Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json)
Hash identifier: KSh+hIILqcm7S3GTKQYR2HPkn+up27kpZh2GZ7R2THE=
Subject key identifier: 56:5D:F1:16:5C:C6:CB:43:D6:78:D9:89:14:3A:BE:06:F5:94:FF:49
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial: 0198477696971DCE801F9DF00A1EA8108DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
Manifest number: 117B
Signing time: Sat 26 Jul 2025 16:00:10 +0000
Manifest this update: Sat 26 Jul 2025 16:00:10 +0000
Manifest next update: Sun 27 Jul 2025 16:00:10 +0000
Files and hashes: 1: UGrR__PyRipPzdjGAZBG7BppT8M.roa (hash: iYevY5/kIjNolOqwa16r2Chgd87dJ+qeTiEz7+9fEjM=)
2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: q7gwa04w/0u6Jbflw+iIRifsa4qn3JeLPuOejZ+GV8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:96:97:1d:ce:80:1f:9d:f0:0a:1e:a8:10:8d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Validity
Not Before: Jul 26 16:00:10 2025 GMT
Not After : Jul 27 16:00:10 2025 GMT
Subject: CN=565df1165cc6cb43d678d989143abe06f594ff49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:04:0d:e2:11:a2:e6:f5:38:0e:51:57:9c:
95:25:a5:ad:fa:ca:6e:75:49:06:ea:80:4a:22:db:
0a:ba:98:e5:84:65:73:3f:e3:71:0f:fa:25:58:0e:
fc:b1:d6:89:e2:40:b1:8f:97:65:aa:97:3f:8e:8f:
87:cf:58:84:30:43:9c:24:e5:13:5b:3f:06:9b:11:
da:16:4c:84:7a:a5:8e:60:b7:88:cb:11:58:90:63:
3a:46:09:58:35:d4:c2:5b:f4:30:c7:32:34:3c:02:
ce:29:f6:5e:50:7a:d8:a1:97:f7:ac:5c:f3:2e:f1:
68:ef:f2:a5:b3:1c:97:38:f0:8f:1e:af:45:c7:de:
73:9d:ed:ad:ab:07:e8:b2:9e:88:ec:71:0f:cb:b6:
81:cc:b2:d4:c8:f3:39:7b:a5:e9:fa:20:e9:86:83:
32:ed:a0:17:32:17:e1:63:75:e7:06:42:84:1b:ab:
d7:7a:e7:01:20:c9:5a:6a:1f:b0:2e:99:e9:3b:e2:
32:ba:10:37:59:af:a9:8e:d3:84:df:41:1b:86:3e:
c2:03:b9:4b:3a:d1:c0:ca:cd:55:f4:3a:bd:f2:ce:
df:48:25:45:49:70:01:a1:81:2c:09:31:be:02:2b:
ac:bb:d6:d8:f9:7d:c2:f7:1d:2c:ec:be:2a:99:bf:
cc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5D:F1:16:5C:C6:CB:43:D6:78:D9:89:14:3A:BE:06:F5:94:FF:49
X509v3 Authority Key Identifier:
keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8c:7d:6d:46:e0:8e:9e:64:04:0d:14:9c:1d:7a:96:ab:e5:
22:ed:28:2c:dd:2c:8d:db:f3:ce:59:df:27:5c:de:c0:3b:6f:
33:cb:08:ac:b4:29:bf:a8:cc:65:6a:02:ea:17:ae:9f:58:2b:
51:0d:e0:b2:81:95:3f:01:0b:ec:c9:92:6c:94:6a:e1:fe:34:
9d:96:24:37:06:4a:c9:45:dd:8b:89:9d:9a:2a:51:e3:c2:9b:
50:a0:b4:6c:71:bf:8f:33:ee:79:d3:f2:18:a6:a8:31:29:29:
72:a8:fc:1a:31:83:fd:bf:66:fd:78:c9:72:27:62:b1:89:66:
f2:ef:8a:69:da:74:30:92:ce:8f:d5:cb:09:54:40:c3:1e:ed:
97:4f:77:5b:c4:96:a2:04:a7:06:6e:4c:5f:6a:9c:32:47:e6:
45:68:8e:2c:db:39:7e:e2:a6:e1:23:dc:22:c3:32:26:03:d1:
d7:b4:46:e6:6f:12:6e:e6:98:6c:42:cc:b0:a6:dc:ce:5a:69:
33:85:10:9e:48:6b:b9:5b:90:ca:24:9e:35:d1:77:11:79:12:
45:c8:1a:4b:b1:a8:07:7c:fd:56:40:fd:0b:2d:8c:74:61:6d:
83:1b:18:7c:8a:93:88:0f:65:09:52:9c:7a:b1:8c:e7:8b:21:
7d:0b:c4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:44:07 2025 by rpki-client