Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File: g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier: 34lsn08sOlibvH/K08BhCgBJtS0TgyjvQ8Prmk4vLFE=
Subject key identifier: AC:28:A0:92:22:13:1F:C9:BC:65:30:B9:F6:02:40:8E:60:DF:4A:89
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 01984A0A5FE0D2B4C1ED9E4AFCF61B64F1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 04:00:50 +0000
Manifest this update: Sun 27 Jul 2025 04:00:50 +0000
Manifest next update: Mon 28 Jul 2025 04:00:50 +0000
Files and hashes: 1: fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa (hash: cTH5l3quR1dZhmY8/pVYGOhtfcq0HdpSh+BT0OKf954=)
2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: 3NEDDZRLPB8In6X5pVmYThQdgg+Uk4Oi8C8kdhg3WBU=)
3: owvK-K4xt1xLcc7TBT_SQsn0CJs.roa (hash: i/ROe7RqOf5kAUxhkRxcQuX6NvNJ0cLz8fR53Bhsxmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:5f:e0:d2:b4:c1:ed:9e:4a:fc:f6:1b:64:f1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Jul 27 04:00:50 2025 GMT
Not After : Jul 28 04:00:50 2025 GMT
Subject: CN=ac28a09222131fc9bc6530b9f602408e60df4a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a1:b2:62:af:c4:15:09:08:33:9b:25:7b:b7:
c4:23:c4:17:05:dc:9f:14:94:db:c1:9f:37:1c:64:
a8:04:ee:de:fe:11:b3:e8:a0:1a:33:db:3f:a6:1d:
a7:3e:e4:5a:0f:3c:6a:d7:25:4a:ff:15:8c:46:6f:
b4:e5:ed:51:b3:c5:f4:99:c0:a6:48:fd:aa:0a:bf:
15:37:43:3c:43:33:d8:bf:4d:81:7f:d7:d7:72:e0:
56:88:e5:d3:84:09:59:54:f8:6c:fa:14:17:77:17:
14:30:e2:d4:33:a8:c8:f7:aa:f5:c2:9b:07:d9:aa:
20:4d:69:e7:3d:54:5a:86:a6:ce:9e:65:71:f1:14:
70:03:18:a8:6f:91:0e:a9:3a:c6:2f:51:8a:99:64:
b2:dc:0c:b1:c7:d4:3a:50:ef:04:ca:c7:37:0d:9b:
e8:8a:5d:95:53:72:9b:fd:fc:8a:d0:29:33:71:bc:
7d:8b:7b:82:dd:0b:85:82:1f:aa:6e:86:5f:1a:8a:
ca:ba:3a:f3:d2:a0:34:e8:93:33:60:8e:77:6a:66:
d4:ca:58:e1:7b:58:5b:80:86:dd:99:4e:56:fa:3f:
91:f8:b3:32:0c:00:5b:de:0e:76:08:ae:2f:2f:09:
3c:c8:b7:99:ba:84:6f:bd:ea:1a:4b:99:7c:f9:05:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:28:A0:92:22:13:1F:C9:BC:65:30:B9:F6:02:40:8E:60:DF:4A:89
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ce:67:f9:5a:a9:4e:5e:43:4f:ee:be:b0:33:e1:63:49:9c:
2b:5a:74:33:82:92:42:08:c7:7b:12:e3:40:54:74:de:cf:6c:
42:d7:a5:f0:88:58:f7:db:0b:1b:ee:8e:01:d6:f9:87:e5:68:
b9:23:c9:88:f3:3d:82:9d:9e:36:09:e8:15:8e:e3:f7:a9:a1:
8a:0a:8a:f5:46:ad:99:74:6d:9d:1c:6d:15:c1:f9:e3:48:64:
41:94:4c:5b:b7:f8:a0:60:a4:c4:64:6d:a4:49:19:e5:ce:78:
87:7e:ee:05:69:ca:7b:c4:75:b6:2d:d1:b9:70:09:23:42:bb:
b0:b5:e8:a4:e6:51:98:0a:a6:2b:50:c9:54:55:08:36:86:e8:
1e:91:47:5a:c9:f6:5e:1b:65:61:49:1f:91:7a:d1:1a:57:4b:
ab:0c:d4:98:58:f9:9c:9a:76:d7:46:6f:1e:c2:60:1c:09:4c:
3b:66:b8:6e:2a:72:bf:6d:1f:af:aa:05:c1:4d:06:54:da:4c:
0b:49:a6:73:ea:5b:a7:6d:82:a3:0d:a4:d2:1e:0f:8a:dc:27:
f3:7f:b5:a0:7f:8c:bb:03:1d:2f:16:ee:bd:a2:14:f6:57:1d:
c0:7b:20:a0:db:9f:d5:47:a4:56:1d:a3:fd:aa:34:7e:62:71:
3a:f6:98:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:30 2025 by rpki-client