Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier: CBCipLtRLQdbilYSNTm7qev8fmKWNtxFgxCDkUs0w1c=
Subject key identifier: 13:E6:9B:14:F7:C0:0B:0D:91:A9:F0:E8:9B:78:77:FA:75:EB:16:32
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 0198665D35832442F506177FD0B865157F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number: 0514
Signing time: Fri 01 Aug 2025 16:00:41 +0000
Manifest this update: Fri 01 Aug 2025 16:00:41 +0000
Manifest next update: Sat 02 Aug 2025 16:00:41 +0000
Files and hashes: 1: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: OKr3LhZeJ2W9q4ktT+I6D4k7o6xNKYbL/0QdrwhRbqQ=)
2: hQt6fLvth7yhZ_gy-eWM04fH0Vo.roa (hash: 5eRa0XK3oy+0XVVEDTa2qZR1cDbvimVVidnig16u0uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:5d:35:83:24:42:f5:06:17:7f:d0:b8:65:15:7f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Aug 1 16:00:41 2025 GMT
Not After : Aug 2 16:00:41 2025 GMT
Subject: CN=13e69b14f7c00b0d91a9f0e89b7877fa75eb1632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:25:a4:40:2f:5b:3c:b0:fb:bc:40:b6:84:
19:80:8d:6f:54:6d:bd:c6:bd:a1:32:6d:40:05:47:
61:f6:d1:6d:13:71:b9:1a:ff:00:2d:41:0c:01:0a:
7b:fc:b0:f9:6b:41:a6:70:41:4f:3a:58:b2:e4:73:
5d:d0:ec:df:8e:94:af:d8:06:98:36:a4:4b:4b:41:
31:24:7e:30:94:1f:b0:a3:a2:7d:33:70:cd:21:f4:
13:45:49:f1:72:2d:72:cf:7f:f3:f2:72:e1:17:fe:
e8:5e:6e:52:4e:fc:36:40:4b:84:65:c1:e7:3b:8a:
ef:3d:ac:6d:8c:54:81:be:24:d4:77:66:e9:c6:cc:
d3:c8:47:ef:e3:d8:81:09:c4:5b:2c:bc:96:a4:9c:
3a:f0:19:fe:9e:db:ea:4c:8b:c3:e1:59:b2:fe:f1:
ac:8d:45:a0:70:41:b0:59:c1:aa:6a:62:ef:c4:ba:
96:9c:8b:ed:c1:b6:7f:c5:61:8d:53:ff:22:f6:15:
f1:db:7c:80:66:cf:25:21:bf:14:c1:05:f4:97:2f:
57:38:a6:db:c2:f9:5f:96:10:13:c2:19:40:09:e9:
6b:e5:60:fe:f2:fb:22:ce:ba:ff:cf:4d:76:b4:f3:
b4:ed:48:c6:b6:89:92:42:24:5a:1f:c5:93:26:28:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E6:9B:14:F7:C0:0B:0D:91:A9:F0:E8:9B:78:77:FA:75:EB:16:32
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ef:07:72:70:8c:82:f9:cf:87:95:b7:8a:f0:4f:ac:eb:2a:
5a:ae:0b:b8:b3:33:3a:a5:38:b7:16:aa:cd:d7:43:82:b9:c8:
1c:39:71:79:87:db:f4:44:c5:c9:fc:60:4c:b5:4c:dc:9a:d6:
25:43:ce:ab:61:3d:5c:80:1b:fb:2d:34:f4:90:12:34:b2:b8:
1d:30:8c:90:b0:b1:7b:f6:51:a2:d2:60:9b:7c:d3:e3:0a:08:
3b:66:71:5c:d6:d4:91:79:2b:f9:25:a7:c1:74:61:3a:86:72:
d3:6a:5f:b9:03:6b:36:0d:26:0d:ba:21:d6:94:e1:ae:57:0e:
3c:d1:a0:9c:1b:60:61:c8:b7:71:1e:9e:48:55:1b:16:08:4a:
8c:07:b6:c1:66:f4:7e:a0:75:73:84:56:55:4e:70:ee:e7:31:
d4:c0:6f:d4:be:98:18:91:06:02:67:3c:ed:2a:86:a7:b7:6b:
4c:ce:73:25:a4:aa:44:38:f4:e4:df:30:82:aa:55:48:62:d9:
c9:30:2f:71:4b:06:f7:d5:14:58:a1:a0:52:ba:a2:8b:ec:7a:
20:9a:5e:45:c9:11:d9:a3:d8:5f:b1:5e:a3:9a:74:26:db:3e:
3d:74:ce:84:d2:26:d9:0b:e2:bd:7e:15:d7:47:45:aa:3f:34:
8b:0a:71:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:39 2025 by rpki-client