Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
File: g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft (raw, json)
Hash identifier: IVhnaNugqXuNh6Zj8oLzSEIY++0DsDnBB1duzjkt5WQ=
Subject key identifier: F9:5C:51:C6:EE:B3:F4:FF:C9:9C:13:62:64:6C:4A:75:51:88:66:E3
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial: 01974742EA78DAF32EEC5D75774C69715F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
Manifest number: 08DD
Signing time: Fri 06 Jun 2025 22:00:57 +0000
Manifest this update: Fri 06 Jun 2025 22:00:57 +0000
Manifest next update: Sat 07 Jun 2025 22:00:57 +0000
Files and hashes: 1: Z7h5qadGJoQ6FUOneZqqbZNwHng.roa (hash: l8WEv/DVA3/x8QQSyaVc6ay+0r3lEE5lR9pYa08V1FE=)
2: fninY7dk4NBx5RTL5R_Wezr9T0s.roa (hash: SwOpz8NdRi+4j0eDktQnp/qAQ8UOrHFKwcilSnSB5hM=)
3: g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl (hash: y1Y2kB+TvLBb4tw4rROy8LR9JWRg/xw2iZvrNfH2OPk=)
4: ktAAidM8yuGSNSk_nWhJUqA9KEs.roa (hash: PukwcAGvFtblvafh80ccf3hyXxWAP6VQ8wyQlvDsA6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:ea:78:da:f3:2e:ec:5d:75:77:4c:69:71:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Validity
Not Before: Jun 6 22:00:57 2025 GMT
Not After : Jun 7 22:00:57 2025 GMT
Subject: CN=f95c51c6eeb3f4ffc99c1362646c4a75518866e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:40:a3:ce:dd:d1:aa:87:78:4b:44:e4:63:
ff:b7:04:10:d0:7f:ef:56:21:8b:48:55:50:09:c6:
d8:1c:de:7a:e4:b7:f7:e2:fa:d1:63:f5:63:ef:8d:
09:c4:fa:a7:2a:85:e2:39:3f:cb:bd:fa:f6:4c:80:
02:e7:f2:55:91:a8:c4:c3:29:18:ce:7d:f9:60:8a:
4b:0f:2e:93:56:08:1a:a7:be:e5:73:4e:52:14:e8:
f0:f6:24:66:93:a8:05:c4:cc:8b:ef:64:2f:6a:09:
ca:a3:13:1b:e1:68:c3:1d:e7:f1:a4:0d:05:84:66:
7d:e1:bb:19:38:8e:0d:f2:43:5d:47:6b:50:e0:76:
ba:fa:e0:8c:53:9a:94:f5:6d:9f:87:80:95:3e:18:
84:0e:07:b4:01:17:0d:bc:01:06:0e:a9:a7:e6:d9:
02:6d:00:26:ed:88:3c:91:64:32:7d:1b:68:a3:26:
c9:46:2d:0a:84:21:ba:a8:1e:17:e9:1e:38:a2:0e:
31:c7:73:60:e1:01:a7:4c:7c:ec:eb:ed:6b:28:44:
b5:14:fe:80:d8:66:10:c2:93:d6:0c:b6:d8:f6:69:
73:cd:f1:30:ea:cf:27:59:1b:f3:ae:63:89:52:f7:
3c:19:ce:b4:77:00:f9:52:1c:5e:95:1b:c6:a7:a8:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5C:51:C6:EE:B3:F4:FF:C9:9C:13:62:64:6C:4A:75:51:88:66:E3
X509v3 Authority Key Identifier:
keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:88:e0:6e:2f:07:5d:4b:eb:a8:23:ac:2b:df:92:e6:75:d8:
39:f5:71:f5:80:97:07:a9:1f:e6:b9:45:d5:cf:c3:de:ef:44:
18:8a:f0:f4:7e:1b:f0:99:5e:4e:c6:60:8b:25:c8:b0:b7:fc:
65:18:6d:18:33:94:70:67:ce:85:db:14:4c:2b:62:a8:48:e3:
f6:36:cb:d0:8b:69:22:82:dd:83:27:02:25:a5:73:42:5e:bf:
58:92:ab:97:d8:58:fc:80:d8:88:56:ad:7e:c3:9e:bd:74:1e:
77:11:ce:83:45:14:14:c6:fc:97:3a:df:e4:d7:17:a0:31:f4:
8c:19:85:d5:97:e7:a6:93:49:cb:a9:ff:43:c2:7c:e6:e6:9a:
a6:61:2e:4b:3d:29:6c:5c:f3:e9:d5:59:f0:7c:1d:18:fd:87:
28:bd:77:b0:eb:72:07:13:1b:4e:4d:43:78:92:25:0c:68:90:
e2:fe:6b:6e:c5:0e:e4:91:bf:ec:2d:0a:56:51:fc:1b:05:a5:
c9:b0:a9:a5:c2:4f:68:70:13:c1:b8:08:5a:87:d7:6f:17:29:
f7:91:0d:d0:9b:29:fa:c6:9b:89:bc:cf:5f:72:c4:29:c7:b5:
5d:10:73:ad:20:99:2f:56:61:13:c7:ec:a5:a1:cf:43:30:0c:
49:6e:c3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:57 2025 by rpki-client