Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier: 8i1h5lvk0bNT37CVuHyuxg3PFkDh0cM2ilia3FiR2EU=
Subject key identifier: 80:CB:AC:B5:B2:A6:5D:B6:AC:37:D3:05:75:E9:3B:69:D2:03:DA:ED
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 01984A0A3E71C50320593D70DCD061387017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number: 12A6
Signing time: Sun 27 Jul 2025 04:00:41 +0000
Manifest this update: Sun 27 Jul 2025 04:00:41 +0000
Manifest next update: Mon 28 Jul 2025 04:00:41 +0000
Files and hashes: 1: 1ISrUMvXtY8idtkbmSmcNCBmXOs.roa (hash: JdzcjRC1qPASLJAyKXCJZ2jvTuTxM21yeidKZ9A5IsQ=)
2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: xak6Snyq0Gcj5cgz8WGTQlc61+n14P6vXiDggQPdn4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:3e:71:c5:03:20:59:3d:70:dc:d0:61:38:70:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Jul 27 04:00:41 2025 GMT
Not After : Jul 28 04:00:41 2025 GMT
Subject: CN=80cbacb5b2a65db6ac37d30575e93b69d203daed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:0d:f0:a1:85:0f:9f:2b:f7:8f:e7:b9:40:
fc:4e:81:a6:3f:e4:c5:2c:db:cc:ab:e6:51:b1:89:
28:c6:dc:b9:84:b0:b9:cb:65:0e:23:cf:28:53:16:
a0:95:0f:3e:6c:41:8d:51:22:12:c3:72:01:2a:98:
60:59:36:a7:a1:0b:ae:2c:47:5c:c4:70:e9:97:f2:
f1:40:58:e0:cf:6f:00:cf:2f:5b:19:94:f5:08:30:
dd:fe:4e:16:21:ba:16:da:ca:bd:5b:53:df:22:74:
e7:43:e5:63:2a:ef:f3:9a:83:d4:a5:c3:7d:6b:fe:
04:e9:2e:22:ed:82:20:4d:c5:37:a8:5d:18:26:33:
7b:1e:b0:85:27:9d:17:92:fc:65:c1:3a:d0:d6:f1:
b1:09:08:b0:ae:81:a8:3e:cd:8d:4d:b9:ef:56:d3:
39:57:0b:bf:4c:eb:23:49:70:2c:6c:eb:ee:58:c2:
55:ec:53:34:97:77:8c:21:c3:68:34:99:f3:ac:b3:
48:a0:b2:28:de:f6:1e:79:46:e2:45:48:89:36:7a:
bf:2c:02:0c:a5:42:08:30:c7:75:85:be:6d:06:4f:
6d:30:4a:37:b5:e8:58:28:0c:58:53:a5:b1:ff:f9:
f6:8b:26:bc:d6:b6:1f:20:78:36:ab:f8:a1:a2:fa:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CB:AC:B5:B2:A6:5D:B6:AC:37:D3:05:75:E9:3B:69:D2:03:DA:ED
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9b:84:28:26:4f:3e:26:e3:77:37:62:e8:df:05:79:66:67:
fc:df:0a:c7:20:0f:eb:be:e9:9e:7a:a1:28:2b:35:91:f5:1b:
03:b5:ab:d8:4e:94:a6:e8:e3:d2:1f:85:79:ab:fa:42:54:35:
46:1f:2d:0e:d7:16:7a:c9:35:5f:f1:09:5e:83:95:d3:da:d9:
b9:4f:38:74:d8:ad:47:82:97:05:9a:e3:ed:b0:83:46:bc:2d:
bb:63:1a:fc:2d:24:87:cb:a1:84:e2:16:55:9f:36:45:db:53:
7c:6b:b8:41:f0:92:da:24:17:f9:46:59:15:30:36:2b:d1:d4:
1f:27:5b:10:cf:43:c9:c2:1a:46:f5:da:cf:bb:09:07:1e:07:
9e:09:b5:4e:05:24:a9:5b:e7:82:59:7a:be:02:21:a7:33:92:
d1:e1:2c:4e:57:9d:82:a6:79:38:61:a6:10:ac:fe:11:0d:bd:
9c:ac:d0:f9:c0:1c:52:0d:10:b5:44:3c:63:86:8d:a6:db:72:
42:a1:e9:f3:3b:44:f2:ec:98:0c:6b:c9:62:32:d3:9b:dd:40:
a7:90:e6:5d:a7:54:b4:e5:35:90:b9:be:b6:af:4c:dd:df:f3:
26:07:e3:56:e8:c8:51:51:7f:a1:9f:e5:a7:18:ef:a6:e0:1a:
49:0f:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:34 2025 by rpki-client