Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: Y9+Qi1ijrljTdZuJ80IVSVwRY82ZY+Xl2KGZytoGKiw=
Subject key identifier: 82:19:11:6E:90:18:CE:E4:34:3B:0D:98:2E:00:97:49:E7:63:42:D0
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 019749312D35E31E0F0E3113D49D9D7CCD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0AA0
Signing time: Sat 07 Jun 2025 07:00:48 +0000
Manifest this update: Sat 07 Jun 2025 07:00:48 +0000
Manifest next update: Sun 08 Jun 2025 07:00:48 +0000
Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: AdbtyBDBJB/hIf4+JHsgbhK8HrLYOkeQz2Ih7D9RxqY=)
3: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:2d:35:e3:1e:0f:0e:31:13:d4:9d:9d:7c:cd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Jun 7 07:00:48 2025 GMT
Not After : Jun 8 07:00:48 2025 GMT
Subject: CN=8219116e9018cee4343b0d982e009749e76342d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:6d:61:b3:fc:b7:61:eb:00:93:26:c9:40:
a3:53:b2:6b:85:c7:8c:f2:25:e5:54:39:a1:06:57:
84:bc:78:98:90:31:92:24:ca:64:7a:2f:b7:9e:2f:
ac:cd:d9:97:ca:1d:c0:fb:26:67:f7:a5:9b:1b:d0:
2c:5f:4f:a0:9f:44:ba:63:d2:1c:c6:09:e5:30:c0:
1b:9b:8b:36:a9:b7:4f:c3:1f:f1:f2:49:57:04:b8:
d7:65:5e:64:67:a5:a8:bb:f5:6c:76:47:61:6a:71:
b5:af:42:39:b1:f2:57:35:72:f5:f2:ca:29:1d:5d:
ee:79:0e:82:b7:3b:96:d5:c1:82:64:70:56:e4:d0:
3b:9e:f0:ba:c7:3e:a0:72:aa:2a:97:f7:c4:c7:44:
bb:08:2b:d0:86:c6:00:12:af:bc:2d:dc:ea:66:4c:
1b:80:6e:0f:bd:7d:fb:ac:61:7f:61:9c:35:26:fb:
b0:96:28:e8:39:bc:0b:4b:24:58:20:fe:2b:7e:6a:
fb:57:09:b3:0c:92:4f:67:36:fd:14:7e:44:e6:aa:
0c:ad:9e:7c:e6:d3:75:5d:90:c5:b8:1e:47:ad:d9:
c7:3f:6a:d9:3e:ef:44:42:ef:06:c8:5a:d9:bd:21:
cc:2a:dc:42:14:63:9a:ac:4f:a8:98:c1:22:9c:06:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:11:6E:90:18:CE:E4:34:3B:0D:98:2E:00:97:49:E7:63:42:D0
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5a:04:c6:36:b9:e1:5d:3d:ac:a5:f8:88:a9:a7:b8:6d:85:
f5:3f:a7:97:af:2b:41:9f:83:fc:c9:89:91:f2:a1:aa:36:08:
82:7f:bb:5d:7a:b6:23:ff:00:b3:aa:55:23:b7:f9:2c:88:a2:
77:d1:72:8d:ed:1f:e4:23:4e:64:ad:12:cd:20:ba:af:3e:8c:
71:73:af:44:13:61:02:cf:ea:56:5a:e8:0e:cc:aa:d3:35:96:
2b:63:be:b1:7b:1b:7c:87:c9:ab:11:33:2b:bc:01:68:8e:d7:
a8:29:3f:55:73:f5:de:c2:51:f3:ad:a1:1b:01:7d:0c:df:78:
b4:49:d4:7a:97:0b:6e:67:c6:69:66:34:87:e9:92:00:8f:91:
b6:97:62:0c:01:34:60:85:14:2a:55:42:15:96:19:47:e6:a9:
ac:60:29:f9:de:4d:49:d9:39:4a:31:de:b8:82:95:88:d4:1f:
91:ec:5f:6f:39:54:30:d6:3b:7a:58:6d:8c:10:38:80:f2:83:
79:76:b1:d3:c0:6f:a9:43:05:41:70:4d:85:e7:8b:c8:64:0a:
32:2e:b7:9e:22:49:75:25:49:dd:c0:7f:4b:65:ae:88:4e:38:
86:47:45:8c:60:9e:02:94:e2:67:05:3c:51:f5:e7:09:60:ff:
7b:84:b3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:27 2025 by rpki-client