:69:ed:
eb:c3:34:da:96:57:2e:3a:11:0a:c7:b6:4f:46:be:
89:c2:51:42:76:80:3c:af:e6:46:a5:2e:d0:c6:bb:
8c:8f:ad:43:ea:65:9d:de:f8:ec:29:5d:fc:a0:25:
43:65:25:0b:75:9b:8a:ba:e2:27:e9:16:e9:3f:58:
ee:84:7e:4c:f6:e9:8e:75:82:0f:7f:67:76:42:07:
d8:e5:a4:fe:38:10:41:a5:c6:eb:f7:a1:2b:d0:97:
2e:e8:e6:0a:93:45:90:b5:c3:95:16:ac:4a:40:5f:
fd:48:08:3a:87:9d:2c:41:c1:2c:4e:07:a7:80:a6:
66:86:89:ee:8a:47:9c:7f:d2:94:da:0e:6e:d0:1f:
ed:f3:69:b7:f4:f4:76:d2:6f:b4:f4:be:26:45:21:
87:b7:95:3a:d1:8e:7c:c6:9b:b0:15:ba:8f:b9:2d:
0f:a5:b4:d4:2e:ef:aa:a2:ee:6d:ba:0a:e2:97:38:
f9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AF:02:1F:1A:1B:AE:2F:39:BD:36:B0:B9:60:E4:26:70:F5:A5:58
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6a:4a:db:a5:85:36:98:ff:b2:0c:11:f9:35:7c:fb:41:2f:
aa:44:0f:fd:76:23:81:07:e6:d3:a3:8d:65:d7:9f:ac:ea:cc:
09:6f:ce:9f:c8:65:11:24:14:f6:ae:7d:78:de:a9:49:be:f9:
4f:dc:bb:81:40:ce:61:84:44:02:da:f1:b8:6f:5e:fd:a1:cd:
c9:9c:79:95:4b:c4:1e:cb:e4:5e:57:8e:fd:b1:6b:e0:bd:38:
1e:41:34:c6:32:65:97:a8:2f:cf:ef:0f:23:a3:02:e8:dd:5e:
4e:6d:54:61:24:68:8d:95:0a:d3:bd:ba:0f:b5:6f:c0:cb:8c:
57:c0:d2:38:8c:fe:b4:e0:bf:97:ee:81:70:65:e0:3e:47:b3:
53:c8:f1:88:2b:36:a4:a0:60:24:19:7a:b3:44:6f:21:be:ff:
62:d5:6a:a3:82:98:99:d1:31:c5:e2:69:19:cd:6b:1e:44:f6:
62:25:c8:b2:16:ec:ca:ad:02:b6:90:38:ac:ca:0c:98:d4:e8:
eb:88:f5:eb:62:c2:c6:05:f8:1d:cf:43:0f:1d:5a:0f:df:57:
9c:19:19:b3:4d:39:9f:ef:7f:a3:78:4c:d4:33:86:f8:f8:48:
f4:d8:7c:ff:d1:23:fc:82:57:c8:94:87:f8:d6:38:5b:22:d0:
44:89:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:13:22 2025 by rpki-client