
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
File: G7yEG3eaK7LCio2u4rLRDVp8NNU.mft (raw, json)
Hash identifier: SXxDr3em8qYmZgYfrms/Bi6yEs0SzlpK0F7+bEXXykY=
Subject key identifier: A5:39:3E:68:B8:2C:31:9B:12:04:94:26:DB:C7:92:8C:93:8E:32:8D
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Certificate issuer: /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial: 0198481BE036034D294CEFEEC42ADF6DE16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 19:00:43 +0000
Manifest this update: Sat 26 Jul 2025 19:00:43 +0000
Manifest next update: Sun 27 Jul 2025 19:00:43 +0000
Files and hashes: 1: G7yEG3eaK7LCio2u4rLRDVp8NNU.crl (hash: +UJr5Kt6BoXXoQeElnRaXPhf2X3zbY7YVxeguN35mMs=)
2: VBl-ShtkY5AIJWsXxjtVR-loSP4.roa (hash: UuFGS1s0gPMKN8UjwJZO3gcLtja3SP+rxmHIDo2PFTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:e0:36:03:4d:29:4c:ef:ee:c4:2a:df:6d:e1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Validity
Not Before: Jul 26 19:00:43 2025 GMT
Not After : Jul 27 19:00:43 2025 GMT
Subject: CN=a5393e68b82c319b12049426dbc7928c938e328d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:90:a7:80:7b:7e:9e:b3:6d:16:af:ce:bd:
5c:69:90:14:47:20:41:b1:12:59:0d:08:17:81:31:
ec:7c:cd:98:d7:6c:50:7c:65:85:96:be:32:7e:00:
7e:3f:11:f9:26:c9:8d:d9:29:af:b3:eb:82:92:e4:
cb:f8:e3:4d:46:db:b5:7a:a1:19:12:74:2b:19:21:
9c:44:61:da:66:59:9f:0d:f3:85:a9:7a:7c:a0:79:
25:82:a6:a3:3c:48:f5:6c:e9:bb:12:ec:8a:12:d0:
18:70:cb:f8:ce:1e:23:d4:68:62:52:81:9d:19:42:
e5:3c:80:9f:88:72:7a:ae:e4:1c:ee:8d:1b:55:f7:
7d:60:68:ee:0f:3f:3d:c2:0b:f6:a3:f7:35:8b:d3:
e7:20:84:c4:11:29:8a:0e:ef:28:c7:6b:6e:cf:77:
93:d0:2c:ab:78:f6:5b:74:4e:e8:ca:51:50:89:eb:
df:61:82:b6:88:b2:d0:f4:dd:04:02:f2:8f:21:5e:
6b:34:ec:24:d4:b3:f4:6d:1b:9a:7a:46:96:3e:8f:
fb:2b:ea:82:19:f2:80:23:78:ae:19:65:ad:cd:19:
76:07:64:0f:a9:db:9d:32:fb:0e:16:4d:6b:1d:3e:
79:dc:e3:80:d8:2b:5f:00:7b:91:89:ae:36:46:b9:
d3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:39:3E:68:B8:2C:31:9B:12:04:94:26:DB:C7:92:8C:93:8E:32:8D
X509v3 Authority Key Identifier:
keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:23:3b:fa:02:95:a3:c3:c9:90:dd:1e:8c:6d:e1:ab:ef:cb:
09:20:26:a3:09:2a:05:09:13:24:f0:24:d6:9e:e9:d4:78:6d:
2e:6b:d3:ae:bd:f0:52:8d:ec:34:b5:e4:1c:31:ca:2e:68:0c:
6e:3a:83:11:38:f6:32:0a:8e:1e:5b:e2:9f:01:45:d8:81:57:
03:84:53:ab:de:94:96:44:49:eb:fb:04:2a:25:18:98:c2:ce:
7d:0a:f6:4d:91:1f:a6:be:62:e3:4f:0a:82:00:13:d5:49:e9:
83:4e:59:90:8a:ff:68:6f:6e:ff:fa:0b:74:44:cb:93:ee:4a:
e3:29:30:b3:bc:a2:66:04:42:11:24:20:7e:2c:f2:04:c1:c7:
21:88:a9:31:93:0e:a3:19:44:1b:5d:13:bf:a1:1d:4b:11:85:
29:7d:4f:b3:49:01:5d:63:8c:34:47:ac:e1:80:06:93:c4:e2:
fe:9f:81:57:48:ee:75:7e:a9:a3:d2:f4:2f:90:b8:76:78:d6:
6d:f7:f2:f7:8a:1b:0e:f9:95:f9:87:92:05:72:f6:ba:ca:1b:
24:6d:49:80:92:97:3a:16:24:95:07:fe:58:01:7a:17:5b:7e:
47:43:41:2a:71:a7:76:bb:82:a1:0f:37:eb:e1:88:7e:8b:bc:
f0:c5:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:21:57 2025 by rpki-client