Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: pEUTGu2bO8MXRuGmr+4UtE4wHvfTaI/EksovVC2HpUg=
Subject key identifier: E5:41:F7:ED:EF:A6:A5:55:D7:93:9B:4F:F9:3D:20:53:E3:35:46:49
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 0199221F3FF70E72EA390AD5516CCBC9501A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 162A
Signing time: Sun 07 Sep 2025 03:01:37 +0000
Manifest this update: Sun 07 Sep 2025 03:01:37 +0000
Manifest next update: Mon 08 Sep 2025 03:01:37 +0000
Files and hashes: 1: FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa (hash: 8mXMxLhYRdd/VkcpNmHYspbdck1amSr4XmtcJs+HDLA=)
2: QsA63htkLwfYnYHs-Kq4o8mj9CE.roa (hash: rn3uqwJBUFxLOERoWp4bxdCoGJiytcYNcQK3zAQq29M=)
3: WG0ANufF85rxDdd9Qpj3xWNbQEc.roa (hash: Sp37WqNPSToQfWSQsZD+qupyLcdSmiraov2p9HxbLVc=)
4: X5Fww_8KGev_5n5MWd8zbg2gmXc.roa (hash: DIztrJ51Kpwe3HNc07UEuOz1jm3MBQvVt7F7Mikk1H4=)
5: bJSjsJ3BIHwc_xXJ1R0xw1ipkaw.roa (hash: LBopJzLBdYAjF0iPvUvU2j1Vv+Rl7/hkuGtkkvmE9pk=)
6: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: u5zip123N3U/zSHPum/cEyDi9QDOGU9JqZEGSIjUo+Q=)
7: jhr_GFldqDt1qMGamMwZGXuEY9U.roa (hash: 1yDuZhUHai2SzEeMsTrIrMSyGKcGUnmYYO7txoQyhP0=)
8: l-taV26zQ7WeFxi5U2wEDJxQkyQ.roa (hash: 7NgCRlAWBxyzQ19N/UKMAgzRr/Nec4zr9xbSFVxPVyI=)
9: y4FE1rBXMFm62wHyyCqUymbJNYs.roa (hash: MR4VvjpI1G7xCd6u/lSzNw5eAzME4oCWzew3Uw7zWlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:3f:f7:0e:72:ea:39:0a:d5:51:6c:cb:c9:50:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Sep 7 03:01:37 2025 GMT
Not After : Sep 8 03:01:37 2025 GMT
Subject: CN=e541f7edefa6a555d7939b4ff93d2053e3354649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:63:aa:93:f4:0d:3f:ef:97:a8:91:6c:7e:
aa:1f:c0:04:6a:80:8e:81:5a:9d:22:a2:f5:34:df:
ff:f9:e9:d2:59:a6:fa:cd:b2:33:0c:56:a1:1f:eb:
34:85:c5:ce:b4:de:7a:1e:8e:79:23:e9:c0:7b:94:
d3:ba:53:d4:ea:19:be:ae:6c:c9:13:b1:e8:cd:ac:
3b:f7:e4:e7:0c:34:19:7f:0b:6f:42:aa:4f:db:31:
28:7a:9d:da:0b:d8:1b:b3:e6:2d:11:44:e5:fb:70:
24:43:f0:30:a8:ad:d4:26:28:6b:bd:d6:1d:d9:5e:
5a:36:35:e1:d9:a3:34:2e:17:d7:51:8c:94:52:67:
72:e5:d9:7a:1c:d4:d8:13:ff:f7:30:83:4d:43:e7:
65:ab:c2:8c:74:03:76:d2:1f:fb:e5:0d:ee:83:e0:
b7:41:84:de:48:6a:ef:2e:5f:31:ed:a3:a9:66:8d:
46:44:0d:37:ae:3b:54:e8:10:b2:51:89:eb:df:84:
36:c9:4e:1a:29:12:72:5c:a7:fe:13:dd:d7:ce:bc:
0d:91:b2:21:03:2e:4b:44:91:58:09:6b:61:37:01:
e5:4b:a7:1e:66:fd:0a:36:47:83:14:ef:cb:25:cb:
8b:56:1b:df:3d:91:9d:54:f2:e9:7b:5b:73:f2:ad:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:41:F7:ED:EF:A6:A5:55:D7:93:9B:4F:F9:3D:20:53:E3:35:46:49
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c9:85:01:59:58:25:c5:a3:1e:d0:7f:a4:3b:63:82:cb:23:
08:cc:04:86:07:da:2b:9b:6e:b6:ae:a2:76:b6:74:07:2a:9d:
3c:db:0b:7f:9e:fd:b0:1f:be:5f:55:bd:b8:c7:31:b7:e3:55:
a2:fa:6b:3a:43:4c:45:f2:64:af:d1:d6:2b:0e:9e:67:00:e6:
01:62:1e:b8:ce:c7:ef:14:2c:da:bc:9e:d5:65:be:47:d4:74:
23:01:9f:3b:f8:1e:c3:6e:0a:2f:16:69:a1:ab:a4:2c:0a:c2:
e0:24:ad:aa:4d:9a:9f:19:73:a1:77:dc:42:1a:23:08:8d:e8:
86:27:9c:c2:59:30:26:f4:6a:f9:50:c6:a3:b8:d9:a7:96:59:
43:f5:c7:f7:8a:44:98:72:56:83:b2:c4:a7:24:79:92:ac:4a:
43:40:15:8f:3e:be:f7:d5:9d:2f:90:a0:8d:dd:d7:c6:8f:fe:
47:06:17:88:82:77:b4:3e:fd:c3:b7:71:9c:c8:1e:ea:8d:32:
bf:83:1e:4e:fa:ad:c9:0f:0e:27:68:19:be:ee:e8:86:66:a8:
9c:dc:62:fa:55:fb:7e:fc:52:95:1e:bc:8a:d3:fc:27:2d:49:
4b:00:56:b0:bc:25:76:01:34:29:77:d0:64:86:51:19:de:4c:
38:ae:e7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:39 2025 by rpki-client