Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: 6Cx8BLVs6R0IXZ64Dd2NvcEfzorVbRl/XESiAuc7iP4=
Subject key identifier: DA:58:AB:B9:5F:42:0D:EF:FA:92:B2:61:5D:28:C1:38:D5:7C:90:FA
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 01994E1CD32D76686E7B4C6D920B67478ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 168A
Signing time: Mon 15 Sep 2025 16:02:15 +0000
Manifest this update: Mon 15 Sep 2025 16:02:15 +0000
Manifest next update: Tue 16 Sep 2025 16:02:15 +0000
Files and hashes: 1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: egMsNir6hkh25ahhTvTmHRiWmW1Yxaofm2VVjumSO5o=)
3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:1c:d3:2d:76:68:6e:7b:4c:6d:92:0b:67:47:8a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Sep 15 16:02:15 2025 GMT
Not After : Sep 16 16:02:15 2025 GMT
Subject: CN=da58abb95f420deffa92b2615d28c138d57c90fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:ff:28:09:fb:99:7d:23:56:c4:5f:6d:2f:
bb:f6:24:59:80:fc:3e:57:c2:78:d8:16:5e:fa:b8:
13:55:a3:f5:70:25:d4:88:85:ff:08:4b:64:e7:19:
43:ef:2b:5f:f4:48:91:9e:31:f6:9d:03:03:2a:02:
4f:b8:91:0d:b4:73:96:25:3e:a9:5a:63:99:68:f6:
38:2a:0c:42:2f:7c:ce:87:7b:61:97:d5:cf:c3:78:
ed:cc:d3:3b:5e:d6:c6:24:43:3c:f8:f5:c9:07:32:
00:24:02:38:df:38:be:7b:ed:30:b1:d8:f8:4c:f2:
04:e7:f1:9c:c8:26:28:e9:48:21:7a:ab:6d:19:ed:
67:f2:68:27:5d:44:fc:e8:a8:bb:1f:2e:95:8e:b8:
bd:aa:f5:3b:a4:86:31:b1:57:cd:2c:2f:f5:08:ce:
62:d7:16:7e:61:8d:e4:ee:40:e2:4e:5a:73:33:df:
ce:c2:25:6a:b2:09:9f:9a:f3:87:5e:6e:d8:ac:e1:
02:9f:f6:92:7c:e2:b6:60:b5:01:35:63:e9:e6:2f:
f6:0f:16:5a:e7:b6:51:2a:d2:53:98:1b:d3:3f:8a:
e4:6c:68:4d:2e:19:27:5c:de:0e:3a:9a:77:bf:d9:
a2:5a:d8:bc:72:8f:c2:ac:12:4e:85:f1:57:aa:a5:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:58:AB:B9:5F:42:0D:EF:FA:92:B2:61:5D:28:C1:38:D5:7C:90:FA
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c2:4d:47:cf:05:7f:41:d6:3f:d1:60:9e:e2:fc:52:e0:c9:
75:0c:8d:04:d1:a6:5f:c2:aa:ce:f8:4c:7e:65:ea:f5:80:ca:
64:79:ca:33:17:2a:43:68:2e:a5:1c:de:14:6c:97:fe:dc:91:
92:fb:d3:0c:49:7f:93:05:31:8a:c8:9d:44:d0:7b:00:07:37:
63:32:44:e7:13:61:fa:fe:cc:8c:00:c8:cf:b9:5c:4e:b7:cd:
74:ec:10:34:ed:a7:35:13:44:6b:c3:9a:0d:c1:6e:83:f9:29:
20:65:62:aa:12:b8:71:55:b6:10:63:03:76:78:9f:8b:15:cb:
5a:b0:e4:4a:b1:c6:d6:d2:aa:6e:08:56:e8:d5:04:64:63:d0:
1e:f0:38:0a:db:47:c6:ae:53:61:b5:44:61:3b:8d:81:c4:e6:
9a:65:09:f1:48:b2:59:32:71:3c:e1:d5:45:85:c8:07:3f:9a:
cb:c0:62:e8:12:f3:80:53:56:03:53:62:c8:ba:39:55:1a:62:
8d:1c:ec:40:8b:c2:f7:2c:59:b3:d9:ab:0e:61:d6:32:72:37:
1a:18:51:1e:51:7a:a5:8c:ad:da:b0:cb:a8:61:d9:5c:79:3f:
c5:70:ff:36:93:26:91:04:a5:ee:56:8a:26:be:3f:a7:1e:8f:
cf:57:fe:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:02:15 2025 by rpki-client