Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: 7nWDjapsyotlh4PqqD/YvELmDAT4G6knFUkZtSBr86I=
Subject key identifier: F2:55:F7:42:1D:E0:67:25:5B:E1:F3:A8:CB:86:87:27:85:69:9A:1D
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 0197684E343DC20689CB864A3A451F209546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 12D2
Signing time: Fri 13 Jun 2025 08:00:44 +0000
Manifest this update: Fri 13 Jun 2025 08:00:44 +0000
Manifest next update: Sat 14 Jun 2025 08:00:44 +0000
Files and hashes: 1: 7LJ9xawxzsvCYv_ns8BJ_8ldo2M.roa (hash: f0+qr316tmp0FcJIZdHHGP/bQ0+RaN5V5m4qk2p7tRk=)
2: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: lXiyRS/jubx4TG9xuxFivTSXrYcJdG+6hBxBMH3ZNEQ=)
3: PnNWpVBdWoAd7atmJEGFvS64Mws.roa (hash: tnccYlmQkpOSmjFbn8qMQEzLxuwoQXHA9SM9r5ZMjAk=)
4: VUW_CECBbTHdD7KnSWpCp7f6Uls.roa (hash: dGtVeAhKlKvD4goyS7nYKPSCr10+/VHRE76M3fcZW0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:34:3d:c2:06:89:cb:86:4a:3a:45:1f:20:95:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Jun 13 08:00:44 2025 GMT
Not After : Jun 14 08:00:44 2025 GMT
Subject: CN=f255f7421de067255be1f3a8cb86872785699a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:d8:a9:ca:7c:19:95:4c:fe:27:1d:44:65:
42:53:30:da:73:e3:0a:e8:d5:74:b2:3b:6c:70:3c:
00:6e:b8:ce:2e:b7:c2:c6:c5:06:8b:66:03:57:3a:
58:48:23:2a:aa:d7:f6:a7:9e:1d:3e:21:ba:83:91:
1b:78:9b:c1:4d:3b:e8:b2:55:9e:60:89:07:0e:71:
a4:2e:c5:a5:cd:1d:7c:db:93:11:cf:6a:14:59:aa:
d7:e7:7a:8d:78:12:5a:76:7c:a3:a3:66:16:92:77:
89:4a:cf:63:a1:04:a3:c0:84:ad:74:9f:4b:b8:00:
7d:0e:10:be:0a:91:7c:de:ec:4a:b5:f0:d5:92:0c:
62:b0:bb:d5:11:f0:b8:73:e1:57:1d:be:4b:d0:85:
91:74:9d:60:eb:40:d7:5c:02:fa:58:42:12:29:c9:
17:6b:a1:a2:dd:89:ac:f6:71:2d:4f:50:ec:98:2e:
d7:57:35:08:7f:65:cd:50:30:22:6a:b7:7d:15:b5:
fe:94:74:38:54:cc:a1:cc:92:6a:66:39:a9:5a:47:
c9:6b:91:42:c7:62:20:61:f9:ed:9c:d3:c9:86:5e:
8d:c0:cf:04:9a:45:b6:cc:b5:5a:71:37:0a:46:c5:
e9:4e:2a:f7:b5:05:30:70:bb:10:39:ff:61:df:53:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:55:F7:42:1D:E0:67:25:5B:E1:F3:A8:CB:86:87:27:85:69:9A:1D
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d9:89:6d:74:3a:3c:df:89:ec:1f:02:f5:e5:d9:ce:a9:84:
b0:03:08:aa:0f:35:a3:20:9b:a0:9f:1d:ee:61:48:d8:95:c9:
66:62:5a:7e:97:49:fb:ab:c3:28:1d:e9:6b:9a:1b:61:60:d5:
60:b7:e1:2b:ac:1c:ae:6d:3d:ba:a5:54:de:3c:bb:e6:47:4a:
20:db:cc:dc:da:25:be:87:81:d7:c3:a1:52:30:70:22:af:82:
74:bc:18:5e:1f:74:d8:45:f7:4f:85:32:65:4d:66:42:cd:36:
03:63:21:96:9f:fa:60:c2:8a:3b:63:a2:3f:27:72:9a:0b:cf:
99:a7:ea:48:8f:3c:98:0d:bf:87:ef:cc:f3:fd:aa:1e:83:5f:
1f:9d:29:56:ec:1d:f5:71:ea:da:65:40:e6:24:63:a0:7f:52:
b9:12:6f:38:46:ab:e5:50:9b:05:06:0b:ab:4f:b7:bf:13:1f:
05:dd:cd:fb:25:c8:22:44:ca:31:ce:3b:d2:ba:95:a2:31:ac:
6a:ec:92:4c:f6:b3:5d:62:a9:f0:fe:fb:55:bb:fe:be:14:7d:
cb:97:1c:51:32:f6:8f:3d:d9:a7:e0:cd:aa:de:67:51:a6:8c:
ef:01:f6:09:49:9f:3c:56:67:55:7e:4d:c9:82:48:26:4a:5f:
f4:f6:7f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:20:20 2025 by rpki-client