Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
File: g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft (raw, json)
Hash identifier: fK0qhgERDQbfKZsmvvHSZfABjpG5Ygx5Wny/UNSLRIA=
Subject key identifier: 26:C8:42:52:28:EC:8B:CE:6B:82:75:A5:0A:6A:5E:24:28:72:A9:72
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Certificate issuer: /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial: 019865EF56EE2FB5BB1B2F400BF34F7EEF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
Manifest number: 0BDB
Signing time: Fri 01 Aug 2025 14:00:40 +0000
Manifest this update: Fri 01 Aug 2025 14:00:40 +0000
Manifest next update: Sat 02 Aug 2025 14:00:40 +0000
Files and hashes: 1: EvTzLNAJ6H7qRnNSh82gSKiMMgg.roa (hash: qhUzbtll1fZR91tCmRG4V9VmK3ep2kPWk4uvDeplZCU=)
2: g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl (hash: EsS9w0nbrZnwNOtrR0CNExxBJsFkqsp+WOD8FnU0+uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:ef:56:ee:2f:b5:bb:1b:2f:40:0b:f3:4f:7e:ef:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
Validity
Not Before: Aug 1 14:00:40 2025 GMT
Not After : Aug 2 14:00:40 2025 GMT
Subject: CN=26c8425228ec8bce6b8275a50a6a5e242872a972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:07:34:66:9f:6f:e1:ee:8d:02:9f:8a:c4:
e5:ed:33:6f:5b:e1:cb:3c:87:28:4c:e3:f1:18:55:
f2:f5:9b:7b:0d:4c:99:c2:f2:e9:37:53:4b:d5:a2:
70:6d:94:51:4c:45:cd:3f:67:f6:3c:3f:d2:ab:55:
f6:a8:b9:cb:89:33:40:10:3c:b4:78:ec:27:61:9b:
a6:e9:63:ac:8e:c6:88:fc:b4:b6:84:88:b5:67:77:
3a:15:bf:e8:35:8c:98:8a:88:24:9d:4f:78:91:ca:
b3:3a:62:52:6b:02:f5:b7:03:83:6d:99:7c:cf:f0:
bc:06:73:e9:d9:63:26:6e:df:fd:8e:44:2a:91:32:
0f:be:87:32:4a:4f:a1:a0:9f:91:00:42:53:c3:14:
60:8a:40:47:ed:61:04:84:5d:fc:e2:b1:e4:20:71:
ac:98:d2:75:21:76:ab:bd:ee:90:0a:40:c3:1f:5b:
70:a1:7f:a3:fa:e6:9d:ea:da:dd:6c:f2:00:c6:01:
4f:8d:88:fd:bc:0c:b5:a0:96:ca:0e:fe:a4:5e:e3:
5e:4c:9b:40:ba:5f:bb:9e:9b:3f:68:6e:5a:7b:5c:
6c:b3:1b:92:2f:e4:d2:68:c0:90:44:b6:0c:65:bb:
c7:f5:f5:80:ca:75:25:04:29:6d:1b:14:50:df:7d:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C8:42:52:28:EC:8B:CE:6B:82:75:A5:0A:6A:5E:24:28:72:A9:72
X509v3 Authority Key Identifier:
keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cb:79:92:08:02:01:61:c6:b6:5e:c8:9d:70:fe:5e:51:98:
d5:1c:92:93:0e:3f:f7:9e:d8:d8:2e:56:5a:97:61:a5:d3:82:
42:82:dd:13:17:f1:ef:94:02:7b:00:ab:7d:c6:2d:33:08:ae:
59:3e:f8:30:fe:8f:12:9d:7e:de:79:6e:09:c5:15:f8:fb:73:
86:0d:b0:45:50:77:28:ad:57:20:dc:1f:d8:94:22:ec:f4:a7:
88:21:41:96:d2:1a:57:d3:82:81:ed:8a:a0:ef:a5:40:03:78:
a3:e8:ac:64:c2:21:b0:29:da:35:ad:27:e7:78:63:e0:8d:47:
6f:ac:96:1a:83:a1:f9:a5:fb:22:1f:2c:13:8e:d2:05:6f:ac:
18:c7:98:b8:c6:82:86:fa:5d:00:54:0e:04:17:a0:19:52:0b:
ae:56:85:17:aa:ec:8c:fc:56:65:cc:a7:ec:33:c8:c7:b3:7e:
8d:f3:ce:8b:de:6d:93:17:d2:a0:c6:d0:4e:a2:b1:41:48:b3:
d3:d2:b1:3e:0a:07:15:ab:6c:16:cc:e9:a4:94:71:16:3f:37:
28:7d:85:e1:9b:db:41:0e:b0:c3:c2:6a:de:03:ac:8f:ef:f7:
53:7e:19:1d:ff:6d:af:2f:3d:be:27:ff:02:21:02:44:c8:9e:
88:50:38:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 23:32:38 2025 by rpki-client