Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
File: G8qoP8mkEL2z4P0thIcgE0dxvs8.mft (raw, json)
Hash identifier: 0DGuqXSb0yqnrvB9gpQgKAHZd+rsAMhPWGFFNRlwZ28=
Subject key identifier: E0:4A:65:E6:0C:D4:AF:CE:FC:11:52:BE:1D:F7:8D:F8:CC:A7:61:58
Authority key identifier: 1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
Certificate issuer: /CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Certificate serial: 01984A4123C2F1FA979DF5E44D77F6C04F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
Manifest number: 158F
Signing time: Sun 27 Jul 2025 05:00:39 +0000
Manifest this update: Sun 27 Jul 2025 05:00:39 +0000
Manifest next update: Mon 28 Jul 2025 05:00:39 +0000
Files and hashes: 1: G8qoP8mkEL2z4P0thIcgE0dxvs8.crl (hash: RihPWTCZhv/w7mS7w9cVtOAeYXi73AZT2RqUGyUKeB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:23:c2:f1:fa:97:9d:f5:e4:4d:77:f6:c0:4f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Validity
Not Before: Jul 27 05:00:39 2025 GMT
Not After : Jul 28 05:00:39 2025 GMT
Subject: CN=e04a65e60cd4afcefc1152be1df78df8cca76158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:c2:2b:d2:92:8f:f6:a8:7a:48:4d:59:83:
a0:66:eb:00:f6:69:53:96:7c:53:3f:8f:18:bd:71:
8f:eb:fc:03:d6:62:2e:9f:5d:cb:69:84:75:cf:cf:
de:86:53:26:bd:12:4d:c0:61:44:4f:9d:10:5c:1d:
10:a8:7a:f7:33:44:45:02:fe:a5:4d:01:ec:c7:08:
49:08:d1:7a:09:b0:00:a4:ad:04:26:92:4a:f7:37:
3a:12:68:8a:cf:30:54:86:db:4f:23:ae:c5:5b:4c:
6e:ff:52:3b:86:c6:2b:bc:54:44:a1:69:73:5a:c4:
23:76:bb:29:8a:ba:ae:12:5f:48:91:8d:4f:de:13:
48:33:47:67:98:64:2f:70:b8:b7:14:e8:dc:4e:5a:
5f:ce:ac:5f:71:6c:d7:8a:f8:66:03:78:67:bf:35:
89:a8:40:3b:b3:9a:d7:ed:25:1f:9b:d6:5e:9e:93:
ab:44:14:a2:f9:d5:c1:fd:6e:99:c2:31:0c:e7:c7:
d6:50:7a:8c:22:aa:90:28:c4:88:59:5a:7f:d0:01:
d0:7c:ab:7e:e0:29:74:11:02:ba:a6:c0:5e:70:aa:
30:83:fd:6e:e4:af:15:6d:52:3b:3f:ee:05:ce:3a:
23:b7:be:92:5d:54:95:2d:c5:07:41:e9:d2:e7:8c:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4A:65:E6:0C:D4:AF:CE:FC:11:52:BE:1D:F7:8D:F8:CC:A7:61:58
X509v3 Authority Key Identifier:
keyid:1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b7:77:dd:7a:66:2d:fb:d4:d1:e6:8e:a1:8d:af:07:10:87:
1d:2a:77:5f:c5:68:59:c0:46:1b:fc:93:cf:e4:8d:f8:32:46:
93:45:84:0b:e4:d8:13:6f:31:c3:3c:8d:53:9d:af:12:19:3a:
a8:50:6b:05:0f:ae:0c:4d:d2:42:be:a2:3e:ca:83:0a:54:0b:
e9:33:c3:98:5d:cc:f5:85:65:77:af:c8:f8:de:79:84:80:7a:
fa:9a:bb:68:f5:66:b1:f3:24:39:10:d4:e9:41:33:86:aa:5f:
55:81:00:7d:6d:17:c5:57:da:1a:3b:7d:71:4f:c7:bc:7d:9d:
77:e7:42:7f:39:22:8b:db:ce:e7:7c:cc:9c:4d:92:79:98:5f:
8c:62:33:c0:79:56:3d:3a:3a:d1:74:f0:8f:1c:f7:6f:f1:ad:
be:f8:dd:83:71:55:5f:93:ff:c6:08:cd:5c:cc:71:4c:73:cb:
9c:8a:ff:9e:b8:e7:6e:bb:38:0d:0a:54:49:a2:6e:ae:d7:03:
21:b2:5b:ab:78:8d:3c:39:e5:11:f1:cd:d0:ea:d2:dc:96:e0:
1b:2f:a9:1e:01:b2:c7:0b:23:de:b0:c7:17:cd:e1:76:ff:b0:
ce:34:33:ce:73:69:34:5c:f0:27:64:e3:65:e1:df:93:49:0f:
7c:f7:62:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:48:10 2025 by rpki-client