Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
File: g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json)
Hash identifier: l79dvyI9LwVgbPERByqboPF60oUn9koGMZQlDJjcghI=
Subject key identifier: BA:EA:AF:79:FA:73:0E:73:D0:22:80:26:23:BB:F4:30:62:74:4D:6F
Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Certificate serial: 0198394D28029666D650F5A4CC29307348A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
Manifest number: 0609
Signing time: Wed 23 Jul 2025 22:00:14 +0000
Manifest this update: Wed 23 Jul 2025 22:00:14 +0000
Manifest next update: Thu 24 Jul 2025 22:00:14 +0000
Files and hashes: 1: c8jr9RK1jYIIU9J_37XkvdpDKPQ.roa (hash: FypzDCTYnJOnd+60Jv/bTV7/TP6pt9nWegIKGFpscqo=)
2: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: FTgZ59qiZUqEtFK4iC5M7SF/WEgINRhXCTrspGuN6HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:4d:28:02:96:66:d6:50:f5:a4:cc:29:30:73:48:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Validity
Not Before: Jul 23 22:00:14 2025 GMT
Not After : Jul 24 22:00:14 2025 GMT
Subject: CN=baeaaf79fa730e73d022802623bbf43062744d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:37:42:88:b3:20:24:28:f6:76:2f:5e:25:
52:3a:77:03:6f:ae:f5:fc:c6:c0:04:56:8e:12:aa:
95:30:b2:7b:d6:06:44:89:df:01:b1:3f:0f:a0:41:
15:fe:50:ce:ce:a0:be:22:64:a5:1b:ac:ad:88:07:
b5:73:10:9e:a8:d3:d3:4b:93:d1:0e:77:6b:e2:d8:
21:21:14:6e:82:a3:ed:13:a4:94:e9:99:f1:a0:dd:
43:3e:41:90:43:ef:6f:e5:6a:27:08:be:9b:8f:91:
6f:86:3a:66:a1:52:84:01:08:fb:8c:9e:8f:4e:2a:
46:b5:09:2e:dd:b4:82:40:e9:11:a1:0f:ff:23:33:
92:90:73:f8:c6:51:ae:5f:5d:71:d9:77:7e:15:a7:
48:4d:80:ff:16:d9:4e:49:a9:ca:6d:10:43:52:49:
92:36:05:9b:58:56:9e:80:52:0b:a2:c2:16:b9:e2:
79:7a:72:89:62:82:b4:c1:f6:58:b3:e8:03:a0:51:
cb:9b:15:56:1e:54:63:c0:54:75:be:08:05:2b:5f:
79:55:39:e3:a2:e8:e8:57:e8:4b:f8:f3:47:6f:a4:
17:51:1a:c4:00:7d:1e:6c:38:23:19:e6:36:8e:83:
96:2d:ae:8d:dd:48:37:d1:3d:01:d9:fa:97:97:74:
8c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EA:AF:79:FA:73:0E:73:D0:22:80:26:23:BB:F4:30:62:74:4D:6F
X509v3 Authority Key Identifier:
keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2b:0e:9c:6b:32:c1:89:39:71:f1:d7:23:76:5a:56:c8:71:
14:a4:eb:58:f3:49:48:88:87:55:33:fe:4c:80:c8:c2:28:b0:
99:16:1e:20:0e:53:42:e4:d7:70:2e:fb:e0:ed:4e:cd:4b:8d:
6a:e3:95:4c:64:42:e7:55:f3:86:c2:48:3a:d4:b4:30:f4:d3:
3f:60:3a:2a:1e:93:d4:b1:70:0c:90:d0:93:d6:b0:bf:c9:64:
e7:70:8b:43:6b:8e:ac:fc:e0:d1:90:7c:bd:58:9a:3b:a8:81:
12:60:40:82:29:0e:45:b4:34:b0:3b:81:31:bf:24:1d:14:64:
a0:ab:33:cd:3d:44:f5:57:3f:ca:8a:4d:a4:13:32:af:69:e1:
b4:a5:a1:94:9c:c8:ef:d2:43:b2:0b:87:dd:22:79:91:fe:f9:
f3:84:47:53:f3:40:a8:d0:5b:50:74:5a:56:d8:c6:e4:a0:27:
92:0f:35:04:47:9c:31:78:e8:f3:10:6e:3a:9f:5a:5f:e4:75:
fb:22:fd:7e:1e:07:52:87:e1:43:aa:be:1f:c7:bb:96:eb:2c:
34:5b:5f:0c:11:6a:c3:b1:c3:72:50:b0:bf:26:6a:c2:ba:6c:
9c:1b:d1:11:0f:33:9d:fd:8d:9d:ca:ee:66:fa:ba:54:2e:2e:
e9:f7:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:42 2025 by rpki-client