Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: 5PKhkIDNT6Ozk2+FmnQiip+1lmJkqCN19q/WT8GoAlw=
Subject key identifier: 22:82:18:95:01:A7:0E:85:85:E3:40:F2:05:B4:9A:A3:C6:CE:6D:04
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019854FC4FFDBCF7F1F0DDEBD0C4B4E4D1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 07:01:18 +0000
Manifest this update: Tue 29 Jul 2025 07:01:18 +0000
Manifest next update: Wed 30 Jul 2025 07:01:18 +0000
Files and hashes: 1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: jHcmFrVUglaApaH6vWTv+e+oi90WdZAqjmEF8YviiLg=)
3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:4f:fd:bc:f7:f1:f0:dd:eb:d0:c4:b4:e4:d1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Jul 29 07:01:18 2025 GMT
Not After : Jul 30 07:01:18 2025 GMT
Subject: CN=2282189501a70e8585e340f205b49aa3c6ce6d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:44:6d:fc:34:bd:e6:04:92:e1:55:5f:96:
c9:a3:62:06:62:3e:57:d2:f4:29:f1:11:94:4f:2a:
46:63:e4:02:13:53:a2:a7:5a:07:6c:c5:e3:a6:37:
79:82:bd:db:ef:f8:da:79:da:22:3a:69:bb:2d:33:
74:e7:15:c4:05:5e:51:9a:f2:87:a6:65:82:21:65:
e4:f7:49:55:3a:a9:7f:0a:a9:9f:36:68:a3:fb:77:
3b:05:57:2f:a4:71:df:d7:7a:b5:de:84:5f:16:6c:
29:73:c5:17:5e:61:f3:a9:92:03:2d:7b:12:dd:44:
48:ba:8b:23:c9:18:ed:c8:66:2a:e6:ed:42:94:4b:
57:b9:ca:2a:38:52:0d:16:2b:c9:f2:5d:40:f3:4d:
9a:0f:81:5e:4e:03:28:9e:82:53:8b:4c:77:71:d8:
e0:b7:1e:1c:c0:c2:93:50:a8:ad:09:ae:c1:75:e7:
79:81:24:8f:a0:1f:8c:94:02:0a:f3:ff:59:b4:c5:
5d:e6:61:5b:54:4e:32:54:4b:40:e1:ee:7d:76:77:
6b:a5:63:ee:f2:61:41:a7:c5:eb:ec:2c:09:56:7d:
d7:1b:3f:24:cd:ef:8e:21:7e:1a:72:41:8e:01:60:
1d:2a:5d:32:be:8d:7b:de:3b:9a:9e:e5:f4:0d:63:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:82:18:95:01:A7:0E:85:85:E3:40:F2:05:B4:9A:A3:C6:CE:6D:04
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:50:a0:b9:08:a5:43:23:2b:6f:40:6f:49:26:aa:25:43:31:
05:6b:24:c7:35:23:e9:ef:c9:44:56:66:1e:3e:38:ea:9a:18:
ee:4d:a7:fb:a2:a5:47:d8:79:77:8f:eb:27:57:c0:25:1f:5a:
dc:e3:b0:08:de:1f:56:8f:51:dc:4b:df:31:98:81:9b:87:6d:
01:11:e9:f4:0d:cc:1b:d0:33:12:8b:1b:a4:6f:db:26:62:43:
20:65:06:09:32:fa:4b:bd:69:92:fd:fc:2b:0f:af:09:04:80:
37:49:8e:4f:9d:fa:30:ba:51:ac:9c:d7:4b:54:a2:12:44:de:
e7:2f:8a:7f:bd:b8:fc:28:56:c1:47:c0:c5:99:d2:bf:9f:ca:
4e:ef:5e:0c:e7:7d:f1:7f:04:f4:2b:e0:01:fc:1e:58:1a:6f:
d1:14:bf:03:18:be:a5:b5:d1:a1:96:6d:d0:ee:c5:f3:88:64:
a4:ec:cf:1e:22:01:88:51:11:b2:9d:e1:c7:75:e5:4c:91:bb:
ae:5e:ab:44:2c:da:59:8a:ea:59:54:ab:f7:76:15:9d:c9:d6:
1a:43:a2:7e:15:43:a4:29:8d:d2:e8:cb:b0:c0:0a:c7:65:b9:
16:2d:d0:bc:3d:38:1f:5a:b7:b3:d6:5e:c8:b3:01:27:83:e3:
d5:2c:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:36:20 2025 by rpki-client