Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
File: g2gKwOhPwS_HIje4rtjl7YX43r0.mft (raw, json)
Hash identifier: 2lPnvyU8p5EEUwmLYZOSrAw/aascX9EALIw3K6VgoNo=
Subject key identifier: 83:7D:25:8B:02:A3:32:76:06:11:D7:2E:64:16:16:02:1E:A4:17:2A
Authority key identifier: 83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
Certificate issuer: /CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Certificate serial: 01974A43D7242F572EA6D1A3AEC1C1D959F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
Manifest number: 150E
Signing time: Sat 07 Jun 2025 12:00:49 +0000
Manifest this update: Sat 07 Jun 2025 12:00:49 +0000
Manifest next update: Sun 08 Jun 2025 12:00:49 +0000
Files and hashes: 1: 8FMLT1AmbwVl9zcvS32Q9od9DEQ.roa (hash: yisuPZkgdD2MViPM9oU55ZAf5YPozXvdCbB7qiW4Gcw=)
2: g2gKwOhPwS_HIje4rtjl7YX43r0.crl (hash: zM3IVLPfRFtrmnmUUMXHg9g8pb9b5eHNdv4NyG6bfeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d7:24:2f:57:2e:a6:d1:a3:ae:c1:c1:d9:59:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Validity
Not Before: Jun 7 12:00:49 2025 GMT
Not After : Jun 8 12:00:49 2025 GMT
Subject: CN=837d258b02a332760611d72e641616021ea4172a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:80:8e:d9:bb:7d:ae:be:0f:27:3b:86:1d:
08:4e:71:88:42:7e:aa:f1:c8:78:04:74:d5:3f:e5:
3f:10:7e:6b:da:33:7d:54:fc:86:ed:71:cb:3f:04:
90:16:f8:5f:6c:c2:d4:74:ab:c7:ce:a8:77:8e:02:
40:2f:3f:4e:b8:f9:d8:5e:8e:08:ce:ec:e4:3b:14:
5b:44:c0:26:4a:31:2e:45:43:1e:c7:86:e2:e9:67:
0e:8a:48:08:f9:7a:d6:7f:b5:41:15:ca:09:19:56:
ad:27:0f:dd:70:c8:f4:87:32:04:26:30:41:cd:4b:
09:54:af:9c:72:43:c5:90:2f:3a:7a:5d:f5:ad:f6:
28:cf:bd:d7:3b:52:a2:18:c4:fd:d2:a1:30:65:95:
44:66:b3:c6:d2:16:46:80:50:f4:25:c1:31:20:0e:
4a:7b:97:04:36:da:1f:a1:0c:f4:a1:fa:0b:25:30:
26:68:8c:8f:32:b3:56:c1:58:65:70:42:4b:92:36:
0e:b6:7b:01:7d:10:9a:46:3f:f4:1f:d7:66:c9:10:
a2:9e:fc:e8:61:58:61:c7:d4:80:04:35:c4:c3:54:
9d:a8:05:ed:f3:5c:aa:5a:86:01:df:06:c7:0d:f9:
db:82:72:84:78:fe:0a:68:ca:f8:2e:a1:29:1d:40:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7D:25:8B:02:A3:32:76:06:11:D7:2E:64:16:16:02:1E:A4:17:2A
X509v3 Authority Key Identifier:
keyid:83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:43:c1:88:c6:f0:e4:47:f1:06:21:03:71:c3:33:f9:55:52:
1f:06:e2:18:1f:81:67:fe:14:48:33:f2:94:0b:bf:4c:ca:b7:
e5:a3:ab:75:40:b8:8f:79:00:e7:4e:66:b8:ae:c3:08:3d:fe:
ca:72:68:a3:73:93:53:ec:23:c9:64:d9:fa:c6:63:77:1f:d4:
c9:48:88:b4:08:46:ef:b4:60:f7:9b:43:2e:16:a0:6e:cd:51:
61:42:57:9e:33:85:bd:82:68:c2:47:5c:49:fb:f0:30:83:e0:
92:fd:2b:cb:d4:a1:b4:ce:be:c1:21:98:be:a0:7a:53:a4:04:
a3:bf:c2:4d:21:f7:c4:4a:66:b7:46:c5:d4:d5:a3:b8:05:d1:
be:e0:1f:14:5c:09:6e:6c:95:9f:20:d6:61:ca:3d:0f:89:d6:
c3:12:3c:08:78:e7:ed:e5:90:fc:8b:fa:d0:63:33:ee:ef:8a:
5e:a9:79:1f:f0:24:5e:7f:e9:e4:6e:07:bc:dd:a3:c7:a9:1b:
4b:66:eb:03:a4:25:f9:cc:7b:65:2e:54:61:1b:e9:5b:fc:2f:
ca:d1:b9:66:fa:1f:25:22:de:4d:d2:b7:c3:25:9c:73:b9:e4:
67:be:bc:6a:0d:98:b6:d9:e2:53:70:71:43:50:8d:11:c4:64:
58:2b:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:49:49 2025 by rpki-client