Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: PmtrHLEUEguFO5scuKDk5VqS5E/JIaNYnn5MGa/zjyo=
Subject key identifier: BF:23:32:F5:9A:CD:CC:D4:B3:80:35:48:76:BF:33:A3:9F:83:EC:12
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 019845889368DC2E0BBEBF7C761B5FDCF185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 0D83
Signing time: Sat 26 Jul 2025 07:00:35 +0000
Manifest this update: Sat 26 Jul 2025 07:00:35 +0000
Manifest next update: Sun 27 Jul 2025 07:00:35 +0000
Files and hashes: 1: 1-6tgApGzi84jUfnnO4hR3VcZnhw.roa (hash: HVjUDSjbZacQo7V9+9zKGEkK9aQQLCss0l6qBdFGXKw=)
2: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: ymeyuGJFvz3q6L7Ceal3YGvHvMNtWEDFwdPCKjP7uBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:93:68:dc:2e:0b:be:bf:7c:76:1b:5f:dc:f1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Jul 26 07:00:35 2025 GMT
Not After : Jul 27 07:00:35 2025 GMT
Subject: CN=bf2332f59acdccd4b380354876bf33a39f83ec12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:56:4a:87:87:97:a3:15:5b:b9:4e:1a:07:
38:e0:f9:5a:30:bb:0b:82:a5:08:3b:c1:4a:3e:1e:
39:a4:01:ff:9b:6d:31:d4:7b:9e:7a:e2:39:3b:a6:
e7:e3:13:4d:e0:6d:85:29:e8:1f:89:c4:e3:32:12:
ce:65:0b:99:7d:5a:2a:b5:7b:b6:b6:b2:a5:f3:ba:
e7:88:5d:18:00:ef:b4:aa:60:87:c3:19:55:e5:b9:
db:a2:e0:82:7d:d3:15:0f:10:23:a2:d5:8e:5e:bd:
d8:63:4a:3e:b7:50:f2:b4:42:5c:da:9e:37:dd:bf:
11:2b:96:9a:62:39:3d:28:38:0e:5d:5f:ee:33:fe:
b7:90:f5:40:a9:8f:c7:a6:3b:bf:18:95:97:e1:af:
b1:e5:c7:71:60:14:66:bb:0e:51:5d:af:1b:6d:6e:
d5:43:c3:1f:09:fc:71:e5:f3:3f:15:6c:18:d8:e7:
04:d0:58:c4:cc:42:f4:40:2b:55:3e:72:3e:24:77:
82:69:0c:96:a7:f6:e0:d4:2f:44:8d:ca:47:02:0a:
34:1d:d7:f8:e5:c1:a7:3e:7f:5e:8a:29:17:4f:42:
30:0e:49:17:03:ff:df:f5:f5:36:99:aa:45:d0:d6:
68:8e:3e:bb:3b:44:37:b4:64:11:84:44:0d:c7:cd:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:23:32:F5:9A:CD:CC:D4:B3:80:35:48:76:BF:33:A3:9F:83:EC:12
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f5:97:af:c1:60:2a:ba:03:9a:c1:e5:6c:c8:3c:3e:de:55:
77:2f:7a:8c:bd:95:cf:2e:25:e3:a4:fc:9b:77:bb:ca:52:a1:
10:ed:dd:6c:f4:45:b1:5b:aa:1d:a6:3b:47:64:8a:bb:e6:03:
cb:e1:c0:3a:9d:a5:6d:00:fa:3a:a0:7c:41:1a:18:2e:d9:f1:
21:5c:76:e5:d7:c1:37:a9:95:90:4f:3d:d1:44:ce:7f:bb:94:
1b:b3:bf:5e:5c:e1:6d:8a:ba:e8:32:7a:47:42:c4:20:6e:36:
6a:af:fe:8e:52:0a:61:75:44:76:a6:95:50:50:33:77:fd:59:
25:aa:e8:a6:88:8b:46:04:02:90:5c:3b:e0:43:32:55:f7:b0:
ca:78:d6:b1:bb:b2:2f:53:4d:b8:60:d5:57:82:cb:0b:79:f3:
bf:77:26:1e:e7:4a:da:fd:bc:62:f3:47:20:0b:7c:43:55:80:
56:82:09:5f:e8:f6:16:b3:0b:8e:b2:59:30:fb:aa:0e:ed:15:
a6:27:69:dd:ff:83:fb:ba:41:20:e0:f1:1c:39:85:ad:e1:cd:
73:13:94:1c:f3:95:8a:b6:e4:0c:82:54:3f:97:f4:de:4b:bf:
51:93:35:70:a1:50:b6:13:bd:b5:12:f0:c9:17:63:7b:35:0d:
74:72:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:57:47 2025 by rpki-client