Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: KhyhzlnETaDTFJQtNePVaIQV6F+Pf64bDTaETVp02nA=
Subject key identifier: 3D:4D:53:65:B1:54:50:88:47:CC:39:A1:19:DC:94:63:28:C2:17:BA
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 019748FAA2EFE50EB25B399E6A4F213CC3BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 1200
Signing time: Sat 07 Jun 2025 06:01:14 +0000
Manifest this update: Sat 07 Jun 2025 06:01:14 +0000
Manifest next update: Sun 08 Jun 2025 06:01:14 +0000
Files and hashes: 1: FpKpXAvwQ5eTmnpDjAybF20U0r8.roa (hash: rDfC3vqrlhOzRgHniKHIntRfI5mc/vDS+DS8eZGWJuQ=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: uVKC1G2zQ94u+WQGdTqlD2aytCEH/cB+LUjHyzoOzYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:a2:ef:e5:0e:b2:5b:39:9e:6a:4f:21:3c:c3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Jun 7 06:01:14 2025 GMT
Not After : Jun 8 06:01:14 2025 GMT
Subject: CN=3d4d5365b154508847cc39a119dc946328c217ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:ee:ad:36:5c:0f:cb:64:59:e5:84:13:18:
09:6b:a5:34:9c:f6:c8:5d:3b:f9:95:03:14:a2:6f:
b3:6e:0a:ff:40:63:05:cd:a5:74:89:6b:bf:e5:c9:
c8:3d:ec:48:4c:4f:9b:56:cc:7e:ff:51:ee:25:77:
b4:cf:95:60:35:71:04:cf:db:56:c7:62:39:12:d8:
31:86:cf:17:a5:ca:38:ca:0c:86:6c:c4:53:de:63:
e2:73:bf:86:ef:fd:26:2e:ed:70:13:34:31:6c:d3:
dd:44:b2:ba:f1:50:57:08:29:19:16:bc:b1:29:24:
f3:a0:ca:ff:bc:73:d4:59:dd:c8:6d:30:ee:61:4c:
fb:80:2c:e2:f2:1d:fa:cb:5d:9a:cb:22:8d:bd:da:
20:f9:ad:5b:7c:a7:59:87:bc:12:bf:82:aa:a4:a1:
4e:4a:62:79:f7:4e:e6:61:a6:18:db:83:0f:6a:fa:
b7:29:b3:f0:0f:1d:28:de:f8:b9:3c:3f:d0:94:29:
ba:91:9d:a2:a7:a7:c4:16:33:38:12:fe:bf:eb:13:
81:eb:b3:e5:9a:b8:d7:a8:77:95:b1:15:99:1d:13:
d5:03:61:9f:76:a6:30:5a:74:b9:66:89:53:87:4c:
0e:47:39:c3:d7:3f:9a:c0:1b:09:df:35:b3:1b:1a:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4D:53:65:B1:54:50:88:47:CC:39:A1:19:DC:94:63:28:C2:17:BA
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cf:9b:22:0e:8c:78:87:5a:b9:c2:df:5c:00:fd:b4:fe:2f:
1c:c7:52:97:ab:de:ee:7e:01:c5:8a:ab:f1:56:49:26:b0:99:
bb:ec:1f:62:d9:4f:78:e4:38:fc:b5:ae:61:9b:ae:b3:c0:29:
a6:25:0d:5e:15:49:cd:56:b3:6b:15:52:13:5d:5e:36:92:bf:
44:74:99:48:9a:6c:3a:c4:c2:79:77:5d:76:7e:c4:44:86:22:
81:d3:45:7a:df:65:69:7b:f0:91:5b:00:a6:b5:7d:78:79:c7:
48:f9:3e:ce:c1:71:71:41:7a:8e:3a:40:6c:74:8f:da:44:9c:
09:5a:15:3e:af:93:f3:76:f7:56:01:ab:bf:74:10:47:ad:2d:
bd:da:4f:c0:c1:e2:7c:4b:4c:0b:1b:dc:8e:d6:68:47:42:d9:
06:e6:f4:2b:e2:46:4a:fd:49:1c:5d:9d:e9:14:fe:5b:4a:63:
06:6f:dc:00:5e:ba:ff:ea:27:83:61:7c:81:5d:fa:34:e7:87:
aa:52:2f:80:17:1f:91:32:21:2e:39:58:ab:0f:bd:1a:86:1c:
bc:88:15:a1:2b:2f:ea:82:33:2d:a7:e7:12:dc:26:82:92:5f:
4a:98:d7:5b:77:d8:ec:95:52:77:38:8e:d7:9f:89:19:e3:6f:
0a:16:21:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:28:30 2025 by rpki-client