Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: ODgz/R6B8pB5knvTknzisStdNSXqFSatT0dHChB4YBo=
Subject key identifier: 88:28:E9:CE:B6:EB:DC:59:32:09:E4:C6:56:88:57:EC:39:EB:C8:FA
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 01984CD3E4BFDC0F7578BD9B0FC833C009BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 14DC
Signing time: Sun 27 Jul 2025 17:00:11 +0000
Manifest this update: Sun 27 Jul 2025 17:00:11 +0000
Manifest next update: Mon 28 Jul 2025 17:00:11 +0000
Files and hashes: 1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=)
2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: gBErDCfEdvKux8e8IfEnSktm+eXg/4cUzF01aE3xK9M=)
3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:d3:e4:bf:dc:0f:75:78:bd:9b:0f:c8:33:c0:09:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Jul 27 17:00:11 2025 GMT
Not After : Jul 28 17:00:11 2025 GMT
Subject: CN=8828e9ceb6ebdc593209e4c6568857ec39ebc8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:f0:91:96:b2:80:b7:de:76:45:88:35:61:
b0:02:40:31:40:a6:0e:3b:f9:6a:b9:d4:42:0f:a6:
68:3b:e8:97:71:99:b4:a4:f0:aa:dd:b1:7d:6d:9c:
51:0d:66:91:9c:da:bd:57:f8:21:1e:41:8c:45:05:
b9:7b:50:aa:09:c5:77:b6:0e:20:7d:2d:bb:11:13:
cd:ab:1f:08:10:6f:51:7b:75:50:d8:2f:60:4d:cc:
2f:c3:89:cc:0c:d1:5e:45:df:00:82:08:d4:d5:d4:
1e:2f:9c:df:77:a8:e4:29:a2:30:c8:ba:13:1b:fc:
dd:2a:10:b6:8d:44:cf:c8:ce:0a:7c:5b:de:02:4d:
da:9a:2b:4f:4c:e6:08:aa:45:38:5c:7c:ae:59:ad:
39:4e:13:1a:df:32:21:59:f0:e0:e8:42:12:49:15:
2f:57:ef:96:a9:18:15:e8:77:54:f3:6c:d3:f1:73:
86:c8:11:c5:84:2e:da:09:7f:36:13:46:64:76:2c:
53:9a:dc:6a:b9:57:34:01:ae:a5:8d:17:64:be:5d:
66:1d:d1:6a:e9:11:f5:ed:d0:16:04:5b:08:f9:42:
a1:4e:30:a2:d8:d5:25:75:aa:52:8a:86:4d:29:d0:
59:e2:61:3a:5e:e1:ed:06:d9:c7:37:91:c7:c7:7c:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:E9:CE:B6:EB:DC:59:32:09:E4:C6:56:88:57:EC:39:EB:C8:FA
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c5:f0:a8:ff:24:2c:83:90:5c:b6:2a:e8:e2:3a:32:23:86:
14:fd:90:3d:41:04:1f:11:4c:4d:f3:c2:d8:cc:b3:97:74:b6:
1b:e7:62:0a:94:6b:c1:3e:c3:7b:5c:bc:31:2f:69:a1:46:e1:
a1:da:2c:ea:b4:36:f9:a4:ee:c6:c8:82:34:b4:4a:be:b6:95:
9c:b7:fe:b0:2f:46:81:be:c8:bd:9b:09:75:e9:32:76:23:06:
ba:14:28:c5:33:32:65:ea:ce:2d:b8:b5:0b:5b:c7:30:61:6e:
7e:8c:79:10:e7:88:67:77:a4:a9:69:01:c4:70:9e:fa:ca:85:
99:dd:18:9a:0c:6e:9d:55:11:ac:f2:62:29:3b:21:01:d7:bd:
43:88:bc:d6:39:02:87:35:c6:12:68:00:d8:d6:a9:96:16:4f:
c6:e0:17:d0:09:46:3a:8b:86:df:41:7b:11:ad:06:2d:d9:c1:
6a:cf:db:9f:1a:68:59:cd:e9:b9:72:74:05:20:63:31:7b:4e:
81:95:1c:3a:ca:86:8c:84:f6:68:18:ea:a5:0c:47:b3:83:0d:
8a:d3:3b:40:1c:db:7a:ca:49:c0:ad:ce:be:df:0a:94:65:f0:
65:dc:2b:37:0f:86:80:63:ac:1c:cf:c6:76:27:4a:25:cb:bf:
1c:28:d0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 20:31:24 2025 by rpki-client