Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json)
Hash identifier: 0rGuTyp+364eUTIOlAJkW8KqbejCMQtOMtyfAowm9Rs=
Subject key identifier: 1C:91:EF:58:3F:5B:87:F7:44:22:5F:E2:CE:02:22:D9:BF:97:25:48
Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Certificate serial: 0197500EFAF2D93C1D628B82B04F62656B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
Manifest number: 1098
Signing time: Sun 08 Jun 2025 15:00:48 +0000
Manifest this update: Sun 08 Jun 2025 15:00:48 +0000
Manifest next update: Mon 09 Jun 2025 15:00:48 +0000
Files and hashes: 1: W3rPvUkflCFuxF0ug4dEXW6S2Kc.roa (hash: 3G2s7uZotQeaUTGQLu0pJAmRVfSsV9ARqhmMaAPkMDY=)
2: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: P0SfLL+BIAqheqxjq5UkIpepm2LEl0vVG9RtbOJ135s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:fa:f2:d9:3c:1d:62:8b:82:b0:4f:62:65:6b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Validity
Not Before: Jun 8 15:00:48 2025 GMT
Not After : Jun 9 15:00:48 2025 GMT
Subject: CN=1c91ef583f5b87f744225fe2ce0222d9bf972548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:11:dc:ed:34:fa:94:7d:38:4e:f6:c3:5b:
b7:00:83:ca:94:d2:15:b6:f8:8d:33:a2:81:84:b1:
79:7e:1b:51:ad:e5:49:49:d5:00:65:b6:7f:3a:69:
16:4a:84:88:7a:0d:c2:33:ad:64:e5:4f:c9:23:81:
d8:62:f2:3f:27:d9:29:bb:b7:a7:e9:82:6b:33:e8:
ea:c0:ed:b8:2e:a9:fd:2d:93:f9:a8:4e:b1:37:19:
d1:0e:5c:d8:cf:6a:06:5c:4c:75:97:68:fc:2d:d2:
a6:50:63:fd:49:75:0d:54:30:7e:12:cc:51:02:a3:
a9:81:db:fe:b1:96:4c:2d:b1:9b:8a:39:07:1d:7c:
ba:61:88:76:12:b4:69:b6:70:9b:71:75:50:3d:1e:
e1:12:66:a9:80:e6:1b:58:60:8e:27:99:31:92:0e:
00:af:25:f4:b6:61:ca:d2:98:75:4b:4d:48:a1:82:
db:4f:b5:86:6d:80:5a:7e:31:25:72:ac:be:ec:0f:
9d:86:2f:82:29:07:fd:7a:96:1f:85:10:a3:dc:e7:
55:ee:8a:38:c0:76:cb:41:19:7a:0b:22:5b:64:b3:
1b:09:d7:17:2c:ad:d4:50:2c:25:dd:79:6e:d1:47:
de:2a:83:e0:e4:15:9d:38:f9:7a:1b:9e:aa:80:2d:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:EF:58:3F:5B:87:F7:44:22:5F:E2:CE:02:22:D9:BF:97:25:48
X509v3 Authority Key Identifier:
keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3e:cc:aa:c6:77:d1:9e:3a:c3:63:4d:46:b0:53:0a:e6:3a:
08:5f:d6:a8:b9:4c:a4:74:b5:f4:fe:dc:9d:00:e2:bf:86:1a:
a5:4b:99:e2:80:bf:cc:29:e1:47:7f:6e:1b:f6:1a:ce:b9:17:
dc:f3:16:9f:29:f3:0a:5a:f2:4e:3e:63:b7:3a:a8:62:9d:55:
51:e8:17:55:52:f1:a9:3f:f6:d6:b6:9c:1a:be:d1:fd:ab:70:
99:3d:0f:b9:50:6c:78:7f:30:d3:ef:23:da:d4:33:2f:4b:e9:
f1:9a:e0:6b:2a:33:50:91:77:21:c5:81:a7:06:c6:1e:95:27:
6a:07:60:87:79:ba:5b:ec:48:31:06:40:ea:69:42:fc:b8:db:
56:bd:f2:ce:65:b0:56:ad:62:76:97:55:68:cb:dc:c1:9e:a0:
cd:92:6e:c8:0e:b3:fe:21:2f:90:74:57:9c:54:26:70:da:b1:
fe:ed:1a:15:84:2c:ed:78:a8:24:04:80:00:7e:65:50:aa:1c:
a5:d1:31:60:92:59:80:a0:67:55:48:25:b6:31:9c:f7:4c:66:
7e:0b:9a:7f:ab:aa:63:36:de:69:3e:7e:57:57:c5:29:10:3d:
f9:95:0c:da:8a:a6:6c:b7:09:f9:d2:91:54:28:9f:89:f6:c1:
b1:72:fa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:46:25 2025 by rpki-client