Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
File: G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft (raw, json)
Hash identifier: Fh7LNoKTO0V8BS6MMLNbqNjm7S3PgTRrpYKscX0uRvA=
Subject key identifier: F7:B2:83:78:ED:C8:A8:8D:69:D7:CD:E4:81:22:F8:66:25:41:45:AB
Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
Certificate issuer: /CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Certificate serial: 01984A41C4993E70F83368D8B2E432C0C895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
Manifest number: 0C96
Signing time: Sun 27 Jul 2025 05:01:20 +0000
Manifest this update: Sun 27 Jul 2025 05:01:20 +0000
Manifest next update: Mon 28 Jul 2025 05:01:20 +0000
Files and hashes: 1: G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl (hash: IBJrDZC063a75M/jetA1J7P5ZQEt8KDCW6+7pk+viJE=)
2: j_n9Kg39TCshbmu8W1dk2NVjcFI.roa (hash: 56S9svTLKP+1FymtE0skXNThCYHX7pM3o2tRL4nBuW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:c4:99:3e:70:f8:33:68:d8:b2:e4:32:c0:c8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Validity
Not Before: Jul 27 05:01:20 2025 GMT
Not After : Jul 28 05:01:20 2025 GMT
Subject: CN=f7b28378edc8a88d69d7cde48122f866254145ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:14:05:af:81:3f:64:e1:f7:21:b9:84:ac:
42:0d:f4:00:9e:e3:1d:dd:06:e6:30:84:c8:39:0a:
17:d0:ca:b1:d4:8a:bc:0b:28:0c:b0:cb:14:48:c7:
de:57:b0:c3:51:46:13:aa:1c:66:ab:c0:00:d4:44:
64:0b:a9:6b:b3:1f:73:7c:44:75:23:28:7c:22:fe:
cd:ed:db:a4:36:f9:d5:43:ff:a4:fa:6c:db:13:c6:
d4:10:24:0c:1e:91:8b:fe:2f:ff:87:68:26:95:1e:
c9:54:ff:66:fe:07:cd:1c:06:b2:a5:81:5b:4f:4c:
a9:7a:a0:61:6f:ab:17:ee:e1:f2:51:ee:f8:23:7d:
fe:f0:ea:ef:53:23:0e:c5:87:d2:9c:f7:83:7d:20:
3c:ed:19:da:8a:8f:50:b3:3c:6b:91:41:4e:dd:c6:
32:4f:c4:bb:a9:05:8d:51:0f:bb:0d:f7:db:b5:23:
67:bc:8e:2a:e6:b4:a3:60:eb:f8:8e:50:50:33:a7:
75:34:55:62:72:b3:bd:cc:2d:7e:0e:61:c3:c8:76:
56:ac:df:c3:82:40:08:f5:40:8d:8f:30:d9:e7:26:
c7:6a:26:14:40:6d:c9:4d:62:66:71:ba:04:0e:30:
bb:a5:9e:be:78:e4:3f:8b:dd:cd:77:80:bb:1a:ce:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B2:83:78:ED:C8:A8:8D:69:D7:CD:E4:81:22:F8:66:25:41:45:AB
X509v3 Authority Key Identifier:
keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f9:4f:6a:fe:82:af:e0:0e:e8:80:7a:43:5e:97:76:69:86:
d5:e0:22:95:03:63:3d:3c:1e:34:01:57:bb:59:0a:da:37:ab:
4e:51:dc:30:f8:d2:4e:ab:56:ae:3f:46:08:c0:38:91:f8:b4:
2c:81:7a:0d:52:83:37:75:bd:34:6a:c4:79:20:45:be:3a:9d:
3f:5c:72:c9:35:2c:8a:a9:9e:50:0a:dd:45:a8:6f:10:be:94:
31:9a:46:ce:a0:e2:28:71:75:6d:e5:36:a3:d3:9d:94:b0:45:
b8:d6:ca:d1:61:de:b5:7d:9e:75:dd:5c:6f:bb:6a:35:5b:63:
b1:41:b9:76:b8:6a:c8:00:6c:0c:2d:72:df:86:f1:00:8c:6b:
c7:92:2f:4d:ba:24:a6:eb:34:06:74:88:8e:1c:c1:53:86:fd:
3e:09:45:ac:15:34:7e:d6:95:4e:89:91:6f:c4:ad:39:9e:5f:
94:6f:99:4a:75:10:e0:1d:ce:93:b9:4b:e9:6a:57:f4:0b:74:
1b:a8:2b:42:9f:9e:af:da:b9:09:0a:52:33:00:40:3b:03:a9:
47:6f:47:7c:2d:b2:da:d1:f0:f0:b4:e1:f2:cf:bc:c4:a1:6c:
57:f8:08:0a:69:e9:e4:19:a9:64:74:05:a7:f7:78:e6:7f:1f:
85:d9:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:47:29 2025 by rpki-client