Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: T89cov96xZ29/IDY+PWyRmGCxcvQ2OaTSGBeM+SekpI=
Subject key identifier: D7:DB:9B:68:2A:51:5F:91:F3:C5:3F:B2:25:0C:CF:F4:5A:94:37:76
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 0198499BEE698736410B878D87D330CAD8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 02:00:12 +0000
Manifest this update: Sun 27 Jul 2025 02:00:12 +0000
Manifest next update: Mon 28 Jul 2025 02:00:12 +0000
Files and hashes: 1: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: qdhKnIYVxNshV1Z4mFj0072+ReAKwePFn/pUOgEfCwU=)
2: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (hash: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=)
3: Y2jaKnMLOg7L7yt3a5FoJKVZD9M.roa (hash: E77+sc63md8h3e/NARC1FrCtInem3ClY6WQ72Z8aT70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:ee:69:87:36:41:0b:87:8d:87:d3:30:ca:d8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Jul 27 02:00:12 2025 GMT
Not After : Jul 28 02:00:12 2025 GMT
Subject: CN=d7db9b682a515f91f3c53fb2250ccff45a943776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:0e:08:5f:8c:1e:7c:d4:ea:24:fd:73:5f:
bb:0d:d6:20:cf:0d:8b:31:e2:93:b7:20:c9:72:e0:
71:f2:6e:ba:b4:32:d3:0c:94:e3:a4:3c:c0:d7:52:
f7:b8:12:96:e4:4e:ca:2c:16:23:d4:f5:24:44:a5:
f7:b5:8e:64:3d:78:97:e9:2d:c1:c8:cb:fc:5e:f2:
8e:7b:9a:93:e1:dc:d4:b8:1e:a9:26:04:cb:bd:92:
54:9d:35:30:43:9d:d2:4a:4d:a8:6b:6d:71:88:4a:
d7:45:4b:0d:22:fb:2d:e0:ad:2e:36:ce:f5:44:f4:
0a:ad:ef:eb:83:0a:8b:03:54:62:d7:d0:51:37:d9:
6d:42:29:cc:62:b6:f1:5f:39:c9:dd:47:1b:de:87:
07:b1:82:cc:c8:64:aa:b9:c2:86:1f:ae:5e:f7:af:
37:d9:01:2c:aa:60:3f:9b:20:1a:ac:6b:e9:f7:ce:
f6:08:69:d3:da:e5:f7:f9:78:98:34:cb:77:81:a6:
3c:29:2b:25:a3:6a:15:3c:92:4a:38:cd:b4:a3:d8:
6f:2d:6f:89:76:13:9c:bd:d0:f9:d1:47:38:3c:b7:
40:2b:c4:e3:58:23:47:74:3e:ca:75:e4:fd:86:f0:
e2:55:d9:ba:1d:60:a4:53:31:15:9b:64:35:5b:4c:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DB:9B:68:2A:51:5F:91:F3:C5:3F:B2:25:0C:CF:F4:5A:94:37:76
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3b:d7:e4:c8:0b:e9:22:ed:7d:69:58:91:19:74:c7:e8:26:
ed:1d:0e:a9:a2:f2:47:d7:aa:2e:8e:37:9a:62:99:0c:a3:52:
e9:04:70:04:8e:e0:b3:55:75:32:9b:19:d3:56:dd:34:6d:f7:
f3:0f:32:06:5c:56:6f:ac:c7:6b:03:d4:43:1f:df:25:02:a3:
ad:91:8b:f9:3e:89:85:0c:fa:04:ba:c6:6c:db:d3:55:17:3b:
f5:06:a2:3c:f6:4c:55:45:ee:2a:77:b4:5c:c1:3a:47:4b:fc:
da:17:a7:3a:6f:29:c2:9d:77:30:15:13:9f:ba:b0:bb:66:f1:
30:f0:71:ae:ed:e6:9f:aa:63:e2:96:c7:c4:db:71:7f:8d:77:
dc:21:01:41:cf:1d:f3:d7:b2:bc:75:ad:31:1f:e3:63:d4:76:
ca:ba:0c:ea:97:fd:eb:db:df:3b:17:3d:eb:b0:d9:de:32:88:
a3:f7:a1:10:b6:72:98:cd:95:50:37:22:ed:e9:f2:6c:9c:09:
b5:f8:30:e1:f1:a3:96:83:0c:ee:f8:34:ed:59:b5:2b:a2:36:
c0:c4:78:e9:ba:51:87:02:7a:ed:f9:9b:b7:3c:bd:d8:2e:f9:
92:e3:7e:9c:ef:64:d8:3d:03:70:c0:be:b5:7e:35:20:1f:06:
ab:65:7f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:29:55 2025 by rpki-client