Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier: +s5o6eKBmceEMlBJ109eMrHS0zrNsfjJ56Eq2c8k3JU=
Subject key identifier: EE:D3:3E:1E:7C:76:58:0B:9C:98:AF:C7:F7:4B:69:3B:6E:9F:11:74
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 01983871945F8240F4D5F5BE02E51307A7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number: 15FA
Signing time: Wed 23 Jul 2025 18:00:24 +0000
Manifest this update: Wed 23 Jul 2025 18:00:24 +0000
Manifest next update: Thu 24 Jul 2025 18:00:24 +0000
Files and hashes: 1: fYK373nYUB0XvmUvg-oovkxaiNE.roa (hash: xzFxyXs3TjE095d1PcNasH+Goh3HeA3NihMPCGecT0o=)
2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: y9dRyvqjWkT1DueVgrnixP479SoEv3b/yKL2whQK8Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:71:94:5f:82:40:f4:d5:f5:be:02:e5:13:07:a7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Jul 23 18:00:24 2025 GMT
Not After : Jul 24 18:00:24 2025 GMT
Subject: CN=eed33e1e7c76580b9c98afc7f74b693b6e9f1174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:5f:6a:67:f8:f7:e3:83:0d:c0:80:a8:12:
8c:d7:00:64:38:90:f2:f1:c3:a4:da:12:3d:68:6e:
4c:f0:37:36:f2:fa:93:2a:eb:f2:44:1d:0b:80:4d:
e4:f5:f3:d2:f6:2f:65:52:32:08:da:0c:1c:09:55:
79:bb:0b:49:d2:df:08:4c:6e:aa:99:6d:f2:e6:b9:
78:ef:36:d0:9d:e6:24:71:a0:92:7c:cd:8c:1f:54:
1c:29:05:4a:5c:5d:5a:63:ea:de:4a:35:38:23:77:
6d:82:d1:6a:69:d9:b6:1e:cf:42:1e:7d:71:bf:ac:
0d:59:8f:15:d3:5f:22:2f:5c:ea:fd:9b:6d:fc:0c:
f9:14:57:e6:dd:4c:48:58:a7:96:3f:ba:07:c4:f7:
36:3d:28:e5:05:e8:0e:29:91:e4:01:74:f0:29:43:
11:27:5c:03:62:de:95:74:c1:86:59:21:c3:b5:04:
ef:ea:88:9a:e9:26:0a:aa:02:37:bf:bb:c9:d0:2e:
e0:2b:35:9d:28:85:5e:72:fa:1e:84:15:fe:17:2f:
42:fd:38:73:c2:a2:38:0f:e1:88:66:02:7f:87:bd:
f0:97:bf:35:9c:08:d4:84:7e:e4:14:0c:43:1a:dd:
09:a1:26:e2:70:58:c7:ff:da:fc:db:dc:ca:a9:b9:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:3E:1E:7C:76:58:0B:9C:98:AF:C7:F7:4B:69:3B:6E:9F:11:74
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fc:5a:62:54:70:34:17:f5:9f:1c:7a:d8:29:7e:e7:4b:24:
bc:f6:fb:bf:af:05:66:f2:0b:93:f8:ae:81:86:34:00:23:e3:
75:c1:02:15:67:0e:75:5e:e1:88:93:f6:98:0d:a6:1b:bc:d3:
e9:87:04:d6:4c:6c:f5:c2:24:e3:35:bf:d2:5d:3a:df:a3:4e:
45:f3:6a:d0:3e:82:a8:8b:11:38:1f:e1:05:ff:b2:9e:82:aa:
c9:f0:66:01:83:d3:17:47:d5:e3:e0:95:0c:ca:4a:57:61:49:
9b:5f:0f:8f:d7:a6:0a:0d:4d:dc:e0:c4:8f:c0:a9:81:17:d3:
ab:87:29:56:8d:9f:ee:c4:02:32:dc:7b:74:c3:d0:e4:43:fb:
5d:c1:4d:e3:0e:00:0f:24:62:92:54:b1:35:cb:b3:1d:9d:a0:
0e:ef:f2:2e:3a:78:85:ab:bf:43:85:02:91:49:54:86:77:68:
74:1e:fd:98:d3:af:dd:d3:ef:00:d4:54:4b:29:69:c2:07:51:
c6:88:57:bb:75:3b:c2:03:fd:60:43:e4:0a:4d:97:11:74:7a:
f1:4e:c5:12:10:87:ca:88:00:f9:3a:e3:7c:b3:5b:54:a5:4f:
b7:5a:14:38:db:ff:0b:72:62:f9:c9:34:02:b0:61:32:52:3a:
8d:81:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 22:54:01 2025 by rpki-client