Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
File: g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft (raw, json)
Hash identifier: nwgVFDXzpVJm3CKv1fVY53mPnkimI0Kwzjp/xT9K9O0=
Subject key identifier: 07:07:90:B4:ED:67:86:F3:82:67:57:54:F3:A9:D6:06:9F:D9:B0:B2
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Certificate issuer: /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial: 0197481E9004F3FF6C66729B1C6CC17A89DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
Manifest number: 0B47
Signing time: Sat 07 Jun 2025 02:00:51 +0000
Manifest this update: Sat 07 Jun 2025 02:00:51 +0000
Manifest next update: Sun 08 Jun 2025 02:00:51 +0000
Files and hashes: 1: EvTzLNAJ6H7qRnNSh82gSKiMMgg.roa (hash: qhUzbtll1fZR91tCmRG4V9VmK3ep2kPWk4uvDeplZCU=)
2: g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl (hash: Qy3nR3tWxiZy9rVIZFJgFo9drG7AG59/UJ+OuO8f86k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:90:04:f3:ff:6c:66:72:9b:1c:6c:c1:7a:89:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
Validity
Not Before: Jun 7 02:00:51 2025 GMT
Not After : Jun 8 02:00:51 2025 GMT
Subject: CN=070790b4ed6786f382675754f3a9d6069fd9b0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e4:b4:1a:b5:0b:47:c4:34:83:76:01:38:86:
7f:0c:bb:5c:a7:16:d9:6e:4b:a3:b8:d3:96:40:e0:
60:ef:b0:4b:72:8c:af:ea:ec:e8:83:6b:2e:54:44:
95:2c:40:6c:e4:10:27:37:7c:4c:24:fa:78:ce:85:
ca:4a:e3:9e:a5:10:6a:65:92:a9:82:ec:d6:f2:48:
fb:ce:6a:64:ad:e1:20:38:07:b5:a5:24:bd:3c:41:
8b:7c:ed:0d:f3:80:ff:0f:34:c8:44:94:8d:ad:66:
2c:3e:82:f7:10:d5:a6:46:c5:a6:27:11:fa:1e:4c:
0a:76:b7:4b:0a:66:96:3b:47:28:3f:64:ae:6d:8f:
00:da:72:5d:dd:3a:a1:3d:e7:76:44:b0:4e:8c:c2:
01:1c:7f:0a:9a:ec:49:cc:c3:55:74:b0:71:90:52:
b8:64:81:db:56:b5:ca:39:41:41:be:49:09:30:e8:
d5:8f:a3:4f:2b:53:9a:23:dd:9d:dd:fb:79:bb:5c:
4c:6c:ac:94:84:b7:08:68:44:e3:cf:7b:2b:62:4c:
fe:76:07:d7:ec:b8:35:90:1a:af:e2:60:e0:5e:b9:
be:82:2b:80:b3:12:d2:0f:df:4c:84:f8:52:b8:f4:
38:d3:2a:c4:81:97:72:c4:6e:50:e5:bc:88:a5:e6:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:07:90:B4:ED:67:86:F3:82:67:57:54:F3:A9:D6:06:9F:D9:B0:B2
X509v3 Authority Key Identifier:
keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ae:44:2f:5b:2e:a4:9d:ea:e6:fb:1c:8e:11:6a:33:12:6c:
9d:03:a6:e2:ae:0d:66:9f:00:b5:bc:ae:cc:f6:6b:7e:f5:53:
43:39:30:2c:d1:1a:87:19:39:32:f5:b9:69:1d:8e:61:48:8f:
ed:ee:c7:fd:27:68:78:48:5f:31:67:fb:42:cf:7c:d7:55:15:
c5:1b:48:ac:a7:e9:b2:88:e1:fd:e8:b6:75:2d:a2:97:cd:2f:
e2:fd:0c:59:65:1f:c6:6b:4a:96:98:12:5e:69:52:b2:e7:5b:
85:52:15:9f:96:1d:54:65:b2:a3:d0:49:b5:ae:f2:c6:40:fe:
27:e3:11:60:5e:dd:a1:3e:b1:51:26:11:16:1e:cb:41:68:28:
b7:7d:33:f9:6d:2d:57:6b:75:13:01:24:b5:d1:ac:88:2e:2e:
71:b0:a6:26:cf:32:a7:02:b0:61:30:9b:e6:2f:dd:a1:6f:42:
29:12:5b:76:24:1a:3a:8b:61:0f:93:f3:9c:d6:69:75:65:d1:
f2:90:08:75:15:dc:3b:6b:be:c8:75:93:77:df:9b:51:3e:a4:
05:09:ee:b5:ca:44:ef:a4:71:6a:b0:52:fd:a0:4e:81:3f:02:
94:23:da:04:0c:30:99:a8:34:61:56:c9:8d:95:42:55:ae:67:
58:29:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:52 2025 by rpki-client