Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: 1V7nx1mlcqGBzzVj9koVPhNUP2a1bqV8O+dkMCUopF8=
Subject key identifier: 26:2E:7A:60:68:19:89:16:BE:6C:1F:49:A7:75:99:0A:7A:F7:BF:92
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 0197493134C9692CEEC526D474C8F43D11FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 1214
Signing time: Sat 07 Jun 2025 07:00:50 +0000
Manifest this update: Sat 07 Jun 2025 07:00:50 +0000
Manifest next update: Sun 08 Jun 2025 07:00:50 +0000
Files and hashes: 1: 15Cc0rkgOAAGUx8rhsWE0wocji4.roa (hash: w5RcK6dKOaSgSCjKMtRrWFYt+lmDT9Fb/OPGmzxAWAs=)
2: SJFANTgwe4hEyH_EtKYCt-bwKco.roa (hash: ldpxNw0POIEDob8qbk6GclOigoPKG+NNUzLcGWGZ1io=)
3: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: ojE1KB18b4T49XlSmkdq7zJ8WNT9JcQoZOaZ6Adz9JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:34:c9:69:2c:ee:c5:26:d4:74:c8:f4:3d:11:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Jun 7 07:00:50 2025 GMT
Not After : Jun 8 07:00:50 2025 GMT
Subject: CN=262e7a6068198916be6c1f49a775990a7af7bf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:73:d2:df:29:7d:ce:bf:da:1e:20:81:56:
cc:ac:38:5e:bc:f4:00:61:88:74:45:09:7a:e3:de:
58:28:16:48:18:79:6a:f9:83:22:c2:15:37:41:ba:
29:eb:02:7c:0a:d8:cd:d3:94:1a:c4:1c:6c:ec:81:
c1:2a:37:50:a2:2f:d4:ae:88:c2:48:73:37:fa:f1:
a0:6c:78:af:8c:4a:c8:dd:c3:3a:30:ef:61:29:91:
b6:56:17:fe:d6:7e:33:28:1e:a2:59:df:34:bc:e0:
04:8f:94:ff:38:61:5c:e6:0d:0d:04:fe:d0:fc:57:
1e:eb:3c:8a:fe:94:ad:48:ab:5d:ce:f7:01:7b:a0:
17:ce:12:ee:4b:50:03:ed:f3:15:48:d1:96:09:45:
eb:c9:15:1b:d1:6c:78:d7:d7:8c:21:f2:fe:5b:d9:
98:da:6e:35:7e:82:ce:cf:c2:4a:19:b7:93:61:01:
bb:1f:33:17:b5:62:ec:54:51:01:6c:a0:15:3c:08:
d7:af:fa:de:1a:9d:9c:d7:45:ce:02:50:11:02:c7:
67:5c:d6:3c:b9:9a:03:9a:ff:51:f5:50:9e:39:2b:
27:91:12:94:c8:6c:f5:d9:f6:a0:df:9c:5a:d8:c7:
ef:95:a6:b4:7f:50:8c:33:d4:75:92:87:29:5c:4b:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2E:7A:60:68:19:89:16:BE:6C:1F:49:A7:75:99:0A:7A:F7:BF:92
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:33:08:ef:88:99:ef:a9:7a:eb:bd:1f:49:b4:8c:19:c2:f2:
ab:7c:b0:f0:0d:42:28:36:86:ea:5b:f0:31:89:d8:ac:43:fd:
9c:e4:38:4b:09:7a:ee:1b:d8:83:11:34:cb:8e:eb:17:6f:05:
42:ec:7c:cd:10:c3:70:7e:b7:86:2d:6d:42:20:a3:3d:5a:e8:
aa:51:4c:4a:3b:5a:51:82:5d:75:a7:a2:87:b1:9f:8d:5d:0c:
ee:b1:39:93:bb:cb:e8:95:e3:e8:1f:f9:cb:d7:95:6a:ec:0c:
33:37:9c:02:f2:c8:f5:f3:7a:a2:af:1c:ff:69:fe:d8:10:eb:
e5:69:16:7b:75:64:37:9f:ef:06:3b:9a:11:9b:b2:69:4d:8d:
89:ba:88:01:bf:2d:40:1e:02:01:14:14:78:70:69:25:d5:cc:
01:b6:22:58:dc:7c:44:18:2b:c9:45:59:a1:a2:e7:e2:2a:d3:
f1:53:d4:40:dc:27:55:ed:25:53:aa:a0:0c:0c:41:a6:6e:20:
24:fa:a3:10:00:da:7a:c3:9b:71:23:5c:4f:ba:18:5b:2e:92:
4f:b6:6e:b7:94:44:26:cd:8c:e4:ed:ef:aa:bf:f1:b8:23:a9:
9d:22:10:b2:1f:e2:6b:b7:0d:a0:c7:cf:d5:11:09:f6:e3:04:
16:16:c7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:56 2025 by rpki-client