Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: PKum/AxDkaSFfcaicDyqrN+qdMBh7SB4ohmyr93nc0Q=
Subject key identifier: 86:91:F3:6D:96:4D:CE:69:F1:91:69:F2:BA:48:33:39:32:AA:6C:C7
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 019754FE117D5706564861AAE83EFA1CA841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 12C8
Signing time: Mon 09 Jun 2025 14:00:26 +0000
Manifest this update: Mon 09 Jun 2025 14:00:26 +0000
Manifest next update: Tue 10 Jun 2025 14:00:26 +0000
Files and hashes: 1: 7LJ9xawxzsvCYv_ns8BJ_8ldo2M.roa (hash: f0+qr316tmp0FcJIZdHHGP/bQ0+RaN5V5m4qk2p7tRk=)
2: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: qk549cG7laXu1+Q4xk9SRYYL6mE3f0SkVxKS3UR7c3k=)
3: PnNWpVBdWoAd7atmJEGFvS64Mws.roa (hash: tnccYlmQkpOSmjFbn8qMQEzLxuwoQXHA9SM9r5ZMjAk=)
4: VUW_CECBbTHdD7KnSWpCp7f6Uls.roa (hash: dGtVeAhKlKvD4goyS7nYKPSCr10+/VHRE76M3fcZW0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:11:7d:57:06:56:48:61:aa:e8:3e:fa:1c:a8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Jun 9 14:00:26 2025 GMT
Not After : Jun 10 14:00:26 2025 GMT
Subject: CN=8691f36d964dce69f19169f2ba48333932aa6cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:2a:a3:72:b7:47:fe:1a:7b:91:8e:f0:e8:
79:d9:e2:80:01:c2:62:3c:1f:02:ed:b1:9f:6c:63:
dc:1b:10:88:0d:2b:7f:c3:b8:e3:91:e9:f1:b2:ce:
d0:87:c2:94:c6:e1:ee:3b:ea:2e:14:48:87:e2:e2:
07:c7:c4:34:0f:60:41:44:73:d7:f4:fa:57:3d:e9:
b8:9c:db:e3:3f:aa:f0:35:22:1a:cd:01:18:25:14:
e5:ef:70:97:2f:d7:aa:04:1f:39:53:11:ee:4b:67:
52:3b:c1:b7:89:12:c4:48:6e:03:a2:c3:a5:de:17:
73:d2:f5:28:0d:96:1a:35:9d:5d:c0:ac:a0:68:80:
a0:20:af:ac:99:71:48:ec:17:f5:c9:9d:f4:70:69:
f2:94:3c:cb:cc:25:d7:43:10:bf:7a:51:25:2e:ed:
be:db:48:af:59:52:f1:82:ef:77:26:32:21:a2:1d:
f2:8f:13:82:34:eb:9b:24:b6:1b:70:fc:48:3b:60:
75:8c:12:1e:aa:26:69:b8:27:69:c5:bf:b6:4d:3e:
05:48:97:4c:68:60:87:b2:6d:fa:7f:86:8a:97:b0:
f0:b1:32:8e:ff:f8:4e:de:0c:8e:1d:aa:42:7b:b9:
f9:c8:74:6a:d1:9a:89:37:67:cd:08:7c:9f:4f:c5:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:91:F3:6D:96:4D:CE:69:F1:91:69:F2:BA:48:33:39:32:AA:6C:C7
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:ac:97:e1:e7:30:6f:3e:1d:72:84:1a:88:21:7e:ba:b4:b6:
ce:59:b0:04:41:db:9e:b6:4d:42:28:66:b0:f4:60:d4:75:83:
d8:b7:66:cc:04:c8:3d:e1:f7:f4:d5:ac:12:3a:16:20:65:1c:
51:5c:80:fd:85:aa:e5:98:7e:2d:5a:a4:7d:be:ee:63:ce:c9:
24:c8:21:b4:d3:ee:b9:14:42:85:31:67:3b:d5:f9:fe:6e:fd:
49:d9:db:ca:48:b6:67:0a:f0:d3:52:ac:d7:f1:dc:d7:44:b5:
37:8d:01:50:05:d7:f6:e6:d3:db:7e:f2:18:82:c1:38:47:88:
03:e1:f2:93:e0:17:82:aa:78:bb:f2:ab:d9:11:05:8d:23:82:
3c:9f:3b:02:7b:4a:b2:fa:d9:e5:df:77:3d:a1:fe:3f:a1:e9:
18:7a:d8:31:e5:0a:3a:4a:ef:14:37:6f:c9:8a:c3:12:34:be:
75:7f:00:2c:0b:bd:61:53:d9:1a:7f:ff:30:46:2f:96:c1:4f:
53:ab:b0:e2:0a:c9:14:8b:bd:2c:25:eb:c9:d2:4a:34:d4:60:
90:f3:06:06:03:16:98:ef:6e:50:07:45:90:6e:64:f8:cf:9d:
de:30:33:c7:03:0d:a7:04:9b:f8:94:c5:cd:2a:e2:1b:af:19:
f2:5d:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:54:41 2025 by rpki-client