Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier: v8GwoQAemaNkC+sJlj8pI5WHLs32eE/WTdb8eFD5m/I=
Subject key identifier: 9B:EF:41:44:CE:88:A5:77:C9:A3:AB:79:4D:8B:DE:F9:D5:66:21:0D
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 0197635EFA1F81CDA526202AD8A3ACD64DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number: 0A84
Signing time: Thu 12 Jun 2025 09:00:57 +0000
Manifest this update: Thu 12 Jun 2025 09:00:57 +0000
Manifest next update: Fri 13 Jun 2025 09:00:57 +0000
Files and hashes: 1: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (hash: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=)
2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: YVfzdhm7PoyX+NMSMIYhUuY49wch9JkiRJ/nc/5BQyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5e:fa:1f:81:cd:a5:26:20:2a:d8:a3:ac:d6:4d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Jun 12 09:00:57 2025 GMT
Not After : Jun 13 09:00:57 2025 GMT
Subject: CN=9bef4144ce88a577c9a3ab794d8bdef9d566210d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:f6:08:12:e3:ad:71:ea:ac:c5:88:b2:43:
73:aa:1e:02:1b:4d:42:88:be:53:d4:9f:90:f2:d1:
5b:4a:90:80:18:7c:ee:db:32:a4:14:e3:e9:cf:bd:
44:1e:5f:8e:d9:2c:ae:fc:24:ba:b9:18:3a:b6:d3:
13:48:f5:c7:8a:8b:8e:10:6a:dc:1e:c3:a0:b2:1f:
0c:e0:5e:ec:8d:55:e1:22:a3:c9:a9:0f:18:5b:ca:
91:e0:84:6d:94:67:02:c7:4a:2f:be:b4:2e:b2:62:
0c:01:20:ad:0c:1a:7c:cb:a8:14:5c:24:f7:1a:40:
df:82:22:e9:2c:9b:86:ae:30:5f:db:e4:a2:80:d9:
05:1c:8f:cf:cf:c3:20:57:ff:64:77:dd:a3:81:32:
00:6d:54:27:c9:df:f0:92:da:32:55:5c:f5:66:1f:
9b:e3:ea:6a:e2:91:9b:87:a9:76:f8:b7:26:83:85:
21:6d:48:5f:4b:c3:00:06:03:fc:03:5c:ba:d9:09:
3b:3a:08:ca:20:4d:cd:02:1b:47:f3:db:fd:56:fb:
04:ca:51:fe:c6:a8:74:4f:7c:87:8e:60:fa:41:15:
60:80:22:88:43:24:89:90:3e:37:09:f5:34:e0:e5:
d2:9a:0b:27:b2:c6:e2:3c:d7:ac:ed:6d:e3:58:b8:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EF:41:44:CE:88:A5:77:C9:A3:AB:79:4D:8B:DE:F9:D5:66:21:0D
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:41:84:6d:a4:52:5c:14:1e:b7:68:ad:66:34:3e:ca:27:88:
11:de:75:c8:6c:c2:db:31:25:ff:ce:dd:b1:0b:4c:57:94:6a:
93:2c:51:df:83:b1:17:de:06:cf:03:97:dc:54:e9:7c:a5:cb:
ea:18:bd:e9:da:aa:e6:33:31:b0:ab:46:4f:65:14:6d:47:79:
e5:db:97:58:92:66:d1:c0:67:11:0a:63:2f:79:05:be:70:8f:
99:db:6f:d2:12:11:bc:80:90:85:7a:9b:f8:4f:39:98:0f:e6:
8a:78:75:bb:a9:fa:57:9d:50:66:7d:d2:93:51:0f:91:f9:f3:
de:96:b9:0c:37:74:4d:bc:2f:4b:b6:31:16:8b:9c:86:ab:1b:
36:16:8f:76:4c:7c:9f:39:41:eb:84:b1:53:5c:1c:b8:7e:55:
3a:f2:93:55:7a:97:8f:46:0d:ca:24:56:3b:00:ce:39:3d:62:
66:99:65:60:eb:4c:40:0d:3b:47:79:86:de:35:68:47:8f:7b:
9e:97:e8:63:4b:28:5c:72:a6:d5:94:83:c9:fc:c3:d7:5c:f1:
25:8c:a1:bb:34:b1:19:fd:0d:83:1f:e6:4d:2f:ea:ba:25:1d:
d9:c2:be:82:7f:e0:68:83:80:46:fc:08:14:72:8d:ca:a1:18:
f8:fa:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:55:14 2025 by rpki-client