Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: bzd2AM6QMAEP/brzzReHdyOIpaoyghXz5e9oA0hzbGo=
Subject key identifier: BC:63:1E:3B:06:E3:84:62:A3:91:89:0E:B4:06:11:44:65:D3:A8:AC
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 01982A80AAFE36B2DB027F62FA95816F3632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0AFC
Signing time: Mon 21 Jul 2025 01:02:12 +0000
Manifest this update: Mon 21 Jul 2025 01:02:12 +0000
Manifest next update: Tue 22 Jul 2025 01:02:12 +0000
Files and hashes: 1: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: P4x6Eu1p4TKfdHKC3JtgOUmWj0zXMQtFS0IeR73C2I4=)
2: TRfMCYgQom2qb1ltkPZ8pDFMPbw.roa (hash: B/bZzAE30Cbi1NKH6O3ZfRrv6UmAF6KTnp6VWp5movg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 01:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:80:aa:fe:36:b2:db:02:7f:62:fa:95:81:6f:36:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Jul 21 01:02:12 2025 GMT
Not After : Jul 22 01:02:12 2025 GMT
Subject: CN=bc631e3b06e38462a391890eb406114465d3a8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a2:ef:36:d1:23:41:78:2d:c9:d6:a5:03:c8:
2b:12:5a:d8:7a:e4:d7:3e:5e:82:b4:72:73:01:83:
81:b7:af:49:10:5b:88:cb:ca:88:b8:ad:a1:17:2b:
44:ab:c2:33:2f:64:6b:9e:2d:3a:c8:3f:0f:50:3a:
8b:dd:55:ff:45:94:4c:2b:11:9e:49:81:37:32:fa:
87:df:ef:98:b6:29:26:d0:e5:8c:71:a9:ad:60:98:
e0:16:0b:bd:97:dd:28:f1:83:d8:64:32:9a:42:67:
1e:88:62:8a:53:ab:c2:6b:8f:ad:c2:51:2f:2c:d7:
24:28:dc:55:34:2d:9c:f7:ea:c9:a5:94:85:59:e5:
97:f9:72:64:a2:3b:d6:5f:d8:bd:8d:d4:d5:08:48:
9c:c5:4f:16:41:a2:d9:44:ea:b3:85:64:df:bd:09:
86:94:e7:34:6b:08:6c:c8:32:38:01:90:37:1b:e4:
bf:65:1d:34:e9:e0:65:96:25:c4:46:42:cf:b3:9e:
52:64:03:71:7d:bb:59:48:53:b9:fb:78:b0:98:77:
56:5a:97:59:d4:13:5c:7d:c3:67:a4:0a:a4:8c:68:
63:85:64:c7:82:da:6b:e0:7b:3b:eb:82:fb:35:74:
4b:b1:e8:a2:d9:2a:d1:61:fe:a8:8b:eb:5e:e3:1e:
05:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:63:1E:3B:06:E3:84:62:A3:91:89:0E:B4:06:11:44:65:D3:A8:AC
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6f:9a:43:e0:0c:81:79:b8:3d:ef:19:25:52:87:21:a1:3d:
ee:94:ab:bd:be:81:fc:5b:a8:75:93:6d:d8:d3:dc:c3:45:30:
f6:97:ce:23:6d:ad:09:b3:05:2b:12:74:df:37:25:6e:f7:f3:
03:3f:5a:5e:e7:31:a4:ef:2d:69:b9:0c:42:c0:a9:f0:77:f9:
3c:63:45:05:d4:de:ed:fd:18:74:06:26:55:98:6c:59:de:55:
18:33:d0:9a:88:bb:5f:b9:eb:1f:e3:a5:4e:b9:7d:bc:42:21:
0d:25:5e:fc:c7:73:65:a9:21:d0:aa:12:a7:68:56:d3:34:2c:
5b:20:4c:49:da:4a:da:2e:b8:db:f1:5a:4d:1f:f8:62:bd:da:
e2:96:4d:7b:3a:0c:5b:5c:33:6d:73:22:e9:03:2d:4d:e2:9b:
8b:2d:39:39:58:82:5a:66:f6:3f:48:c8:a5:95:78:3d:a4:41:
bf:c0:16:32:4d:5a:ac:4b:7e:3b:11:d9:d5:af:ea:00:81:7c:
94:55:1b:65:21:ed:80:32:b6:8a:e7:af:26:13:b7:f7:0c:a6:
24:43:1e:bd:14:51:25:80:25:63:84:97:24:a4:8d:52:d6:30:
d3:87:78:9e:a1:b2:72:ae:ff:d1:7f:76:8b:93:c4:ad:dd:a7:
1c:e6:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 09:07:29 2025 by rpki-client