Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
File: G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json)
Hash identifier: hDtv43SPiI9ItJBLpjhn/3wAyPDAuW7148TsNNAReY0=
Subject key identifier: B9:37:56:A7:F6:AC:F1:D0:8A:E9:1F:43:41:57:19:FF:18:49:FA:79
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial: 019922FAF82238A823EAC59BD7025EE2E1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
Manifest number: 0646
Signing time: Sun 07 Sep 2025 07:01:36 +0000
Manifest this update: Sun 07 Sep 2025 07:01:36 +0000
Manifest next update: Mon 08 Sep 2025 07:01:36 +0000
Files and hashes: 1: 66D5GH85kpdoRl5xE-EYGnJIu7s.roa (hash: FRI0FnMjIpTP/o+NpM2rBO+2noxEcPY4kmpjzIRRmcw=)
2: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: EfgRiGRmz+JD9Q+OGaVK/phZ+wLWdaav9V3p3AXh5wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:f8:22:38:a8:23:ea:c5:9b:d7:02:5e:e2:e1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Validity
Not Before: Sep 7 07:01:36 2025 GMT
Not After : Sep 8 07:01:36 2025 GMT
Subject: CN=b93756a7f6acf1d08ae91f43415719ff1849fa79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:9d:f6:8a:66:59:80:7e:dc:aa:b5:fe:97:
9b:01:b5:26:db:c3:1c:14:9f:3e:60:ab:4b:07:8f:
2b:49:a3:ef:fe:ac:9a:4a:5e:a2:9b:5f:5d:d3:b9:
d8:d8:ca:ca:d6:f2:be:f8:ab:f5:42:74:c8:51:fa:
cf:62:f8:67:21:7d:2b:c9:2e:81:20:5e:bd:e9:78:
bc:59:60:c0:2f:15:62:11:d2:13:6a:92:f8:e3:fc:
7d:a2:38:d2:ad:02:f0:89:f4:4b:ca:c1:ec:29:cf:
7c:db:fd:38:35:d3:ac:1f:ff:7f:a5:f7:3a:38:3c:
d7:3c:81:73:83:03:b0:10:fe:dc:b1:f5:f3:2a:15:
dd:3c:17:58:d0:c2:50:2d:8c:d8:53:bf:c9:2f:af:
03:42:af:35:d6:89:9b:54:67:2b:23:f3:2b:0c:a4:
c7:79:4b:4b:95:78:7e:f9:e8:3e:60:0b:4f:6f:e2:
e1:22:c2:db:b1:eb:5d:bf:8c:fa:24:fd:73:e9:26:
de:78:94:50:c5:30:ac:99:b3:14:8e:93:45:79:2d:
7e:fa:24:9c:41:39:46:3a:fe:7a:ab:ec:6e:b7:ea:
59:f8:fd:20:8c:cb:8d:ea:1e:06:7a:85:d6:95:47:
60:dc:a1:d4:89:bf:11:86:17:36:ec:aa:8f:35:e6:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:56:A7:F6:AC:F1:D0:8A:E9:1F:43:41:57:19:FF:18:49:FA:79
X509v3 Authority Key Identifier:
keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d2:73:40:34:3c:5b:e1:62:d7:ff:1a:f5:31:65:9d:9d:fc:
f4:19:85:5e:94:b2:0f:24:4b:38:28:98:2d:f6:31:4d:71:9d:
c8:1b:c9:f7:18:53:c2:76:38:8f:52:d1:59:67:5b:cf:e2:23:
e1:c8:31:9b:0d:f0:72:8d:f1:b1:14:4c:9c:7e:6e:8c:2a:9b:
57:c1:9a:a5:cb:d7:0f:b8:29:8e:ad:1e:41:32:b8:d1:0e:6f:
11:3f:9c:83:46:e7:22:c5:65:97:2b:74:22:22:2c:76:ba:bb:
fc:05:33:2a:f0:ab:ce:5d:83:69:a0:80:81:62:af:64:1e:57:
4a:e4:f5:62:66:4c:fa:d3:f0:84:dd:96:3d:d0:0e:db:d6:54:
9d:22:4f:9a:c0:30:b2:41:62:5a:c4:12:25:ce:26:4c:62:a7:
bc:7d:5f:66:a9:f8:b5:1d:31:87:f5:f6:93:5c:89:3e:47:77:
30:bb:16:97:63:b9:f9:70:ca:21:87:df:88:ee:5b:34:db:ae:
33:92:a5:d0:94:5d:45:79:25:24:70:98:ec:8a:44:7d:3b:60:
43:5a:98:1f:c7:de:58:ac:93:1d:7e:f7:75:44:b1:48:e7:67:
da:31:bc:de:59:95:b4:53:56:58:c7:fa:7a:79:3b:58:57:af:
34:91:77:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:03 2025 by rpki-client