Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File: G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier: JVPLh6n5NUnjt24gSkYAtKdvQ+PehTq+QK5mMIFzo8E=
Subject key identifier: A9:9B:EE:C8:8D:B3:9A:D2:02:21:9E:8E:16:2B:B2:9A:3C:A6:19:B2
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer: /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial: 01984A0A39B4E7331B75BC3407B2949B4195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number: 10A1
Signing time: Sun 27 Jul 2025 04:00:40 +0000
Manifest this update: Sun 27 Jul 2025 04:00:40 +0000
Manifest next update: Mon 28 Jul 2025 04:00:40 +0000
Files and hashes: 1: BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (hash: /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=)
2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: CnzTqeiF+YSS7gcR/U5RCffc/cd2xHiXr0PYhn8GXQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:39:b4:e7:33:1b:75:bc:34:07:b2:94:9b:41:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Validity
Not Before: Jul 27 04:00:40 2025 GMT
Not After : Jul 28 04:00:40 2025 GMT
Subject: CN=a99beec88db39ad202219e8e162bb29a3ca619b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:56:02:e5:eb:f7:7d:e2:ef:7b:6e:85:9e:
54:b0:ca:34:2b:de:b5:7e:8f:ee:d0:2a:bc:ef:75:
cb:21:31:59:b9:a1:af:e6:b3:12:e7:84:cb:40:f1:
5f:0d:7b:1d:9a:13:8e:d2:00:30:e2:b9:ae:54:36:
e3:13:7d:06:9c:1c:f2:f9:18:b9:73:ad:df:5e:67:
bc:e0:d2:9d:82:da:9a:de:97:33:76:a7:37:0c:73:
ea:fb:37:d2:12:16:de:47:de:59:5c:8a:64:5a:68:
bd:57:f1:c5:4b:63:ae:f0:23:04:53:b7:f4:4f:a4:
36:ef:89:9d:a5:a0:20:8a:9c:6b:93:fc:a2:f2:87:
d5:1c:46:fd:38:d4:89:75:80:ce:73:cd:14:18:c6:
c3:e9:72:28:44:d4:cd:8e:d0:71:b2:bf:6e:da:82:
ed:18:01:27:f9:66:26:f2:2e:76:3e:a9:3f:c5:ac:
e3:ab:a2:cc:c4:b6:ec:d8:13:39:80:71:d7:9f:1d:
63:c8:21:27:80:fc:f3:08:6b:9a:b9:a9:ac:e7:a8:
34:c4:1c:66:66:c5:78:a3:60:4b:10:f2:e8:1a:7c:
59:f0:7b:56:3c:91:d5:3a:94:9c:f9:e3:de:86:8b:
ca:e5:09:b5:41:84:48:58:32:3c:ce:5e:17:de:f6:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9B:EE:C8:8D:B3:9A:D2:02:21:9E:8E:16:2B:B2:9A:3C:A6:19:B2
X509v3 Authority Key Identifier:
keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:77:8d:85:6b:6b:cb:0c:82:39:ae:f6:55:f3:2c:74:f0:a1:
6a:70:92:90:83:22:11:c1:2e:36:01:69:2f:a3:c9:45:26:84:
62:43:ea:e8:c0:5f:dc:9b:7c:7a:b8:ee:7b:7b:ba:4a:d4:8f:
fd:96:1e:37:ac:98:e5:67:84:9a:19:47:f4:06:9d:64:b2:96:
33:71:3e:d1:ad:dd:fb:83:6c:04:be:fe:e1:2e:a8:ff:3c:25:
d2:90:9c:9b:7c:8a:24:af:a9:ae:16:33:b2:1d:7a:9c:94:13:
0b:56:0c:62:90:fb:37:2c:d7:1b:2e:e8:36:e3:7e:0c:5a:f1:
c3:8e:27:1d:1f:0b:7b:27:95:e3:de:77:e0:1c:43:b3:a3:7e:
19:c0:f5:4b:3e:26:e1:c3:73:2f:7e:35:50:59:b5:f3:ff:b9:
65:68:e9:a7:08:9e:fb:ae:86:18:8e:08:a0:b2:fe:f4:c1:f1:
95:6d:8d:25:f2:45:c2:4f:c6:00:29:49:1b:bc:de:d0:59:d5:
3f:b2:0f:40:28:72:06:dc:52:3e:ab:43:ed:5c:f5:9a:f9:e4:
69:ad:c6:50:32:93:82:57:e9:52:e0:b8:90:c1:cd:42:2f:5b:
48:20:eb:1c:2a:33:a3:90:4f:94:67:22:f9:eb:61:e8:5c:4d:
f0:c7:2a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:05 2025 by rpki-client