Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: 5dMzR7UGy4M9z49v4G5+1DfdjHdZtr3EJYE8HDJndlk=
Subject key identifier: BF:C6:AD:25:76:6E:E6:38:F3:BC:81:A5:A3:E1:B4:47:95:B3:70:19
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 0198499C25D4687BFCD16C9D6B891734A0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 02:00:26 +0000
Manifest this update: Sun 27 Jul 2025 02:00:26 +0000
Manifest next update: Mon 28 Jul 2025 02:00:26 +0000
Files and hashes: 1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: NiRrmoeFwQRUSvSbcQ4IEaVEjw5dDlb1tkYMxGdaPIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:25:d4:68:7b:fc:d1:6c:9d:6b:89:17:34:a0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Jul 27 02:00:26 2025 GMT
Not After : Jul 28 02:00:26 2025 GMT
Subject: CN=bfc6ad25766ee638f3bc81a5a3e1b44795b37019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:81:38:48:df:bd:2e:e6:9c:3f:4c:1a:c5:
97:86:8b:2b:4f:90:f8:41:38:36:52:57:c7:5a:12:
b6:6e:b5:32:01:6f:d7:32:96:82:71:4a:d0:7e:4a:
9f:96:41:99:9c:b0:ec:54:97:be:5c:94:56:be:7c:
80:8c:b8:a4:66:8e:7b:63:12:31:b4:73:cd:a2:9d:
53:e8:e8:a5:b8:b2:48:6c:15:aa:5f:26:fa:c8:e1:
32:23:d7:69:12:a4:4f:e2:79:26:79:0a:81:7e:8e:
68:a3:1f:ee:e4:b3:50:ef:b2:a8:c5:2a:b0:4f:4a:
f0:82:b4:5b:22:3b:1d:a1:47:13:25:7f:dc:4f:cb:
c1:91:c8:b3:62:92:ab:7b:f6:76:cd:38:72:fd:41:
ed:4b:95:ca:8b:95:70:f2:e4:bb:f0:e5:56:5e:4d:
04:d5:6e:a2:8c:25:ed:9d:da:15:6b:2d:7a:79:81:
8c:f7:17:c5:b7:42:6f:13:38:35:fc:6c:86:89:82:
80:24:dc:35:4e:fe:8f:01:c7:05:36:0d:50:e4:a3:
64:1a:37:17:73:74:43:70:e1:13:6e:12:eb:44:40:
ab:06:4a:cb:a2:94:c9:0f:ad:84:59:f7:24:73:94:
38:f7:c4:cc:b7:4a:0d:5c:63:ae:f9:7c:00:66:9b:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:AD:25:76:6E:E6:38:F3:BC:81:A5:A3:E1:B4:47:95:B3:70:19
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b6:dd:85:93:c7:2f:87:0e:16:af:88:9d:8c:56:e7:58:09:
af:60:64:fc:f5:51:e3:a3:e6:ae:67:58:f6:c7:28:e2:b6:35:
10:67:c6:95:9e:27:4f:ee:06:da:25:7b:ca:dd:9c:ad:ce:a3:
9c:47:b0:01:c3:f1:c3:17:e6:7b:52:2c:eb:ab:d7:84:04:4e:
33:d2:06:50:31:1c:bb:f8:f7:d9:6c:eb:38:8d:4f:02:66:d9:
a0:c8:95:ef:6e:4b:a1:cd:bf:8c:56:b0:98:45:fc:72:38:05:
8a:e6:76:7c:8e:c5:c1:73:2d:19:11:cc:35:bd:be:4d:66:09:
c8:1e:d4:14:a6:56:e5:23:4a:b3:d2:81:12:ff:50:2a:5b:72:
38:7d:3b:01:4d:c1:b8:d7:2a:b3:5a:b8:dc:de:05:de:25:4e:
0f:37:5c:12:71:c6:73:d4:16:8e:f2:68:4c:14:f3:89:e0:bd:
fc:0f:0b:4d:eb:74:2a:8b:bb:26:14:de:8a:5f:47:25:e0:fd:
bd:6f:30:30:d1:6c:4a:36:fd:37:e8:62:07:1b:8d:6b:1e:aa:
08:a4:53:26:bc:f6:39:44:35:9a:cb:3c:69:7a:44:b3:54:cc:
80:6f:39:d8:87:07:f1:88:f5:d6:99:bb:07:3a:07:fb:97:48:
86:df:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:51 2025 by rpki-client