
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier: cuDPpiub/mFw6wdFtgKddu7hW9UvMJ1CE+qm7rwZ6to=
Subject key identifier: 2C:E3:AF:40:51:C2:BB:61:54:35:A3:81:1D:2D:1C:A2:2C:F4:76:82
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 0197673B5BFC7A0F17E3E0A03EF2FA398DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number: 0A86
Signing time: Fri 13 Jun 2025 03:00:32 +0000
Manifest this update: Fri 13 Jun 2025 03:00:32 +0000
Manifest next update: Sat 14 Jun 2025 03:00:32 +0000
Files and hashes: 1: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (hash: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=)
2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: rjuOioThU7CPQlGLsbQM6oaycM+vtmHcvWlwk8sVwgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:3b:5b:fc:7a:0f:17:e3:e0:a0:3e:f2:fa:39:8d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Jun 13 03:00:32 2025 GMT
Not After : Jun 14 03:00:32 2025 GMT
Subject: CN=2ce3af4051c2bb615435a3811d2d1ca22cf47682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:70:8d:64:c5:ec:1d:b8:4b:5c:0c:4e:b9:
f0:97:f7:c6:8d:c7:cc:18:d9:e7:ce:f4:ab:0e:aa:
99:f5:0a:3a:87:9b:e7:b3:2a:bb:60:85:be:f9:e7:
fc:ae:e9:8d:72:ff:96:2e:f6:34:d1:d0:c8:7d:3f:
b9:36:01:f6:8f:f3:79:f3:33:a3:1f:73:26:57:57:
a8:d2:0a:14:76:73:e5:a5:b8:9c:eb:d4:d8:b0:4e:
11:75:d8:61:ef:cb:78:95:d9:20:9f:2e:4a:4d:95:
3a:8d:8d:15:47:51:f8:78:de:4e:4d:68:36:8b:16:
cd:f6:f7:a4:a5:01:11:19:28:61:b6:64:a1:1c:49:
b7:8c:e3:2f:34:2f:fb:16:73:8f:68:52:fd:c4:da:
15:34:50:1c:e5:45:da:62:70:42:23:dc:fb:60:10:
f0:ca:bc:26:ce:d4:6d:fe:09:8f:ee:4a:e7:bb:51:
da:d0:f0:b7:6c:52:2e:53:67:c0:c5:d7:ce:83:54:
09:d3:3b:26:11:ff:76:5e:53:6a:53:2d:f5:cc:ac:
6c:a7:34:de:fb:8d:1a:6e:1f:f0:5f:9c:8c:ed:d3:
55:a6:1a:0f:c0:b5:b8:45:96:76:b6:45:78:cf:83:
e1:48:57:08:8e:c3:b7:1b:4d:85:a1:05:26:9c:d4:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E3:AF:40:51:C2:BB:61:54:35:A3:81:1D:2D:1C:A2:2C:F4:76:82
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fe:22:7d:b9:82:32:82:29:27:5d:97:20:2d:a3:ae:c5:6c:
e3:c6:5c:33:cf:24:3c:92:14:bd:d8:0b:28:4b:75:ae:eb:66:
8b:e6:3e:dc:df:38:76:f9:c7:8b:cf:26:d2:ce:fe:17:67:ff:
01:f1:6b:ab:d8:30:d8:d6:d9:b3:b2:85:88:27:86:41:a7:87:
35:de:3d:0a:9f:6b:f3:de:cb:1f:0d:40:61:61:e8:2b:10:7f:
f8:6b:79:fe:40:65:66:a2:15:15:68:fa:84:6e:fb:d1:fc:6b:
71:be:84:75:91:66:0d:ad:07:8b:fb:d5:b5:ab:c3:df:6e:89:
ec:d8:31:97:2f:cf:d1:5a:e5:62:80:c6:86:e1:2e:59:49:b5:
d3:02:ed:42:91:87:50:b0:da:cb:9c:88:83:b2:79:47:26:61:
66:95:3b:ee:42:c4:66:cf:bd:37:42:61:fb:77:85:87:97:e8:
4f:d8:0a:a9:b9:43:a6:4a:d6:99:be:78:04:ce:23:e9:b7:dd:
6d:85:40:e8:63:bc:eb:21:4c:56:25:3d:c7:56:ba:0a:76:66:
b3:97:46:42:3c:e3:75:cf:3f:2b:0f:8f:f3:55:8c:9d:fc:de:
92:7a:b6:43:7b:49:15:03:8d:a5:80:e4:d7:1b:2a:03:d6:c6:
02:25:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 10:56:41 2025 by rpki-client