Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
File: G82c0xYDmcHjyAzwdIZ6cp991Pk.mft (raw, json)
Hash identifier: acu8t/ef8Ff2UQLHMl7mTwiDtKaGQHE33KEOkGrs6nI=
Subject key identifier: F6:90:69:97:B0:CD:7A:2F:A2:30:4D:62:E0:51:B2:9E:F3:F9:C7:6A
Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Certificate serial: 01984C2FCB4B777F53F13E4B9C6A5A5A2649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 14:00:57 +0000
Manifest this update: Sun 27 Jul 2025 14:00:57 +0000
Manifest next update: Mon 28 Jul 2025 14:00:57 +0000
Files and hashes: 1: 65jp3a6f2gh4Tkpte2rBeESresA.roa (hash: 07jq7hxGRgJkHsgPxiO4p+naJnzzp9QCQTCf5Ueq5Sc=)
2: G82c0xYDmcHjyAzwdIZ6cp991Pk.crl (hash: r/ncdxZo3N3kmLXkiRedPeAcE/UweWM0/SdxxG+9JpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:cb:4b:77:7f:53:f1:3e:4b:9c:6a:5a:5a:26:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Validity
Not Before: Jul 27 14:00:57 2025 GMT
Not After : Jul 28 14:00:57 2025 GMT
Subject: CN=f6906997b0cd7a2fa2304d62e051b29ef3f9c76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:ac:da:e3:e9:59:3d:49:d2:41:a4:93:70:
c7:59:da:e3:e0:b3:89:07:01:0a:83:6a:03:21:31:
00:29:dc:2c:c9:33:84:8c:d5:7b:10:99:d0:3a:cc:
67:92:c3:f6:ea:44:ec:2f:f1:54:78:3c:9b:01:00:
b7:40:f8:07:00:a4:2c:c2:27:b9:da:b3:3d:46:92:
59:61:ec:19:86:00:fa:73:21:13:28:c3:ab:d8:ef:
58:e1:5e:e0:8d:37:98:56:5b:94:f5:2b:19:45:72:
d7:7f:d8:e2:8a:fd:4c:f9:eb:ba:03:66:aa:ed:ce:
12:8c:fa:0b:8a:1d:2d:72:ac:70:e5:46:fb:c2:46:
a2:30:b6:c3:bb:fd:0c:9c:e6:ed:fb:4f:7a:af:d7:
3a:67:c3:be:74:ee:79:e9:7c:27:17:e7:72:79:7c:
50:f7:c1:a4:21:d8:a4:89:71:97:4e:32:1a:88:3f:
11:dd:f7:08:c9:8d:86:53:3c:1a:8f:e6:fc:87:b5:
d6:16:cd:89:0a:47:53:70:b8:24:f2:1c:40:c4:2a:
34:86:8e:d0:90:3d:7d:50:f9:65:80:04:88:47:f5:
82:98:60:b5:2b:8c:3a:4f:c8:61:af:0d:6f:de:e8:
9e:dd:51:7a:91:f2:0a:6c:21:c4:9a:fe:bc:88:02:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:90:69:97:B0:CD:7A:2F:A2:30:4D:62:E0:51:B2:9E:F3:F9:C7:6A
X509v3 Authority Key Identifier:
keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:45:0d:04:43:d6:19:b1:80:45:96:82:b3:be:83:15:4e:b2:
15:2d:68:25:3b:78:d5:ee:29:a7:54:10:df:8d:71:db:ea:cd:
b7:7d:51:87:95:c2:c9:0e:a3:7e:2d:52:cc:66:60:14:8f:fb:
12:c5:22:66:6b:40:f4:72:36:64:f6:fb:80:03:42:e8:c6:fd:
25:c7:e0:86:45:db:b4:08:77:4f:40:2a:3b:fa:b6:bc:7f:59:
36:8d:af:32:71:27:db:dc:bc:fc:35:a5:be:d8:b1:d7:53:2b:
e1:b6:17:81:69:e0:fb:97:b8:3a:88:5e:ca:e2:75:ab:40:40:
3e:91:39:18:6b:5e:c3:11:0b:25:46:78:1f:01:f4:5a:ca:d5:
4d:c9:b8:e9:18:82:e0:c7:7c:3d:a2:f2:e3:af:ce:d9:b5:83:
2f:86:3d:01:26:2c:a1:c1:f0:e6:c8:50:c6:da:3e:d0:22:91:
4a:45:b9:ab:3c:d9:8c:c8:2f:ef:74:47:17:e4:7c:7a:36:54:
92:7a:6b:0b:a6:de:89:5b:a7:59:fd:86:2e:9a:bc:a6:87:39:
e0:94:f2:6f:17:38:e4:21:83:5d:6e:7f:2a:52:13:da:a8:19:
d9:57:61:fe:29:fc:f4:0c:57:11:0b:e8:3d:1f:e6:20:cd:b9:
c4:74:d3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:24:17 2025 by rpki-client