Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json)
Hash identifier: sw38nEIgb4eKGpZ+fmNIB4tBzLmQAXVmk8BJkv2dBVw=
Subject key identifier: 0D:DD:74:45:5D:BC:7B:41:8E:21:62:40:F7:2B:BA:82:00:C1:B6:56
Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Certificate serial: 019921B1BC94871AB797B2B2FA6C71365B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
Manifest number: 1189
Signing time: Sun 07 Sep 2025 01:02:00 +0000
Manifest this update: Sun 07 Sep 2025 01:02:00 +0000
Manifest next update: Mon 08 Sep 2025 01:02:00 +0000
Files and hashes: 1: W3rPvUkflCFuxF0ug4dEXW6S2Kc.roa (hash: 3G2s7uZotQeaUTGQLu0pJAmRVfSsV9ARqhmMaAPkMDY=)
2: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: 2zM4ZVT/CjZ4rwFxiixA4H0XZWO7H8M7Z++f4WPaFu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:bc:94:87:1a:b7:97:b2:b2:fa:6c:71:36:5b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Validity
Not Before: Sep 7 01:02:00 2025 GMT
Not After : Sep 8 01:02:00 2025 GMT
Subject: CN=0ddd74455dbc7b418e216240f72bba8200c1b656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:2f:88:53:86:ac:67:87:6b:1f:8d:e6:f5:
78:be:f7:f2:98:14:eb:c6:bc:2b:3a:1b:69:64:da:
10:e4:61:11:9d:ad:83:d4:b9:ae:c5:85:08:db:36:
d8:77:14:02:1c:f4:1a:f2:5e:b3:65:a0:0b:cd:85:
c9:df:50:07:ad:f4:bc:e7:89:9d:1b:b5:46:6e:aa:
7b:d0:dd:70:2e:10:f6:b0:1d:3d:5e:64:7b:f7:18:
62:7b:b2:c3:f8:92:f5:25:4f:8a:ec:fe:3b:32:ee:
e7:a9:2a:44:cb:76:75:f5:b5:41:fa:51:9d:72:3f:
b7:c7:72:ca:75:e2:f0:f8:f2:3d:ab:b7:57:cf:96:
49:3e:fe:de:e8:3c:3b:18:d7:69:f0:7c:a5:19:44:
dc:32:3d:47:46:56:6a:71:cd:96:16:77:b3:5f:e2:
30:ee:a8:fc:9b:c4:f9:f3:52:23:4e:3b:da:cc:55:
0a:4a:bf:48:8e:11:a5:7f:b6:6e:fa:45:8a:7e:af:
8a:1d:04:dc:32:90:56:37:73:64:60:da:51:5c:58:
74:c5:dc:23:8f:fb:74:44:e8:62:cf:e8:8e:29:05:
32:76:c7:ca:a4:24:ba:7b:d5:c4:b1:9b:aa:a6:35:
98:da:04:11:6e:84:44:ce:8b:7e:ac:7e:16:5c:c4:
b6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DD:74:45:5D:BC:7B:41:8E:21:62:40:F7:2B:BA:82:00:C1:B6:56
X509v3 Authority Key Identifier:
keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ba:2e:39:75:18:39:c4:ed:87:55:bb:df:9f:15:d8:99:56:
73:79:cc:ff:9c:ca:fc:fd:59:e6:25:9e:04:9b:ae:5d:1c:a8:
3f:97:77:32:9b:f5:f5:03:dc:ab:18:fd:66:da:31:bf:27:fc:
c8:af:0b:e8:ab:c3:df:8e:4a:dc:8f:62:bc:7e:67:97:ff:b5:
0e:c9:e3:a1:f7:04:7d:66:d3:61:c0:48:1a:87:a2:d8:49:ab:
0c:b5:67:79:64:a8:9d:90:7d:e0:9a:95:b8:1a:e4:8d:c8:a0:
4a:d8:63:79:59:3f:5c:96:b1:a4:a6:b4:fc:bd:1b:28:6e:ef:
9f:bf:7b:96:3f:e3:bd:a1:bb:1b:03:14:05:12:33:a7:68:cc:
04:e1:dc:12:2a:fe:77:ef:a6:8a:9c:8a:9c:9e:12:ed:8e:95:
2e:a7:0c:3d:60:67:e2:3e:e8:24:68:27:0e:28:cf:b8:a1:e9:
07:e6:b0:58:37:9b:90:e1:b7:a4:10:d0:67:c0:9b:8f:5a:d4:
23:eb:e2:0a:ca:84:fb:79:68:59:1c:8e:ff:bd:93:21:c7:55:
8d:15:e2:23:cb:01:99:fc:a3:54:ec:60:0d:75:7d:43:56:69:
83:ee:0d:c4:55:29:4a:45:6e:d9:a1:5c:9e:6a:b8:17:6a:6c:
ca:05:dc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:57 2025 by rpki-client