Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier: DCuEPJvNveN8stCUcklkVq85RKC3PMmt1Ww4qdinazw=
Subject key identifier: AC:15:B0:EC:E9:2B:BA:87:67:F6:AA:E5:85:29:BD:EB:C5:EA:2F:77
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial: 01984A417269CC74F9BB9630CC0A8987D5C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 05:00:59 +0000
Manifest this update: Sun 27 Jul 2025 05:00:59 +0000
Manifest next update: Mon 28 Jul 2025 05:00:59 +0000
Files and hashes: 1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: GR3P8yM+t7PSqyJ2hSeCP+GI5vlLNtrbrJ4lBKtRTbE=)
2: tiFC6JqksrztinNgeHjMezLIyQo.roa (hash: AMO7U+NdmFNyNa76WinXG21mQKY3WubeaQslsZeF+HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:72:69:cc:74:f9:bb:96:30:cc:0a:89:87:d5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Validity
Not Before: Jul 27 05:00:59 2025 GMT
Not After : Jul 28 05:00:59 2025 GMT
Subject: CN=ac15b0ece92bba8767f6aae58529bdebc5ea2f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:a3:cb:12:29:f3:cf:d3:0e:4f:0e:5a:e8:
c8:2b:80:e2:6f:dd:74:84:a4:d9:5f:fc:a6:1f:6f:
ea:b6:cd:0a:fd:f6:aa:8f:8b:04:60:f7:bb:df:0f:
ae:88:41:11:de:ff:14:90:9c:5c:2d:d8:b5:e7:a8:
4d:c1:4f:cb:38:e6:5c:1c:c0:5f:c8:53:1d:d9:2b:
6b:8e:b8:fd:23:5d:dc:a8:60:c1:b9:3f:44:83:c9:
0a:bd:30:3c:ef:0b:9d:9d:ff:ba:50:88:25:e0:76:
32:74:0f:0a:16:ac:4b:36:9f:49:d0:88:b1:a8:4b:
2c:19:ee:d1:31:6c:70:ae:f3:c1:27:a4:68:2e:c3:
aa:ee:d9:14:dd:a5:49:b8:22:80:78:fa:50:f1:3b:
ff:6d:0b:a3:36:94:d5:4d:31:1c:ec:68:ba:51:dc:
e3:80:1a:01:75:74:0c:97:38:12:3e:e2:98:08:9e:
06:41:e1:c5:f5:e5:c2:48:44:db:51:0b:67:f1:1e:
de:6c:2c:09:0b:81:11:4a:1a:80:7e:89:de:63:9f:
83:13:e9:d6:37:3a:53:35:70:1d:0d:42:a3:7e:f5:
09:99:63:dc:d8:6b:30:89:a2:0f:49:63:59:80:0d:
df:9d:dd:10:2b:9f:de:8a:13:21:de:66:f7:c9:6c:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:15:B0:EC:E9:2B:BA:87:67:F6:AA:E5:85:29:BD:EB:C5:EA:2F:77
X509v3 Authority Key Identifier:
keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:12:1e:e0:0b:93:33:dc:9b:57:2c:72:e7:58:ff:a9:de:36:
43:dc:93:bd:a6:59:1e:8d:a2:c7:5c:0d:e9:3b:09:ab:46:a6:
fa:f9:89:23:53:14:9e:55:b4:c4:b9:ea:fe:c9:ab:16:18:17:
81:d5:83:ac:33:bd:a7:dc:fa:0e:29:7e:d4:84:28:1e:4e:da:
6c:4f:db:db:87:c5:71:7d:6e:70:91:21:8a:5d:f6:c5:f7:c2:
6d:e8:28:80:77:fd:c5:e2:dc:c4:30:e9:45:5f:44:76:d3:e2:
c6:9e:77:39:b0:ce:ba:08:af:5f:09:d1:1a:9c:d1:0c:53:a2:
57:ec:99:8c:ca:24:59:3c:3f:1e:21:91:8a:b9:44:e2:69:d6:
cb:17:f9:8a:c3:e6:34:66:4e:ef:55:2c:a7:3b:32:87:c2:a5:
e7:cc:4a:25:7a:2d:86:d2:5d:b4:7c:8f:7b:7f:8f:d8:fb:db:
54:df:70:b2:22:fd:b3:41:1f:ea:0d:54:9c:04:95:c6:d9:2f:
ea:53:98:32:48:43:77:eb:0a:d3:62:47:db:66:1e:be:89:42:
5e:49:ee:23:fc:d8:1d:a5:0e:9c:f0:0a:6e:4f:58:99:12:f5:
73:9d:37:f9:ca:be:d4:60:1d:ea:94:0c:f6:ee:cd:34:a8:14:
37:b3:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:59:01 2025 by rpki-client