Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier: 6Azidz50Klp0sEhSn7asG7Vq8STO+x0ER15UjiQwISM=
Subject key identifier: CD:63:9E:74:BB:F1:A9:DF:33:FD:54:C7:02:8A:9B:FF:12:E2:C5:8C
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 01995BA0E65144E04077AC9AA77F53C954F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number: 0593
Signing time: Thu 18 Sep 2025 07:01:35 +0000
Manifest this update: Thu 18 Sep 2025 07:01:35 +0000
Manifest next update: Fri 19 Sep 2025 07:01:35 +0000
Files and hashes: 1: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: WD/D4DksHPJxD3mqgpDvcGtMmPZU7E+g0K51lFVqomM=)
2: hQt6fLvth7yhZ_gy-eWM04fH0Vo.roa (hash: 5eRa0XK3oy+0XVVEDTa2qZR1cDbvimVVidnig16u0uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5b:a0:e6:51:44:e0:40:77:ac:9a:a7:7f:53:c9:54:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Sep 18 07:01:35 2025 GMT
Not After : Sep 19 07:01:35 2025 GMT
Subject: CN=cd639e74bbf1a9df33fd54c7028a9bff12e2c58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:0c:32:e3:72:c8:11:f9:ad:62:cc:6b:9a:
83:a9:9b:ab:35:a1:74:5e:de:45:a2:52:75:5e:ae:
39:36:ac:65:be:e1:0a:d1:25:aa:c0:22:b3:73:c9:
8f:45:a7:37:5f:cc:df:f9:0b:c9:fa:0a:d6:8e:be:
14:23:11:c5:1f:87:6e:bf:01:d6:c0:7c:3d:31:bc:
92:18:d0:03:85:8a:22:ef:40:30:f7:d7:0a:11:53:
e7:d7:8b:fd:82:0f:ef:7a:b4:ac:a4:8a:de:3f:b9:
fb:80:30:45:00:c3:2a:9e:17:7d:98:91:9f:71:8f:
89:91:3c:2d:f5:da:dc:4e:6e:c0:1a:45:65:77:0f:
b8:13:d9:03:14:f8:65:48:91:ca:d0:2c:c4:01:c7:
fa:f8:d2:db:52:72:4d:9e:77:5a:68:f1:6b:7d:f1:
8b:fc:6a:16:cf:72:e9:74:26:09:0a:64:89:bb:59:
50:27:34:51:cc:13:ad:dc:60:c1:aa:cc:fd:64:d6:
02:e3:32:d4:81:54:04:b2:e6:cb:56:5a:80:80:fb:
f7:69:86:c7:1b:f2:83:a9:31:a6:47:12:01:cc:9d:
90:95:db:ac:51:01:b5:78:64:a7:ce:2d:ce:fd:a4:
ea:73:86:96:16:63:c3:12:72:6a:ba:b5:33:d1:e3:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:63:9E:74:BB:F1:A9:DF:33:FD:54:C7:02:8A:9B:FF:12:E2:C5:8C
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b7:10:10:04:25:af:d6:56:4f:5d:fb:2d:a8:5d:81:b7:a0:
ce:e5:24:d5:49:34:58:2c:7d:cf:6a:e4:77:a4:6d:c1:4e:a2:
7c:e5:a3:68:fc:d3:52:15:f6:f2:30:10:c0:99:4b:74:b3:58:
6f:71:0f:d5:31:45:53:3f:26:5f:b2:8f:f8:ee:8e:54:4a:99:
41:11:93:98:20:b7:8e:17:a3:c8:3c:e2:99:ef:ba:2c:0c:68:
57:2e:53:9d:38:6b:32:da:f4:7f:fb:31:1b:79:3d:24:4c:23:
b4:bf:6d:84:7a:ce:4b:de:73:d7:09:d2:cd:3f:a7:05:8f:a4:
c3:66:da:c5:53:6b:fa:8d:e0:84:08:51:82:3b:49:52:39:52:
77:a8:b3:2b:a2:d6:77:be:f3:21:b7:6c:76:d1:0b:12:0d:99:
48:2c:e0:7e:81:38:62:29:f9:10:39:52:00:59:55:e9:60:7c:
d4:4a:5c:ba:b3:a8:d4:9b:b3:9a:18:cc:51:85:31:02:5b:fe:
ef:b3:39:dc:0f:33:20:f6:49:6f:54:cd:6e:54:25:87:58:99:
3e:00:9b:54:21:99:84:48:8b:24:54:84:ac:04:e9:3e:1b:88:
e2:92:e4:53:2a:f1:87:da:2b:70:20:71:ef:7d:c6:c9:b1:7b:
28:8d:13:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:23:32 2025 by rpki-client