Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: 1fjbNTy9FB+6NgIh3PbbIOTy278fOBsVBxSh0mvCV5Q=
Subject key identifier: 27:66:37:C0:C6:9E:35:1F:44:E1:E3:31:94:F4:6F:69:4E:C5:2E:E5
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 019933490CE06D8B89D142D6F393139D5F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 11:00:49 +0000
Manifest this update: Wed 10 Sep 2025 11:00:49 +0000
Manifest next update: Thu 11 Sep 2025 11:00:49 +0000
Files and hashes: 1: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: qFmfte/9SXYuVGQIm/CXVw5s9Tgj/UKhF9O2zjl/oNg=)
2: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (hash: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=)
3: Y2jaKnMLOg7L7yt3a5FoJKVZD9M.roa (hash: E77+sc63md8h3e/NARC1FrCtInem3ClY6WQ72Z8aT70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:0c:e0:6d:8b:89:d1:42:d6:f3:93:13:9d:5f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Sep 10 11:00:49 2025 GMT
Not After : Sep 11 11:00:49 2025 GMT
Subject: CN=276637c0c69e351f44e1e33194f46f694ec52ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:42:76:5d:83:d3:a9:e9:89:57:9a:d9:7e:
b6:f2:99:92:26:5a:67:28:9c:05:5e:42:eb:1f:c9:
b6:68:fc:8a:8b:b3:d8:6a:d5:ff:81:18:eb:4a:74:
a3:c3:89:ca:20:40:b0:1d:12:42:85:eb:75:d5:78:
77:cf:d3:f2:98:61:4c:b0:ee:77:fd:3f:41:42:20:
2b:22:be:40:2a:7d:ba:42:6d:f3:6d:6d:e0:f2:84:
c8:49:b1:76:2a:17:6b:cc:51:ea:e8:c4:69:55:bd:
f8:a2:21:53:7b:af:f9:65:23:a1:7f:98:75:fa:29:
aa:e8:ef:8b:aa:74:db:61:b2:98:0a:d1:3d:50:ec:
7d:a8:1c:d7:7b:59:ad:ad:87:9c:9b:a7:18:24:73:
cb:47:4e:80:a4:25:25:f2:d1:8d:ba:7f:a8:b4:8d:
87:c0:01:13:1c:ef:ad:a5:5c:c2:c4:02:a1:ae:d7:
db:e4:a7:3a:6c:92:2e:8a:05:ba:aa:76:8a:ba:ec:
50:7b:52:36:4b:6f:36:c5:04:77:1c:28:59:28:0a:
19:11:8b:a4:e5:0e:84:81:b1:24:3c:bd:d8:b1:27:
be:2c:fd:26:5e:af:aa:56:dc:be:9b:89:ed:6d:7b:
ac:a4:23:e9:20:8b:ac:1f:20:2f:12:fd:4c:08:6a:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:66:37:C0:C6:9E:35:1F:44:E1:E3:31:94:F4:6F:69:4E:C5:2E:E5
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:05:62:f0:d5:a4:bf:f0:db:eb:26:f5:03:71:78:08:79:d7:
33:d3:a0:67:7c:f8:7c:c6:77:51:26:b4:73:8f:df:5f:b5:88:
9a:14:f0:fb:3d:45:22:b4:63:18:7c:05:3d:6c:07:e0:eb:5e:
73:fb:f7:9e:a5:f1:29:ba:c8:c4:6a:fc:43:ae:a8:14:fa:3e:
b8:8c:99:d2:7f:8e:09:7b:b1:96:2a:a4:58:87:6e:3a:b4:91:
c3:f7:48:79:b9:de:9b:ad:b7:5f:25:58:8d:10:2a:6a:c5:42:
b0:44:d6:d1:1e:86:df:a0:8f:64:dc:5b:ea:cf:ac:f8:7a:4d:
68:ee:c7:d1:82:b3:e3:62:9e:d3:32:e8:59:6d:ba:7b:fd:6a:
68:af:b8:72:7d:61:1f:bf:1f:01:ed:3d:a8:29:b1:b8:1e:11:
92:57:95:fc:32:82:7b:85:45:0b:a2:08:72:b6:65:6e:28:fa:
86:0b:d3:9b:c5:f5:4a:17:85:cb:9f:b1:d5:9d:cc:c2:1e:d9:
86:be:77:51:1c:45:4f:46:a0:46:aa:56:89:9e:7f:11:1b:3e:
fc:e0:3b:be:8a:00:18:d9:96:7c:c4:bf:4a:97:4e:8c:6b:06:
d9:17:4e:33:9f:48:9d:3f:6d:88:53:05:63:3a:69:6c:c0:05:
01:ae:6a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 15:20:08 2025 by rpki-client