Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: pwg/bfnohQMXu1+cj2xVAV5AEXio/AsRSh6OCVqGMsg=
Subject key identifier: F8:B1:D3:94:65:E9:B5:C9:A1:E8:42:CC:5A:18:6B:5A:AE:C0:12:81
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 019923D5C1BA65FF7040D58DBFAD73D1C417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 100B
Signing time: Sun 07 Sep 2025 11:00:35 +0000
Manifest this update: Sun 07 Sep 2025 11:00:35 +0000
Manifest next update: Mon 08 Sep 2025 11:00:35 +0000
Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: 9CnBBlTDI/m6gjEfCPnuQ1IuHczKM9mq49dgfnCqSI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:c1:ba:65:ff:70:40:d5:8d:bf:ad:73:d1:c4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Sep 7 11:00:35 2025 GMT
Not After : Sep 8 11:00:35 2025 GMT
Subject: CN=f8b1d39465e9b5c9a1e842cc5a186b5aaec01281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:8e:d3:56:05:37:94:ce:05:3d:ef:f4:bc:
31:ab:c5:a9:80:18:9a:ac:3a:ec:84:d9:94:71:df:
d1:55:6e:e2:6a:17:cc:8b:4e:c9:7a:b6:06:ab:5a:
39:6a:09:cd:a5:00:63:84:f1:8c:67:d8:af:b6:c4:
ae:64:e9:07:be:7b:db:fa:6e:dd:22:01:72:62:63:
6e:64:82:a8:3d:3c:ea:92:3d:63:b2:3e:38:b7:b1:
bc:7c:38:bf:3d:f8:0b:2e:8c:29:7d:e8:bf:35:61:
00:5b:57:ee:af:7e:a2:d9:c3:b3:01:39:82:71:75:
43:f1:fd:7a:92:54:58:87:ef:27:56:bd:70:ca:69:
86:95:81:aa:29:91:4b:17:d0:80:27:f6:e6:33:f1:
2f:72:d2:85:a8:47:0e:4a:d9:03:90:d5:8d:16:20:
88:a1:f1:d7:c6:5f:69:91:5f:12:f1:2c:1d:4c:5c:
5d:57:23:28:a1:cb:56:fa:6a:51:0e:48:66:59:42:
2e:88:ef:df:1e:a6:02:ad:f2:07:18:5d:ad:1c:e0:
e8:62:94:16:83:7c:e8:7b:0f:a3:ff:5d:5d:f2:55:
a8:a4:38:88:ae:81:d5:fe:e9:8b:02:04:d9:dd:0d:
e6:0b:9f:7f:63:b6:5a:f0:63:00:1b:23:56:3d:58:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:D3:94:65:E9:B5:C9:A1:E8:42:CC:5A:18:6B:5A:AE:C0:12:81
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:17:22:aa:b4:a5:a4:d2:13:02:b9:fe:a0:d7:e0:64:fc:28:
a8:ba:f4:b0:f6:1b:61:7d:73:6b:f3:92:3d:20:23:0e:b0:2f:
80:9e:90:f8:03:65:f5:3e:2f:6a:cb:79:39:d4:92:72:0f:55:
cd:bb:0b:2b:4a:46:aa:33:4a:cd:6a:9b:ae:c3:30:41:5a:e1:
51:b5:b9:6d:f3:c1:be:bf:80:2b:46:73:a2:20:d7:44:72:51:
10:d7:67:61:11:e2:2a:91:3f:7b:eb:77:d7:4d:83:fa:8e:17:
85:3c:c5:cb:4b:75:35:03:94:36:a2:16:6f:ab:62:2e:e4:24:
14:c5:5c:98:14:59:13:49:f1:d0:b3:43:fe:d7:0c:b7:fb:23:
aa:d1:e1:0d:9e:90:b9:e2:b7:35:db:7c:39:5a:45:32:63:e0:
bf:4e:a8:6a:e2:1a:10:88:a8:fa:ea:e1:ef:ba:3d:86:82:18:
86:cb:da:5b:50:0f:fd:98:65:b9:a8:1e:5a:7f:98:74:c6:fa:
fd:f3:4e:ef:93:0a:de:a7:dd:8e:8c:c3:d8:8c:08:17:bc:5f:
84:4e:8a:2b:a4:6f:50:f8:ac:cf:cb:fd:42:84:f4:86:04:c8:
f5:4e:2b:c2:9f:a2:4a:30:a8:40:cf:e8:65:2e:d1:74:23:07:
1b:94:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:15 2025 by rpki-client