Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
File: g37WYCvCfxlqSe5LMGoPpt7p0p0.mft (raw, json)
Hash identifier: oj5zoacTLMG3tiNIMT738oyBjmOy4ubkOa8QMKNpTmo=
Subject key identifier: DB:14:6B:F4:CE:63:62:C9:AB:41:96:31:57:D3:4B:B2:86:33:6C:10
Authority key identifier: 83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
Certificate issuer: /CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Certificate serial: 0198530E11F4A33FDFBBDB43D2F9241EDA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
Manifest number: 0778
Signing time: Mon 28 Jul 2025 22:01:27 +0000
Manifest this update: Mon 28 Jul 2025 22:01:27 +0000
Manifest next update: Tue 29 Jul 2025 22:01:27 +0000
Files and hashes: 1: En8-GoJ8b8wzWMOZSSvYdOC_d0Q.roa (hash: PL43OakReMXHfp4mMkhTD4X7qZfQiScwqWGHnEOSCsQ=)
2: g37WYCvCfxlqSe5LMGoPpt7p0p0.crl (hash: RrIzB3bLRSvnMu9mYORVQ+7nVmOeMN6iimRy5VgR/Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:11:f4:a3:3f:df:bb:db:43:d2:f9:24:1e:da:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Validity
Not Before: Jul 28 22:01:27 2025 GMT
Not After : Jul 29 22:01:27 2025 GMT
Subject: CN=db146bf4ce6362c9ab41963157d34bb286336c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:e9:9e:c8:4f:a3:e4:f4:51:24:1c:d7:64:
5a:7c:b1:bc:5a:a7:0a:89:1e:c7:3c:3b:69:7b:18:
c1:bc:40:dc:3e:30:25:3c:bf:73:46:82:ea:4a:61:
a1:02:cb:2b:07:0b:fa:3a:1f:4d:13:d0:de:6f:b1:
f3:0c:6c:8e:b2:74:1e:a8:c8:96:a4:ab:cb:f9:12:
7d:1c:78:51:ac:83:ea:e0:41:44:45:d6:92:fa:7c:
ae:65:37:2e:b6:bc:10:6b:32:ae:2a:fb:d3:d5:28:
85:98:b3:70:eb:7f:e7:d9:7b:ec:de:e3:c5:f1:d4:
61:7e:25:f5:f4:70:a5:d4:9b:e9:c1:41:03:a5:58:
2d:64:3c:4a:24:aa:ca:6d:d0:f7:27:13:a7:d6:69:
dd:b9:da:c8:ce:2a:46:c8:f7:7d:4b:09:51:9f:f4:
c0:ab:b4:32:93:6b:7e:78:19:a3:35:da:5a:36:95:
78:50:0b:79:27:db:21:a3:58:8e:77:8a:69:f0:b9:
cd:0f:92:73:31:40:92:21:20:ab:07:23:5a:6a:a1:
86:bb:8c:55:be:f3:cf:c8:e1:3f:44:11:f7:01:61:
18:67:e9:0c:e1:66:d9:31:9e:96:1a:d1:92:6f:a9:
f7:4a:07:dc:aa:46:e2:ce:1e:d5:9d:61:0a:f3:31:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:6B:F4:CE:63:62:C9:AB:41:96:31:57:D3:4B:B2:86:33:6C:10
X509v3 Authority Key Identifier:
keyid:83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c5:11:47:71:83:a9:fa:49:8a:c1:6f:59:6e:61:18:6e:26:
fe:66:75:37:58:aa:b5:0c:4b:9c:e5:ef:9e:62:a0:2f:69:cb:
ef:e2:a6:ed:23:e3:62:16:2e:58:20:f0:7c:72:6b:ea:e0:9e:
41:0a:84:3d:f3:24:61:c4:66:5f:6b:54:8b:00:dd:e6:44:a4:
88:de:16:c7:43:ee:df:3a:67:82:01:02:8d:f2:7e:f0:e4:e7:
8c:22:9f:53:a1:1c:3d:d1:d4:86:2c:d0:ee:d9:fc:11:5e:1e:
ee:18:ef:42:29:1c:60:5e:4b:b6:fc:d5:19:d4:19:54:d7:e9:
64:4c:f3:4c:42:72:60:f7:d6:c1:ca:d0:cc:58:10:e7:ab:c1:
03:3b:47:b1:5c:41:a1:95:35:4d:31:06:1a:4d:b5:87:24:80:
b9:c4:28:18:56:33:3d:96:5b:13:aa:cb:7c:cd:45:a5:78:e7:
41:e1:38:10:60:91:34:73:a1:89:3f:35:43:b2:ce:18:f4:75:
3c:fc:2e:d5:22:e1:f8:00:53:76:db:73:58:b9:e7:3c:9b:84:
ef:35:66:66:5f:5e:e2:bc:f7:90:3a:ed:64:c6:ad:11:32:4f:
f5:93:79:67:de:b6:7a:1f:dd:79:df:48:60:c2:ae:d0:26:32:
8a:10:f0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:57:11 2025 by rpki-client