Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: bTd8JW4HAk/8kpn9lPMs71dcIeUYQ3k9LpyRpiPpTk4=
Subject key identifier: 21:07:39:7F:A6:BB:80:61:24:6B:7A:CA:5D:46:47:30:85:11:3C:E8
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 0198530E1F34443A6EA1A99F50D7628CCFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 22:01:30 +0000
Manifest this update: Mon 28 Jul 2025 22:01:30 +0000
Manifest next update: Tue 29 Jul 2025 22:01:30 +0000
Files and hashes: 1: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: 85PIIwyxvpjEsU3kn3mL99EaRrUav52/5i1SBI5O9Jo=)
2: a6z9s2B5USpArv-yW1XShxJdtpo.roa (hash: hfVnswmh8KT0yGpguvtRDoEqQ95xhx5KsIsgaJn/9yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:1f:34:44:3a:6e:a1:a9:9f:50:d7:62:8c:cf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Jul 28 22:01:30 2025 GMT
Not After : Jul 29 22:01:30 2025 GMT
Subject: CN=2107397fa6bb8061246b7aca5d46473085113ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:fe:15:11:04:78:c8:9d:75:ba:a8:22:70:
f1:67:47:1d:3c:4a:02:b8:31:46:b2:26:1f:7f:a6:
c3:04:a5:b0:ba:23:8a:52:e9:0f:ce:eb:c4:cc:98:
ed:76:3e:ce:93:54:a6:3b:00:9f:8a:9c:b0:a3:f9:
7e:8c:b1:b5:9d:92:e5:bb:c6:21:c3:a6:89:67:af:
c0:1d:cb:83:e2:e8:08:e9:50:1b:b0:f7:43:65:89:
a6:ce:94:57:27:78:32:03:48:1b:3a:6e:30:10:dc:
06:f6:05:6d:5d:d8:a7:98:9a:ac:f0:d1:ed:c0:84:
df:b2:48:93:98:bc:77:91:2c:91:e6:27:27:38:1e:
ac:27:de:aa:91:6e:9f:4d:9f:3f:2a:de:95:6c:fa:
02:14:8a:0b:7b:36:24:3c:e4:59:8f:43:72:6d:60:
2b:7f:5c:32:b5:10:e6:72:7b:0b:6b:2c:6f:7a:cf:
13:ee:43:b6:43:25:ef:39:ce:01:31:23:b6:36:f2:
27:2d:75:03:08:6e:49:d0:18:6f:10:05:2e:22:4b:
e7:83:77:e7:ff:cb:35:e8:c5:85:13:5d:a4:7d:7a:
1f:9c:3b:97:74:e1:9c:c6:3d:de:ba:e2:0e:b6:40:
52:93:4d:66:c8:c5:cd:e4:b8:75:69:51:25:d0:66:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:39:7F:A6:BB:80:61:24:6B:7A:CA:5D:46:47:30:85:11:3C:E8
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0e:0b:b7:48:1e:6a:dd:e2:37:97:d4:94:37:79:e5:dd:ea:
9a:25:2f:fa:4d:0c:1c:ba:e6:d2:f6:ba:c8:e3:a9:69:fa:7b:
7e:31:7c:74:5e:61:c7:30:34:7a:76:3e:4f:64:87:22:06:90:
e4:81:6e:86:50:92:36:06:5d:f9:e9:b3:bf:bd:32:6a:58:46:
25:2a:3e:c5:66:b9:24:64:75:d1:81:10:cd:07:bb:55:1d:69:
3d:f6:46:51:5a:b3:e0:55:3e:c6:7e:51:9e:d2:92:0f:a2:bc:
85:3e:62:eb:8e:39:8f:20:b4:c5:c3:00:2a:9e:78:59:35:db:
3f:1c:ac:13:19:eb:ec:21:4f:a4:5b:6f:4e:2f:4e:1f:0a:3d:
84:19:46:2b:1e:b9:42:32:e6:8d:d1:d6:3d:f5:07:7b:bb:2f:
86:65:fa:93:4d:73:7b:f0:27:92:e3:4d:0e:ef:2e:48:36:d6:
0f:81:16:e0:37:22:bb:81:41:ec:70:a4:23:db:90:f0:a0:42:
f3:2a:2f:5a:ae:94:d7:3f:a4:69:45:6f:aa:aa:ab:90:b4:49:
88:02:ed:7d:86:35:ae:36:d5:89:88:9f:23:7c:c1:28:c5:6c:
07:53:45:82:d7:4f:42:43:b7:b0:9a:95:f4:63:36:a7:17:9d:
a3:b7:5f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:30:43 2025 by rpki-client