Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
File: GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json)
Hash identifier: SwkPgPtHkEldZ/vyis8pjkriwjZwZdSrlVCp2iZaM50=
Subject key identifier: FD:54:47:8E:5D:26:0B:3C:41:2B:F9:16:0D:F3:94:A3:82:9E:9F:46
Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
Certificate issuer: /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Certificate serial: 01984B53DAA44618100E8FD9B83AF1B85DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
Manifest number: 0C2F
Signing time: Sun 27 Jul 2025 10:00:43 +0000
Manifest this update: Sun 27 Jul 2025 10:00:43 +0000
Manifest next update: Mon 28 Jul 2025 10:00:43 +0000
Files and hashes: 1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: OzQ9Q+ClPDzjC908G9eHpZK0mLYBWSedkQAzJYumweo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:da:a4:46:18:10:0e:8f:d9:b8:3a:f1:b8:5d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Validity
Not Before: Jul 27 10:00:43 2025 GMT
Not After : Jul 28 10:00:43 2025 GMT
Subject: CN=fd54478e5d260b3c412bf9160df394a3829e9f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:cf:8a:e2:8b:7d:ae:48:83:e2:c7:8c:fa:
ba:f0:f3:85:d6:3b:86:06:b3:eb:80:56:72:32:b2:
fc:aa:8e:46:b0:ef:a6:6e:70:f1:7e:1e:a1:1e:cc:
96:db:ac:a0:cc:b2:bd:d2:3f:bf:ae:be:f8:bc:93:
94:a4:45:12:2e:84:45:f7:e1:f1:d4:59:7a:13:32:
46:04:9c:dc:35:26:89:8e:0f:e4:33:83:c4:39:99:
9c:fc:f4:09:af:9a:a6:78:3e:48:1c:b1:f0:4c:bd:
31:45:34:ac:cc:bc:96:a0:38:32:ac:aa:d4:69:7b:
d0:5b:b9:d0:ce:43:f1:5c:16:ce:53:f6:bc:80:e9:
1f:1f:96:d7:43:f6:d3:60:65:24:df:6d:30:25:01:
dc:0f:ee:1f:71:ea:fc:58:0f:08:c3:a6:11:87:63:
fb:77:00:07:09:e4:00:64:0c:c9:38:a9:f9:be:47:
cb:31:ae:4d:a4:a5:44:20:60:f5:af:86:0b:b4:7a:
e8:27:00:4e:03:ce:e4:c1:ff:1d:97:29:12:e0:6a:
7d:36:b3:b3:14:06:a7:b3:31:d1:78:7b:16:99:73:
de:ae:cd:34:c4:c2:4f:6a:8e:04:38:f2:bc:fa:df:
96:2e:8d:c5:73:00:cd:0a:6e:5a:fe:08:1e:ae:44:
80:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:54:47:8E:5D:26:0B:3C:41:2B:F9:16:0D:F3:94:A3:82:9E:9F:46
X509v3 Authority Key Identifier:
keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:56:b4:fb:60:d0:b0:22:80:60:1c:6e:8c:6a:a4:88:e1:b9:
39:20:09:ec:92:57:48:58:07:1a:68:99:f7:bd:ad:4f:c6:41:
06:8a:2d:69:01:3a:27:23:28:08:b5:68:06:97:e3:9a:79:9e:
7c:28:9c:0b:14:53:c1:a8:ba:61:bf:a0:e2:c3:76:e9:b9:f6:
16:55:0b:12:b2:6f:d8:62:46:b2:dc:05:04:f9:36:6a:c4:c9:
8b:86:23:11:5b:70:4f:5a:72:59:31:eb:cf:eb:fd:94:a6:d6:
e6:93:8b:2c:1e:7e:97:4f:0d:66:71:65:a7:b7:a6:26:12:c6:
87:e9:d9:51:bb:4c:47:5f:f7:d2:11:e8:c6:a6:c2:7f:6c:95:
97:27:38:f8:5c:3f:60:f5:61:63:78:d8:c4:37:84:0f:97:9e:
98:5f:37:13:c0:c3:25:82:c4:03:38:f6:5e:b9:99:c6:92:da:
85:a6:39:ad:1c:e9:7a:44:66:31:9f:73:d1:70:57:f6:54:72:
ff:27:7f:99:32:94:fe:04:83:01:86:1f:e6:fe:6b:90:c2:86:
f0:d6:ff:59:40:64:11:11:55:b9:8b:89:0a:7c:a9:b9:fe:44:
36:39:b0:b0:f8:0d:ff:cd:98:11:49:30:88:e4:42:61:bd:09:
30:47:60:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:20:41 2025 by rpki-client