Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier: auSl9vyhGXuJcRPTkapLelmtFN0kCcB4iKXFKJlaLSw=
Subject key identifier: 37:A2:3F:6C:16:1D:93:5A:22:4A:5C:3D:3D:AE:A0:5F:52:0D:BF:8D
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 019749D5AC1BE96B2C4CB1C3B1DCECD42891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number: 0BEB
Signing time: Sat 07 Jun 2025 10:00:29 +0000
Manifest this update: Sat 07 Jun 2025 10:00:29 +0000
Manifest next update: Sun 08 Jun 2025 10:00:29 +0000
Files and hashes: 1: 1-eVtiZIJZtejkcxnJZbMOuqtkvM.roa (hash: /dozujzBruht/lOgqwCLtQNFBrpieolWDy5kZ5Mel3s=)
2: 56FwlKZ7KIhARLPC6HlmmMABBnU.roa (hash: Z+1GZvGlxeBEP1crVQ4oVXjpJKgbOm4WDdf1clBCOOM=)
3: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: WtMSWvB0qPU1u9rMiywj3f5qzTdUyy5BY0/Uzp7+6dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:ac:1b:e9:6b:2c:4c:b1:c3:b1:dc:ec:d4:28:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Jun 7 10:00:29 2025 GMT
Not After : Jun 8 10:00:29 2025 GMT
Subject: CN=37a23f6c161d935a224a5c3d3daea05f520dbf8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:26:64:36:c0:8e:07:36:ac:e1:ad:3e:8c:
b0:48:f0:24:a8:be:ce:92:cd:15:09:de:e9:46:9d:
c1:68:45:32:42:34:e5:7d:62:78:9c:09:54:39:47:
b6:62:87:58:1d:b8:2b:b9:fd:b0:a6:8d:d0:4b:d6:
ac:74:71:e8:54:a0:4e:ef:b0:21:c0:88:bf:64:12:
b6:4b:cc:0d:4b:2e:41:5c:01:2d:9a:94:84:96:0b:
b0:a6:29:0a:18:60:86:54:82:e7:52:dd:99:b8:05:
c4:8b:cb:ca:62:30:3c:bd:b2:d1:80:1f:4e:76:d0:
ce:a2:b5:8f:04:4a:d2:59:f0:5d:fb:5a:1a:cd:0c:
00:7f:dc:47:be:4e:c1:fb:79:e1:30:c0:bb:a4:cf:
e8:90:45:2c:eb:10:94:71:db:22:39:9b:98:39:d7:
65:63:a5:dc:c3:88:19:98:8d:8c:3a:de:8b:44:0a:
3b:24:cf:06:12:81:b9:79:ca:79:11:b8:fc:2d:63:
36:b8:43:ef:27:f1:c6:dc:94:d6:38:c5:9f:eb:a1:
f0:d0:27:8e:51:80:af:63:c9:39:2b:b2:54:2b:f4:
a3:b4:ff:98:28:a3:96:32:2e:4b:64:ce:d0:6d:40:
6a:92:a1:96:06:13:5f:90:02:be:28:93:67:65:64:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A2:3F:6C:16:1D:93:5A:22:4A:5C:3D:3D:AE:A0:5F:52:0D:BF:8D
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b9:82:2b:c1:40:8b:97:4a:df:b0:f1:b0:3c:c6:af:08:fb:
10:03:ac:67:e2:7b:d3:a5:21:8c:1d:cb:89:f5:0d:53:a9:e4:
64:47:b0:6b:b9:f8:cc:86:be:2a:eb:65:0e:d5:2d:c4:15:bc:
ef:a3:6a:36:38:be:da:9b:82:60:75:a6:39:d9:b4:6c:a1:11:
a6:05:20:f9:40:9b:58:83:27:5d:fc:49:e7:ed:e0:b4:f0:1f:
2c:f8:df:37:44:33:95:51:88:e3:03:8b:4c:67:25:80:34:f5:
11:95:9f:4e:68:b8:94:c1:9f:da:83:9a:44:e8:f9:21:80:ec:
c2:f7:86:10:3a:bf:df:8f:67:0b:e1:88:59:1f:24:0f:fd:e6:
1a:a2:00:7d:b3:22:f2:90:17:8f:11:a1:2d:90:1e:35:63:02:
d5:0c:9e:18:45:c1:2a:64:ae:0b:37:6a:4b:e4:b4:b3:6a:2b:
ca:d2:46:b2:41:77:8e:55:e6:fd:ec:95:ff:e3:82:95:4a:57:
a3:fb:67:2d:64:4f:e1:cc:16:a3:b7:0f:f2:4b:1e:44:24:e4:
63:2a:91:f5:ad:5a:82:ad:24:e1:13:53:0a:fb:58:8d:22:e6:
c8:ab:fe:81:5d:30:66:3c:05:18:ec:49:71:f8:9f:95:60:86:
10:7f:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:10:42 2025 by rpki-client