Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
File: g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json)
Hash identifier: vxuuxON677qqH4ePtdQFo+GchzQ7rURaxmQp+2Im04I=
Subject key identifier: B6:1E:51:C1:FC:A9:73:20:5B:03:C8:77:03:42:37:C4:63:F4:95:DD
Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Certificate serial: 019922FA8C3FAE308885ED363FBD68B1B6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
Manifest number: 0682
Signing time: Sun 07 Sep 2025 07:01:09 +0000
Manifest this update: Sun 07 Sep 2025 07:01:09 +0000
Manifest next update: Mon 08 Sep 2025 07:01:09 +0000
Files and hashes: 1: c8jr9RK1jYIIU9J_37XkvdpDKPQ.roa (hash: FypzDCTYnJOnd+60Jv/bTV7/TP6pt9nWegIKGFpscqo=)
2: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: 9qwt3xaF5aqxmfrkIlFJFACiqDOwFJ/JaFcLkqryPVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:8c:3f:ae:30:88:85:ed:36:3f:bd:68:b1:b6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Validity
Not Before: Sep 7 07:01:09 2025 GMT
Not After : Sep 8 07:01:09 2025 GMT
Subject: CN=b61e51c1fca973205b03c877034237c463f495dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:48:6b:34:8b:03:f0:08:c7:64:1b:11:8a:
01:ef:84:f8:18:bb:96:e3:90:d0:de:93:cf:8c:74:
f2:1f:fa:3c:3b:4a:68:71:26:f2:75:c9:c7:f1:75:
eb:72:85:03:17:d0:8a:fb:b1:80:a2:c0:02:29:c3:
16:88:76:3b:70:6c:2a:b4:a6:6a:17:43:64:f5:1d:
8b:49:01:d4:d1:df:ad:07:b3:4d:dd:fd:c9:1f:ef:
33:6e:59:c7:76:7c:65:4d:74:94:9b:d0:1a:fc:c8:
98:8c:5f:f2:f3:93:67:c3:fa:a3:18:f8:7a:4f:fe:
7b:b5:7b:ab:3a:71:93:c8:5b:b1:4c:3d:e9:3e:26:
e0:0a:d3:f3:32:d3:b1:ea:b1:67:1c:d0:8b:9f:de:
3d:af:7b:72:fe:24:c8:3e:72:84:8a:fa:f3:aa:fd:
97:9b:2a:fc:88:7c:53:86:22:96:dc:3b:b5:96:03:
61:ac:78:3c:9f:fb:35:69:dc:96:ef:a0:f4:27:62:
89:3b:86:8c:53:31:1b:cd:78:11:68:98:cf:ec:01:
09:5f:52:82:3e:35:5c:65:58:80:ff:d6:4b:4a:18:
5f:e4:7b:d4:f5:e1:d3:d6:b8:b1:63:45:9f:3d:05:
56:65:1d:d5:df:b9:5b:9c:5e:cb:d7:4f:f7:68:ff:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1E:51:C1:FC:A9:73:20:5B:03:C8:77:03:42:37:C4:63:F4:95:DD
X509v3 Authority Key Identifier:
keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:91:e5:76:2e:9c:da:d9:5e:f1:c6:7f:c3:3f:61:37:f8:fa:
35:51:49:d0:dc:10:db:03:84:31:e4:4f:88:5b:65:8d:b6:67:
8d:fa:3a:48:bf:4a:4a:bf:6e:f9:87:88:5d:45:1e:23:49:05:
7d:ae:9b:16:54:8e:03:57:84:2c:4a:80:37:91:d9:54:6c:ad:
1c:bc:ee:17:0f:49:ca:0c:48:63:c4:e2:e4:2c:83:00:ad:e2:
65:86:8a:15:b2:a8:40:30:94:3d:27:86:0a:86:85:67:30:d8:
18:ca:9f:7d:cf:17:87:1a:76:75:f7:47:6e:64:6f:d2:7e:cc:
11:b8:4c:4e:40:b6:f7:55:7d:85:59:06:6d:e5:f2:fb:d7:9c:
c3:fb:44:f5:54:85:aa:2f:b3:05:f0:df:c8:2e:d5:c2:a4:9e:
c9:d3:db:9a:fe:ac:14:05:4b:d9:38:f1:76:2c:bf:c0:57:2c:
b4:ba:b7:1f:50:d7:3f:1a:45:cd:e7:4a:45:6e:a0:ef:1d:e2:
bf:d6:00:a2:c4:98:cf:35:03:8b:39:7e:bb:e4:5f:80:c9:02:
63:5c:69:88:90:8f:88:9e:58:b9:d6:28:a4:9e:5a:1b:ee:23:
c9:58:f4:b4:cd:0a:c3:a0:54:11:9d:89:e2:f6:7e:7f:44:58:
32:66:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:10 2025 by rpki-client