Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
File: g9zjc8GLlAqXg5CycnACebMv7jo.mft (raw, json)
Hash identifier: O9phHxXbOkr08txl5I9LzrXNw8B2BZT3unBJdqDzJ1U=
Subject key identifier: 4C:8A:33:56:8D:B3:6C:1C:11:F0:9B:77:12:DE:00:F1:F2:66:2E:06
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Certificate issuer: /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial: 0199361303B0693A7C92E7EB5FCD5496735E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 00:00:39 +0000
Manifest this update: Thu 11 Sep 2025 00:00:39 +0000
Manifest next update: Fri 12 Sep 2025 00:00:39 +0000
Files and hashes: 1: Guy7Gbz5rPMc4iFSpd_8frqdYqs.roa (hash: atB7rNB4GngxSgp2zRWRq0GhS+DcIAMSX9Cb0N8BlB8=)
2: g9zjc8GLlAqXg5CycnACebMv7jo.crl (hash: OpeWcG6nvHnwCyueKZEf7OAz0Cc7r2boQy2/P2/cntg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:03:b0:69:3a:7c:92:e7:eb:5f:cd:54:96:73:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
Validity
Not Before: Sep 11 00:00:39 2025 GMT
Not After : Sep 12 00:00:39 2025 GMT
Subject: CN=4c8a33568db36c1c11f09b7712de00f1f2662e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cd:d2:8b:41:1e:c6:a0:e5:47:cb:5b:30:9a:
da:25:f9:dc:8f:82:ef:e6:db:47:40:d2:20:69:da:
38:dc:bd:38:f4:25:3d:42:03:10:9e:09:50:fb:d0:
36:a9:91:13:8e:5c:7a:6b:e4:10:99:b1:93:4a:04:
69:06:1a:c1:0e:fb:85:d8:ee:2c:1c:17:ac:68:33:
67:1d:79:12:d3:b2:d0:19:c0:af:c1:83:84:61:14:
54:04:16:40:9a:5e:ae:aa:b0:96:8d:5b:09:63:67:
8b:cf:2a:dd:cb:24:40:a5:64:04:92:f1:59:96:4b:
89:27:b0:7f:41:e6:47:91:41:cd:27:3d:60:74:dc:
c0:7d:b5:1f:c1:af:85:ca:2d:39:ca:de:de:5f:fc:
93:bf:c9:21:39:e5:a3:ea:47:9d:2d:b3:9b:25:8d:
42:99:63:43:c2:99:96:f6:03:5b:b1:22:ee:0c:f4:
31:34:b8:2a:a3:51:f4:b8:1a:9b:b0:c5:e7:62:5a:
06:34:55:6e:7d:30:1c:f6:6f:db:f7:62:80:e5:da:
a9:82:21:cb:1e:f8:e9:cd:9a:1d:6e:cd:aa:93:c9:
3b:8c:f4:d9:37:09:d1:d6:54:97:6d:76:d6:3e:b3:
a2:62:c1:98:aa:a3:9c:0c:3f:60:78:0d:ed:bd:50:
a9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8A:33:56:8D:B3:6C:1C:11:F0:9B:77:12:DE:00:F1:F2:66:2E:06
X509v3 Authority Key Identifier:
keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6f:c2:95:6b:0d:b4:de:1c:24:5a:c3:34:b4:a3:48:82:75:
fd:03:18:96:1f:ee:09:ff:4c:ff:ba:ed:d8:36:82:fb:52:1a:
74:b0:9a:2e:b5:ba:6d:0d:4e:b8:27:97:8c:2c:49:d8:c0:25:
77:34:da:12:ca:20:40:9a:bf:22:90:b9:fc:5b:2a:41:52:16:
a8:da:99:9e:48:f4:92:1a:39:6d:ec:61:8c:69:32:55:27:17:
93:a6:7d:0f:01:bd:78:e7:29:5a:01:69:2d:19:ca:a3:12:34:
0b:55:16:5f:61:1d:6c:9d:9a:ab:b4:54:87:c8:a2:60:f0:ad:
8d:95:03:f8:64:d0:c2:15:54:ec:59:3c:63:2a:a6:90:31:07:
82:ed:e8:2b:f3:a8:00:53:f7:03:6b:19:75:ad:76:7c:6a:37:
fc:6e:df:b4:50:c2:8e:87:fa:17:16:a0:5f:a6:55:de:fc:bc:
d9:d4:7b:50:24:c1:99:ac:13:27:46:30:3d:28:e4:d2:3f:7b:
38:35:d9:76:e6:80:6e:b4:de:35:c2:a1:d8:31:cb:6e:eb:a7:
67:ae:14:5c:0c:09:76:bc:b4:7a:c6:1d:25:78:3c:09:cc:aa:
eb:3f:f0:d2:92:b3:1a:6e:c3:c8:75:3d:c1:8f:e9:a0:cd:02:
02:9f:f9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:35:45 2025 by rpki-client