Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json)
Hash identifier: iQkyCwCUYo+tfkfhgC8VTzBXA2e3g4yOpG7+LDZ07iI=
Subject key identifier: 29:8F:2C:BF:B1:DE:1A:A2:94:88:93:9C:2B:A1:38:B8:CF:68:33:5F
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial: 019751FD51ECE4720B2F22D6030B655BE74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
Manifest number: 10FC
Signing time: Mon 09 Jun 2025 00:00:45 +0000
Manifest this update: Mon 09 Jun 2025 00:00:45 +0000
Manifest next update: Tue 10 Jun 2025 00:00:45 +0000
Files and hashes: 1: UGrR__PyRipPzdjGAZBG7BppT8M.roa (hash: iYevY5/kIjNolOqwa16r2Chgd87dJ+qeTiEz7+9fEjM=)
2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: vuelBhrFBOWBzji+Gg+ptyLVLMdJyDFnJc9YZapFS5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:51:ec:e4:72:0b:2f:22:d6:03:0b:65:5b:e7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Validity
Not Before: Jun 9 00:00:45 2025 GMT
Not After : Jun 10 00:00:45 2025 GMT
Subject: CN=298f2cbfb1de1aa29488939c2ba138b8cf68335f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:68:c7:8c:cb:cf:7d:ca:5f:8c:b6:64:7e:
e5:f1:c8:05:e3:20:1e:60:04:ac:9f:9c:b5:7a:6e:
67:24:f6:08:b1:99:54:8d:51:91:0a:6d:1d:5b:f5:
31:51:29:02:ab:8a:fe:c4:fc:c1:c1:12:d0:04:30:
9f:dc:a4:93:77:fe:69:62:08:50:20:57:f1:a6:4c:
ab:e8:ab:21:2e:f8:3f:fd:e2:b5:11:af:53:0d:3b:
91:f8:6a:a8:22:0a:cd:b8:9e:6a:d1:44:9c:39:8e:
81:f5:89:e8:0a:c1:10:c7:f0:e9:c1:3e:13:34:f8:
5e:e1:00:9d:5c:ae:49:3a:e7:84:b4:c2:5f:23:9b:
63:0c:3f:48:f6:fe:0a:05:7a:73:16:36:ee:a4:6c:
a9:e5:25:ce:e3:c6:ed:ed:92:01:b7:a3:d4:71:59:
41:ad:ae:54:74:ea:60:28:5e:16:a5:31:aa:bc:e8:
51:b1:07:9a:49:36:a9:64:d8:7e:32:57:3d:dd:5a:
70:e1:cf:4e:63:1b:c6:76:7e:05:c2:0e:c4:2a:b9:
7c:3c:13:3f:9f:a4:b1:79:52:65:3d:22:bf:da:09:
51:6a:dc:1f:d3:5f:60:8d:1e:5d:a8:e6:e2:c9:46:
48:78:c1:ba:11:ca:16:d2:36:e3:cd:24:cd:b3:97:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8F:2C:BF:B1:DE:1A:A2:94:88:93:9C:2B:A1:38:B8:CF:68:33:5F
X509v3 Authority Key Identifier:
keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5e:73:69:10:6c:b2:b6:9b:8f:37:40:91:67:6a:de:60:74:
e0:71:5f:64:a9:12:9e:cd:1f:16:4c:e0:51:4e:af:88:43:c4:
fe:0c:23:aa:1f:76:5d:38:bf:0c:e8:50:a6:c4:c4:69:2f:97:
4b:8f:8e:d4:67:3a:0b:22:b1:c8:f7:6e:b8:63:86:86:a7:82:
a4:6f:ad:8d:67:e9:8b:46:86:41:47:6b:a6:33:0b:c7:93:94:
a0:f2:fe:8c:7a:62:7e:d4:c2:b0:90:a5:23:45:e6:fc:20:3a:
87:d0:63:7a:52:1a:52:ba:ef:6b:3b:89:90:1f:c2:a4:ff:b3:
eb:41:a3:07:d9:20:8a:85:96:ac:ab:d4:e9:d8:14:d9:13:ec:
b4:7e:a7:36:f7:d9:1a:75:08:49:5b:93:1e:05:34:b9:3d:1c:
a0:7c:ca:94:7d:ea:62:04:98:d2:d5:be:a1:48:5e:a0:01:e4:
70:1c:e7:3d:c3:15:4c:c9:5a:63:4a:db:c1:9e:4f:03:6a:18:
da:88:7c:b7:fc:df:0a:63:a8:ef:91:f0:85:c3:d0:3d:c9:19:
3d:15:94:19:65:5d:30:e6:79:ff:34:f9:75:b8:62:aa:c4:be:
3e:72:c9:21:49:18:f1:28:b6:5b:18:76:6d:02:40:f4:07:4d:
b2:f6:c9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:21:30 2025 by rpki-client