Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: 7IozhzR81tRO2I12wh0yE8Bog+Y56/fbQE7jkLLapsA=
Subject key identifier: 62:9E:4D:B0:DA:9E:42:A7:4B:8A:8D:97:CB:55:3C:07:19:05:9C:A7
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 019749316420500057EB2382AA814767EE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 091C
Signing time: Sat 07 Jun 2025 07:01:03 +0000
Manifest this update: Sat 07 Jun 2025 07:01:03 +0000
Manifest next update: Sun 08 Jun 2025 07:01:03 +0000
Files and hashes: 1: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: q7VpiOgBK+1dqkmaOTiTiKOMviKAI1bQ16Tj+Xazw3Y=)
2: n_fySMb2KYofNdbrb087aj1eYn8.roa (hash: 77dWHMesUhSClZQyjFlFJHiSjQfgTnJaM+uBOMHku1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:64:20:50:00:57:eb:23:82:aa:81:47:67:ee:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Jun 7 07:01:03 2025 GMT
Not After : Jun 8 07:01:03 2025 GMT
Subject: CN=629e4db0da9e42a74b8a8d97cb553c0719059ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:67:4f:69:18:79:a8:41:c9:1f:ce:d5:fc:
63:fd:8f:7e:2a:64:21:60:48:c3:a0:58:f7:c8:bd:
4f:bb:5e:d7:3f:ec:0d:32:a7:24:b1:df:9d:f5:a1:
f6:1f:34:4d:5f:b9:93:13:d5:fa:0b:63:9b:49:c5:
3b:eb:7c:53:95:0e:fc:30:10:51:23:6e:a6:36:c6:
42:07:39:ad:e5:6a:37:5b:66:fa:45:ba:1a:e3:a6:
8d:42:0a:bc:ae:77:5b:97:a5:fe:71:f3:76:21:b6:
52:7a:52:5c:48:69:55:17:b8:48:a9:b1:f6:00:70:
38:0f:26:d4:c7:0f:8b:b7:26:79:b5:d5:43:d1:bc:
1e:8c:1c:16:a3:4b:4d:ba:51:09:97:26:ad:84:f8:
47:62:c2:f0:a6:d2:12:1a:b1:e7:fe:eb:eb:22:81:
20:89:c3:40:31:f6:ae:0c:c4:69:c8:ea:b3:74:d6:
3d:0d:e6:5b:40:3e:1b:18:47:f9:04:a9:aa:bb:1a:
90:b4:78:b8:7f:71:73:0c:70:6c:b4:12:2a:cc:6f:
7b:3f:02:52:2f:32:d7:5f:b3:0f:74:99:09:24:eb:
20:16:d7:12:4c:89:f4:27:29:36:57:94:58:9e:ad:
25:28:90:50:fd:d0:0f:b4:67:f4:89:66:e8:70:60:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9E:4D:B0:DA:9E:42:A7:4B:8A:8D:97:CB:55:3C:07:19:05:9C:A7
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:08:aa:72:b1:3b:0e:8a:ac:75:68:c1:50:2c:b3:c3:63:42:
f0:88:fc:88:cd:36:52:0a:93:5f:fc:14:5e:49:e2:62:6e:a0:
6b:6f:a7:2f:60:d8:7a:ad:59:5a:99:0c:02:fe:fa:d6:e8:8b:
43:76:22:6c:a9:3a:3c:24:f1:3c:af:61:a8:42:b9:96:ce:ce:
5e:89:f8:82:1d:6f:58:20:6b:26:18:7c:db:d6:cd:08:ac:21:
43:8c:47:58:90:8e:6d:99:f3:99:40:32:43:df:bf:77:4b:ce:
a4:87:c1:74:21:9d:db:db:bd:40:6a:08:45:79:74:74:9d:27:
3d:7d:40:21:45:09:67:2c:e6:3f:c5:c4:01:5d:04:0a:7e:84:
ea:bc:21:7a:c3:9b:18:e3:0d:60:ce:a2:03:12:7b:17:5d:38:
c5:55:7b:94:6d:06:8c:1b:87:f9:ca:bd:7b:df:f3:ec:2d:98:
82:c5:81:9a:55:7a:7f:cc:71:de:0a:6f:4a:fb:4e:57:92:28:
78:5b:1d:5e:b0:59:ac:0d:93:40:a6:60:dc:90:31:55:1b:38:
64:5b:84:36:4a:91:68:02:4b:f5:32:9b:85:17:6f:0e:f0:24:
9e:ef:d1:5f:f2:ff:0a:f6:6b:aa:5b:0e:2d:3b:64:14:7c:83:
f0:43:96:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:06 2025 by rpki-client