Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json)
Hash identifier: 3n19LcOczqLyQwebcM9UhlcuNshrM/dxMDsY38+X760=
Subject key identifier: CE:FA:71:0F:43:FC:9E:69:A1:C4:3F:58:11:54:C3:5E:16:28:44:87
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 019849665520903C0D86930975C22F10B5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:01:39 +0000
Manifest this update: Sun 27 Jul 2025 01:01:39 +0000
Manifest next update: Mon 28 Jul 2025 01:01:39 +0000
Files and hashes: 1: EWj-IKBdi-VQbg6FFbIiaaIj7UA.roa (hash: blruzwC9IPFb7cI8V12vzE/ugdCglrr9S2cLxCpCzJI=)
2: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: GYMQqdgJJJe+iZIZECMmal/8RmRLp5/2N4fJcuDtRWM=)
3: l5yAXyPGwA9Y5lyLs2yb1MceJsY.roa (hash: AJ6lbq1xzcp35bTjVgiXhAuT5kBSyVNhwmMHHhgVeKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:55:20:90:3c:0d:86:93:09:75:c2:2f:10:b5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Jul 27 01:01:39 2025 GMT
Not After : Jul 28 01:01:39 2025 GMT
Subject: CN=cefa710f43fc9e69a1c43f581154c35e16284487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:03:8e:50:d7:81:92:ec:e3:b9:14:11:5a:
fb:7e:34:26:ca:da:73:b8:92:0b:1e:a6:17:96:0c:
11:c4:c6:16:1e:5d:c8:b3:78:64:86:5a:b5:79:af:
c1:9e:24:11:84:6f:28:21:b8:c9:50:d3:0f:f2:d3:
93:59:99:ac:0b:c4:68:ae:48:33:37:db:6f:e3:68:
f9:81:3e:b3:3e:08:de:fc:b2:7c:39:56:57:45:e5:
63:2c:b1:b5:c1:96:a7:df:ee:2a:ff:40:f1:f6:19:
ad:c7:b6:68:9d:1f:81:42:f8:bc:6e:66:5d:e0:27:
af:a2:74:d9:8f:f0:8c:be:e5:04:eb:8d:13:bc:fc:
4f:69:59:57:1b:bc:0f:df:87:5b:03:e5:dd:d1:cc:
52:45:7b:6b:9d:9c:76:1a:87:20:20:50:80:ba:55:
dd:a6:e1:9c:87:ff:4e:2b:c1:98:7c:4c:7e:6b:31:
80:40:41:c3:6b:3c:42:ec:95:c1:e7:ae:9d:22:4b:
a2:8e:c3:22:07:ba:3a:5b:31:00:32:b5:8f:4d:ee:
90:42:2a:5c:c0:9c:58:32:06:a4:22:50:6c:f7:de:
b3:e2:10:b6:d0:8a:83:59:ae:4c:4f:0b:9d:97:69:
0f:86:51:be:0d:f1:b8:35:96:6e:aa:79:04:5e:b3:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FA:71:0F:43:FC:9E:69:A1:C4:3F:58:11:54:C3:5E:16:28:44:87
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:78:87:af:ec:92:2c:b6:25:70:f7:ff:2e:9a:65:df:62:f6:
cb:3c:3c:32:ee:b8:3c:7f:8e:88:b8:5d:7b:63:18:0d:26:e6:
f0:49:f7:47:3d:11:00:92:8a:a8:1a:6c:4d:35:0d:4c:67:33:
b1:20:ad:0d:9b:9e:a7:af:50:89:5a:bf:04:50:56:af:8d:be:
2b:5a:1a:8e:54:cc:f3:98:20:1d:01:4e:f6:48:8b:11:9d:15:
9f:5c:7b:b8:5c:e8:c7:66:e5:55:6a:d2:53:ea:d2:4f:22:87:
bd:f0:b5:c4:83:4c:44:93:51:a9:fb:5a:5e:52:7f:a8:11:ca:
52:66:b1:da:96:52:5d:7a:c6:ee:18:6c:0e:ba:63:64:be:e7:
01:9a:9f:53:12:55:b4:4d:a6:8b:c7:10:24:78:90:55:fd:02:
93:6d:7d:1e:c8:a6:8a:b6:04:d7:a2:f2:a9:b6:4b:f6:91:01:
25:e7:6e:c7:65:0a:c8:4c:67:98:ce:ac:79:a1:1a:0e:e4:57:
2e:8a:69:74:cf:11:ac:f3:f1:8a:34:40:8a:ed:dc:fa:22:d4:
e7:dd:4a:ee:02:11:58:81:e8:46:16:e4:0b:5c:d6:75:0c:09:
b2:50:e3:00:46:5f:24:93:a2:c3:e8:80:f2:c0:c8:97:8a:55:
e2:11:01:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:00 2025 by rpki-client