Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier: W1a3dL6MkUTs45mKTKNDzFr1RCvaqhzd1v1tJ1KppY0=
Subject key identifier: EA:C8:78:DB:8C:84:9D:C3:0F:07:0B:32:07:7A:E6:35:05:C7:4A:A6
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 01983871F5554095F320DCEF593D9A1A6F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number: 15FF
Signing time: Wed 23 Jul 2025 18:00:49 +0000
Manifest this update: Wed 23 Jul 2025 18:00:49 +0000
Manifest next update: Thu 24 Jul 2025 18:00:49 +0000
Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=)
2: bTDx6BY2_bieAYAIiAFgdyKIF9k.roa (hash: qCwMntOeFKqowJO7prWM5i0O+TccBmu2GDJdiZbI22w=)
3: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: B8in2Dgaush28RpPBsJqmGwcnbjNmcps+q7zNe/mhgM=)
4: kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa (hash: eW1HiHgHjju0NsKcsTSvzT72THKILOyyGeew75G0SSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:71:f5:55:40:95:f3:20:dc:ef:59:3d:9a:1a:6f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Jul 23 18:00:49 2025 GMT
Not After : Jul 24 18:00:49 2025 GMT
Subject: CN=eac878db8c849dc30f070b32077ae63505c74aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:c3:4c:5b:32:5c:90:b7:d1:7c:16:de:69:
40:c6:ba:b2:47:8c:fd:7b:2e:b8:ca:6c:3b:62:3e:
47:b2:f7:4a:bd:6c:d5:5b:9e:32:91:6d:43:1d:c2:
1e:55:72:19:ce:1f:25:8e:8b:58:69:1e:29:2b:c8:
ba:c3:5f:81:0b:d2:85:9b:47:61:af:a5:23:fc:34:
c0:1d:2a:92:fe:a8:f1:03:6d:4d:e4:97:04:6c:22:
a6:d4:80:6e:5f:52:7f:ed:83:14:a4:35:40:77:0c:
9b:39:11:0c:a6:64:60:40:5c:4f:27:57:e1:af:b1:
28:8a:5a:b4:7c:7a:cf:c2:26:e6:21:60:bd:bb:56:
f9:f0:1b:c2:ac:b0:ad:bd:fa:c0:c5:f2:91:0d:56:
ab:5d:6e:ef:10:9f:e4:fe:dd:47:fe:65:9c:05:7b:
b6:85:b4:21:5a:5f:6b:aa:ac:c0:e4:49:b7:9f:33:
be:e5:4a:df:bb:44:41:3f:fa:50:dd:2c:49:3c:90:
3a:a4:62:b5:ba:37:5f:85:61:37:7c:d6:39:c0:27:
1a:ff:94:f2:88:1d:2b:55:41:5d:3c:f9:df:ec:43:
7c:59:f3:c1:63:6d:94:67:fa:04:37:9f:ce:a1:c4:
65:a9:9e:5f:a4:b2:9a:00:ab:98:47:97:e0:79:82:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C8:78:DB:8C:84:9D:C3:0F:07:0B:32:07:7A:E6:35:05:C7:4A:A6
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:80:35:52:db:b5:1d:6e:8d:fd:fa:52:6a:1d:ac:75:5e:2f:
ea:fe:38:c7:d6:4d:f2:30:2c:36:8e:29:45:4a:7b:e3:78:de:
56:d3:fd:1f:78:2f:fa:04:99:b7:5b:5b:21:37:f4:eb:e6:0d:
01:f8:35:e5:82:4c:9f:11:80:b5:5c:ec:51:68:72:ee:cc:53:
9e:1f:b8:0a:f0:87:f2:51:ab:0a:3e:0b:3e:65:2c:2c:bb:2f:
77:5f:67:bc:9d:bd:d0:25:e4:b7:0e:e3:e7:35:4b:c0:f4:90:
52:27:c1:87:bb:17:01:9a:2b:3e:06:93:60:22:e3:3d:90:03:
fa:c1:f9:0f:e7:38:e0:e2:bd:56:c2:8f:7e:25:62:3a:e6:7d:
45:02:7d:fc:71:0b:35:7a:78:da:bc:6a:4e:48:41:a0:03:8b:
5b:d0:fb:e4:d2:72:c3:a9:5d:98:eb:14:b0:5f:52:e7:35:96:
a1:67:1d:c1:51:40:4c:7e:73:09:91:ff:e5:8d:b9:ea:04:8a:
e9:50:22:65:4b:cc:3e:b2:70:6b:95:a5:78:7d:8e:f6:e6:f3:
8e:d0:3f:5f:6f:71:45:f7:f4:d4:a1:1a:71:91:e0:4a:7e:06:
8e:9a:c4:be:88:52:ed:86:82:ac:3e:5f:6c:09:b8:a5:b2:f0:
5e:8d:8e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:19:28 2025 by rpki-client