Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: 5HVLkHUtkZp3XUtxJohwlTTUNbIv4MK7DOgv8AMtc6s=
Subject key identifier: FA:6F:BF:1B:3A:C1:43:F7:79:C2:D6:9D:C5:5E:F8:D6:85:9B:E0:1F
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 0199240D24791E7E65CF2394E7625A338D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 12F6
Signing time: Sun 07 Sep 2025 12:01:04 +0000
Manifest this update: Sun 07 Sep 2025 12:01:04 +0000
Manifest next update: Mon 08 Sep 2025 12:01:04 +0000
Files and hashes: 1: FpKpXAvwQ5eTmnpDjAybF20U0r8.roa (hash: rDfC3vqrlhOzRgHniKHIntRfI5mc/vDS+DS8eZGWJuQ=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: /Sst7cmIlNMhEDzbmuG5Dwmf3F6FSpE4Qr5dNvN5NJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:24:79:1e:7e:65:cf:23:94:e7:62:5a:33:8d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Sep 7 12:01:04 2025 GMT
Not After : Sep 8 12:01:04 2025 GMT
Subject: CN=fa6fbf1b3ac143f779c2d69dc55ef8d6859be01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:3a:cc:27:3c:e3:06:5c:7b:47:d4:6f:b9:
20:31:23:e4:a0:68:e9:e3:fe:12:42:e7:b2:b9:3e:
7a:aa:a0:7c:4c:07:8e:95:f6:9d:c7:9d:3b:d7:5e:
a5:3b:e9:c1:ec:3e:10:0e:9e:3a:e2:f2:d4:cc:8b:
b7:28:2b:4b:d2:0a:ad:a7:88:60:4f:7c:e2:99:a1:
86:4c:78:b8:b0:d4:94:4d:e4:ce:ef:76:e0:03:99:
94:b3:fd:42:73:b3:06:1e:e3:34:22:52:a1:62:63:
08:ca:37:23:30:ce:cf:b1:d4:59:fe:ba:5d:7f:0f:
34:5c:d2:e0:09:69:86:5f:db:73:ed:4f:a5:59:01:
15:a5:19:44:05:0d:e3:ed:8e:d7:7b:ea:0b:09:d3:
9e:a8:2a:59:1c:1a:e9:a7:0c:6c:fe:77:d3:dc:fd:
67:c9:cc:bf:35:bd:76:2e:eb:df:b4:26:82:0a:0c:
78:3e:22:09:9b:90:32:3b:8c:df:89:f6:83:9d:16:
97:42:35:4c:c2:2c:f7:f1:38:9c:92:af:be:57:22:
f6:48:db:4d:bc:91:51:23:03:8f:30:1f:56:5b:e0:
6b:7b:1e:8b:09:b4:8a:b6:90:bd:0a:b8:f5:ad:59:
ed:77:61:4e:71:d9:31:e9:7c:d2:f6:1d:ba:76:ed:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6F:BF:1B:3A:C1:43:F7:79:C2:D6:9D:C5:5E:F8:D6:85:9B:E0:1F
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c8:f5:13:3f:e7:d2:71:9e:bd:23:5c:e9:7e:7c:25:e8:88:
f9:bb:83:22:b3:fd:2f:7f:c2:0f:a9:08:1e:9d:78:ad:6c:b2:
2b:fa:03:bd:f0:62:a1:ca:aa:73:eb:8c:84:98:19:2e:4c:01:
6e:f5:09:c5:81:f0:3b:07:60:74:8f:8f:83:f9:f0:8d:db:7b:
c5:b6:1a:05:b0:79:52:0a:dd:85:63:5d:99:71:c0:fc:d7:75:
43:85:47:cc:8f:e5:cb:db:0e:8b:65:43:bf:c9:4b:d1:2b:90:
34:4c:a0:83:a9:6f:1d:89:5c:0c:11:a4:5f:d6:6a:92:92:23:
72:d9:f5:b8:04:f4:69:f2:4d:a5:6c:87:2a:40:5d:f9:85:6c:
c7:3e:46:47:bd:df:7e:c2:ce:c6:bd:38:16:35:e2:c1:91:61:
ae:d3:2f:fe:cc:8a:c4:70:b6:06:cd:88:91:3f:19:ed:e6:96:
ce:a7:44:b4:bc:34:2c:0b:37:29:bb:f4:34:00:af:0d:82:d1:
f5:4c:63:36:2e:de:71:04:73:14:5c:a0:61:ab:a3:3e:ee:22:
54:bf:5a:e4:2e:12:5d:ae:18:38:63:83:7b:1d:be:d0:45:4d:
60:59:cb:9c:8c:6b:9f:58:0d:d0:b8:f2:77:57:ff:78:b2:03:
21:29:de:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:16 2025 by rpki-client