Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier: DWj3vRf9aHBEStcYDLM5E/aXuFBvsyBhIBK63Sg3YFM=
Subject key identifier: 79:16:47:AC:4D:6A:0C:BB:20:38:24:B1:6B:31:1A:FF:B4:DE:9B:1E
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 0198752BA74A802492D76653D06E516AA3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number: 0C86
Signing time: Mon 04 Aug 2025 13:00:51 +0000
Manifest this update: Mon 04 Aug 2025 13:00:51 +0000
Manifest next update: Tue 05 Aug 2025 13:00:51 +0000
Files and hashes: 1: 1-eVtiZIJZtejkcxnJZbMOuqtkvM.roa (hash: /dozujzBruht/lOgqwCLtQNFBrpieolWDy5kZ5Mel3s=)
2: 56FwlKZ7KIhARLPC6HlmmMABBnU.roa (hash: Z+1GZvGlxeBEP1crVQ4oVXjpJKgbOm4WDdf1clBCOOM=)
3: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: 9FOL8LLniZ+kNQV6RZT3LhnvCs6HQGMANFPAK+MLUgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:a7:4a:80:24:92:d7:66:53:d0:6e:51:6a:a3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Aug 4 13:00:51 2025 GMT
Not After : Aug 5 13:00:51 2025 GMT
Subject: CN=791647ac4d6a0cbb203824b16b311affb4de9b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:78:e2:cd:29:c2:bf:aa:86:67:49:b9:54:
10:92:dd:d2:f4:cc:49:b5:25:47:03:61:a4:dd:d8:
1b:32:cb:16:00:16:1b:79:f1:a8:1d:0e:b6:dd:a9:
71:81:4e:06:95:4c:45:e9:08:44:8c:95:53:0c:e8:
8c:49:96:4b:c7:fd:be:75:d5:8d:3e:25:bf:37:82:
1a:90:17:2e:f3:44:b5:76:29:9f:72:5b:5c:44:f1:
a4:9d:dd:0e:5f:c8:8f:41:9f:b8:b0:5f:ac:20:80:
90:bb:ee:d8:08:b8:e3:42:c5:0a:a3:15:25:f6:95:
51:ed:b7:98:34:53:2a:ac:df:19:a0:53:45:d0:54:
22:df:46:fb:2d:c7:d1:da:c3:19:55:fd:31:47:38:
49:be:71:95:75:3d:89:e2:d9:f3:39:a7:79:01:fe:
a5:c5:e2:28:d6:34:a6:6a:49:b5:bf:e8:1c:81:ea:
62:a5:71:18:88:e0:1a:15:8a:a0:2e:1e:1b:c7:26:
47:ed:d0:ec:4c:a8:2d:43:e9:74:25:ba:8b:cd:51:
5b:a8:bf:80:68:cd:1d:95:f3:dd:0c:de:28:fd:68:
99:aa:85:20:e8:88:eb:fc:45:0f:23:76:9c:42:07:
4d:74:42:0f:e5:e3:b5:0a:f3:a7:c9:c7:da:ec:da:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:16:47:AC:4D:6A:0C:BB:20:38:24:B1:6B:31:1A:FF:B4:DE:9B:1E
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:a5:37:4b:2d:66:d8:fb:e1:3e:dd:2c:b5:76:8c:98:ca:69:
cd:09:8b:c0:76:aa:4b:05:9e:3a:70:47:e5:45:fe:3a:eb:d2:
bd:13:a0:52:bb:b7:66:ce:bd:51:60:6b:bf:9c:f7:cd:c2:73:
2c:17:d8:ec:2d:d1:18:2a:29:c9:a4:fd:47:e4:63:56:38:10:
a5:fc:90:27:0e:99:a9:16:bf:c3:6e:27:2e:d7:13:ba:60:77:
ad:1a:7c:08:14:34:67:16:c4:ef:6b:28:1d:be:da:b9:ea:7d:
ae:cf:78:f3:5c:b4:ed:22:38:9a:82:54:e4:6c:41:a6:b5:c4:
0b:e0:bb:44:4a:f5:c8:8d:cc:47:99:ff:94:99:25:fa:da:4c:
73:4c:e3:89:34:48:56:59:f2:8a:56:80:7b:9e:53:ea:0a:36:
2a:b0:aa:81:da:5c:ea:33:57:ba:cc:31:66:23:47:9b:84:6e:
ec:10:11:c5:b6:c3:49:56:39:3f:34:d5:4a:9d:8c:bb:11:52:
e7:39:68:a3:52:57:c7:f5:f0:66:1d:3f:b4:d0:68:81:db:40:
ad:32:34:a6:a8:c8:4a:fc:c1:67:1a:07:3a:8b:24:42:36:68:
37:be:73:a6:38:ef:8e:a9:4b:c4:93:e2:df:ab:6b:89:5c:5c:
ff:b7:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:45 2025 by rpki-client