Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
File: G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json)
Hash identifier: FTdD8TlkkmZxg1CXjknvEDJF+Ad08GmUrDejwI7kd9o=
Subject key identifier: 03:DB:F2:D9:A4:DE:97:A4:4E:83:61:30:FF:39:62:51:24:B8:97:8F
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial: 019923316912FDF6626A70CF0F4E37A5CC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 08:01:04 +0000
Manifest this update: Sun 07 Sep 2025 08:01:04 +0000
Manifest next update: Mon 08 Sep 2025 08:01:04 +0000
Files and hashes: 1: 2iBSszmMQqmiQ3uytPa6Rj5usVw.roa (hash: uKmKRGw9bMp+kTA7Ddvynf7WAl8sh27c2GAtM3UsdJQ=)
2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: HV9Mp7Zwq+a1lFjX5KMIWagjvN9+s6y+eJRi0NY34dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:69:12:fd:f6:62:6a:70:cf:0f:4e:37:a5:cc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
Validity
Not Before: Sep 7 08:01:04 2025 GMT
Not After : Sep 8 08:01:04 2025 GMT
Subject: CN=03dbf2d9a4de97a44e836130ff39625124b8978f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a4:a8:81:99:0d:e0:09:1d:b3:0b:6c:1d:f5:
80:ba:0f:eb:a0:b0:78:cd:15:35:dc:19:c2:66:a0:
1d:d0:ab:0b:2b:80:9d:78:81:c9:b0:ab:42:4d:23:
53:9b:56:c9:a1:70:ef:3c:98:07:df:0c:fd:10:fa:
20:ed:2f:7d:06:16:d6:a1:08:da:d9:7d:b3:da:cb:
8b:09:e8:c9:4b:e4:f2:64:1d:0b:84:01:be:8d:35:
34:44:eb:d4:d7:0d:ed:6a:af:00:35:71:e0:95:4c:
a5:cd:ee:69:ff:e5:c5:46:97:46:23:5a:fd:4d:4c:
9a:84:1f:42:e8:a3:b5:9e:aa:37:7a:63:55:b8:c4:
86:5c:e9:a2:22:62:4e:6b:47:1b:23:92:ee:9f:b5:
d6:e4:ba:4e:cb:46:d6:6d:60:c3:56:5f:f5:c6:90:
cc:28:de:e4:ba:68:41:aa:bd:15:29:a9:f2:c6:12:
46:fa:82:96:74:47:74:0f:a6:a7:52:cd:4f:7a:85:
75:63:d9:cc:bb:3e:70:9c:01:22:ff:49:4a:4b:99:
ff:f5:86:b5:aa:42:bc:43:a7:3f:cd:91:de:79:a3:
4b:38:43:59:06:a4:2d:c2:8e:21:5c:44:a6:f0:76:
c1:a5:3c:15:6a:32:63:d0:42:ed:a7:19:5c:a4:ed:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DB:F2:D9:A4:DE:97:A4:4E:83:61:30:FF:39:62:51:24:B8:97:8F
X509v3 Authority Key Identifier:
keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4e:c7:79:67:95:41:fb:f8:5f:6a:fa:33:af:48:6d:56:4d:
8f:0a:a3:70:a6:94:42:8b:49:80:f6:c5:6b:76:13:3f:49:ac:
2c:f2:56:90:50:ee:25:5c:94:15:ba:0b:d4:cd:7b:8a:53:83:
cb:c9:7f:49:ab:a0:70:4c:41:be:92:62:10:45:d5:7f:66:d1:
50:56:15:90:c1:bb:63:ea:22:30:75:ab:c8:36:52:8f:59:77:
5a:61:03:a5:49:df:7e:4d:b5:ce:03:48:86:40:28:da:71:e1:
b4:95:48:58:7b:50:78:62:b8:d4:fa:fd:85:1c:7f:6a:90:a0:
4e:e2:d3:f0:01:4d:80:45:1e:21:07:e7:c4:17:06:0a:78:da:
2a:f7:96:30:53:52:7b:e8:ae:a5:da:01:86:78:08:12:52:87:
59:03:14:27:a3:29:e0:49:61:01:34:9b:42:8a:ea:65:11:47:
1a:f8:6d:e7:ad:43:ee:42:5f:f1:99:ad:7a:ee:7c:fc:3e:3b:
0e:b6:04:22:55:63:b9:b7:04:c2:db:41:f3:47:0d:b2:53:62:
8b:78:50:38:0a:e9:ab:f4:bd:05:b7:08:b7:4d:7b:cd:bb:83:
9e:03:f6:39:e5:d5:7c:c3:ed:8e:7e:c9:1c:f6:10:e1:86:9e:
d6:1d:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:00 2025 by rpki-client