Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
File: g4dr-7WujP4Ra7X18oZKEWITqk8.mft (raw, json)
Hash identifier: yRPRYC1tVAqBt8Sx2D3yrfsGkIi5dD2mKdLyG+1KySQ=
Subject key identifier: 8F:5B:84:58:CD:7F:7F:00:F9:28:23:3A:D4:33:1E:4C:6B:E8:D3:CA
Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
Certificate issuer: /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Certificate serial: 019747B0FF1690D10ABAE37EE61871E9FF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 00:01:11 +0000
Manifest this update: Sat 07 Jun 2025 00:01:11 +0000
Manifest next update: Sun 08 Jun 2025 00:01:11 +0000
Files and hashes: 1: g4dr-7WujP4Ra7X18oZKEWITqk8.crl (hash: 79B+xqqdKah12pC4mfpF7ZhJds32IxYwPPH6fSrGDJo=)
2: on6c4T5uruUZ19cPvyYxdOa3Uo4.roa (hash: DzOTGbti7Ycex9SFmllizCyD+Zg7ddBWN0hhpKZi1gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:ff:16:90:d1:0a:ba:e3:7e:e6:18:71:e9:ff:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Validity
Not Before: Jun 7 00:01:11 2025 GMT
Not After : Jun 8 00:01:11 2025 GMT
Subject: CN=8f5b8458cd7f7f00f928233ad4331e4c6be8d3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:71:bd:cf:aa:bd:bf:85:9b:f8:85:3d:d6:
10:49:c2:cd:e1:e3:2e:92:b5:73:51:49:ba:90:29:
8d:f3:eb:18:01:b4:52:5d:5a:c6:f2:a5:e5:57:3f:
52:1e:01:42:5e:c0:f0:36:01:80:dc:10:e2:33:05:
88:5b:2e:fe:d3:ab:ad:8e:02:77:7a:44:0a:c3:3e:
28:fa:c3:00:3f:29:b2:53:70:2d:f1:31:b9:19:ec:
db:ce:7e:29:a0:66:81:fa:73:1e:a7:2b:29:13:c6:
b0:9f:a9:20:a8:a9:ce:73:82:d8:52:dc:b4:8b:8e:
2c:8d:db:ba:ac:76:28:49:94:f6:6a:2a:24:07:d9:
c1:a5:63:eb:4e:ad:fa:83:05:09:df:19:59:c8:b2:
ae:59:ee:e9:86:0e:bd:18:d1:e2:e4:6b:0d:76:2e:
99:bf:cd:f1:90:dc:80:02:e7:1a:43:e1:ac:cf:96:
3a:57:77:8d:58:8f:dd:9e:45:13:8e:85:3c:2f:7d:
8d:06:93:78:66:0e:9f:c1:dc:6e:6d:3c:8c:d2:45:
04:07:91:22:2f:2a:5d:cf:4a:5f:73:e6:35:b0:16:
8b:a9:f5:b1:27:f3:02:f9:d5:fe:0a:ae:2c:13:db:
09:e1:02:44:80:74:47:d6:7d:c0:48:5d:a4:5d:ba:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5B:84:58:CD:7F:7F:00:F9:28:23:3A:D4:33:1E:4C:6B:E8:D3:CA
X509v3 Authority Key Identifier:
keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:46:b6:33:63:90:c5:d6:42:69:5c:65:bf:d4:75:a1:d4:d1:
d2:9c:9a:7c:73:e3:8d:78:10:48:8f:a3:92:c7:4f:01:57:d1:
3e:0b:aa:a0:48:eb:29:56:54:78:9d:23:03:cf:d2:8f:b8:b9:
2a:e9:ff:0d:e7:fa:3b:5f:26:db:0a:cb:23:a6:a8:80:df:46:
77:d7:2a:52:55:c8:f2:f7:fe:e5:80:02:b4:2b:ae:bf:2d:10:
b0:eb:4f:ea:e7:02:e8:b1:a8:eb:60:47:99:68:50:8e:8d:5d:
eb:ab:14:1b:c1:4e:30:48:fa:45:10:8c:02:b9:71:cc:f1:e5:
ff:4c:dc:c3:fe:84:83:18:8f:0d:2d:c6:55:f1:5e:3d:c8:dc:
38:1b:ba:41:54:b1:9f:51:44:4e:6b:be:d1:dd:95:b6:cd:65:
58:1f:9b:27:a1:7b:d9:ca:83:df:16:3e:c3:8a:35:83:c7:b4:
0f:91:0f:7d:e3:43:be:72:81:08:6a:ca:3c:a8:4d:83:3b:8a:
e7:ec:c0:f1:da:53:98:b3:9b:0d:5e:78:4b:74:f4:21:44:ae:
be:7a:23:3f:95:20:d9:e5:66:07:83:a9:89:45:17:b0:aa:85:
61:f9:06:2f:ed:68:9c:e7:26:42:78:1c:99:08:0e:6a:8f:59:
44:19:f3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:16 2025 by rpki-client