Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: ZACrow4Ie5h9cYEBsQQ75RjBBgxxfbVCBVtrTagYAUg=
Subject key identifier: 8B:EE:65:0D:11:E5:A2:29:A2:FD:2D:2E:8F:4F:AC:78:23:7C:35:E7
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019922FA7AFD7BAC7F89BD6A5114F4B45A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 100C
Signing time: Sun 07 Sep 2025 07:01:04 +0000
Manifest this update: Sun 07 Sep 2025 07:01:04 +0000
Manifest next update: Mon 08 Sep 2025 07:01:04 +0000
Files and hashes: 1: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (hash: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=)
2: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (hash: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: yozZUgdaqGn3bnZ99j2BGSpRysFcBX1cAVy818i9lqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:7a:fd:7b:ac:7f:89:bd:6a:51:14:f4:b4:5a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Sep 7 07:01:04 2025 GMT
Not After : Sep 8 07:01:04 2025 GMT
Subject: CN=8bee650d11e5a229a2fd2d2e8f4fac78237c35e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:f5:2a:34:5d:34:0a:29:7a:0b:ae:82:bd:
3c:f8:71:8b:9b:ee:51:44:90:71:c1:fa:a1:4d:8d:
82:1c:f1:b4:d0:cb:c1:ee:e6:a0:44:bc:61:e9:f0:
4d:e4:91:b8:52:00:40:f8:74:c5:9b:7a:8b:50:76:
9b:bb:be:73:f1:2e:46:f3:d9:bc:48:d4:1e:e3:f0:
56:39:f8:ed:eb:1a:5f:20:6d:15:6a:99:dd:e8:87:
79:42:29:c3:d5:83:15:f8:dd:8d:8c:c9:7a:83:e2:
96:8e:2c:f4:cb:54:54:86:59:eb:55:18:98:2a:fa:
5c:ff:7b:23:c7:fc:c0:41:fc:72:e6:94:25:28:d6:
26:28:c6:06:d5:fa:3c:a0:71:1b:9f:c6:fe:46:a9:
74:a7:93:3e:92:3b:01:a1:3c:59:04:5a:25:4f:65:
f0:05:fb:50:4d:96:a3:a3:30:02:4e:1d:21:55:65:
1a:0f:1a:bc:a4:fb:9a:04:cd:56:1e:66:60:15:43:
8c:38:4e:3b:91:32:83:6a:b0:e6:5e:14:54:d3:eb:
a2:41:6c:ad:10:23:8a:50:57:d5:d6:97:62:2b:67:
3b:5a:ee:31:85:64:4d:fb:a7:8c:19:95:89:51:e8:
55:ff:db:47:4b:96:12:10:ff:dd:75:af:59:21:ed:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EE:65:0D:11:E5:A2:29:A2:FD:2D:2E:8F:4F:AC:78:23:7C:35:E7
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f5:12:ae:b8:bb:bd:63:0d:fc:7e:76:13:52:bc:fe:e7:2b:
c0:41:a2:99:00:22:92:f6:86:98:41:56:dc:01:86:3f:ea:bd:
61:11:d7:c3:3c:0c:05:a6:7d:e3:ae:64:9c:24:39:57:15:d4:
25:34:9e:d1:47:61:d4:0d:6c:4e:69:f8:7f:cf:9b:d1:fc:14:
c4:cc:df:7a:a0:ed:6b:ca:3e:50:a5:03:84:8d:77:9c:9b:5c:
42:97:59:13:2d:86:6b:3d:92:a6:3a:24:70:36:05:e4:bf:95:
f7:1d:67:62:72:bb:92:4c:2f:f4:ff:ce:d8:2b:b7:8d:24:0a:
de:87:6d:f5:40:3b:f3:3f:2e:07:1d:50:8b:69:30:aa:4c:28:
68:32:6e:c6:cb:8f:a2:5f:f2:33:80:b6:95:c5:68:ee:dc:57:
bf:21:d9:2e:78:69:7f:42:5a:82:e6:24:cb:fc:90:6e:b7:3b:
7c:77:d8:c2:1d:c0:98:71:57:af:86:86:4d:18:59:7e:23:36:
59:37:a4:78:68:a9:b5:a0:cf:f4:85:5d:1b:5d:a5:1e:37:5c:
d1:14:6e:a7:42:ae:36:df:87:29:4e:94:35:25:37:21:39:39:
d9:8f:45:5c:aa:0c:0a:4a:45:17:f0:f9:e5:af:a5:0c:fe:c2:
f5:76:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:16 2025 by rpki-client