Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: UUAUYnc6B5ofOd0xWSnyNCntAvxEQwrFs3L0WzPIB/E=
Subject key identifier: BE:A8:05:81:E7:79:20:02:4B:E8:1C:15:71:E0:30:14:B9:5F:82:03
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 019753EBE50051DB068D3EC0EFE50A382156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 09:00:57 +0000
Manifest this update: Mon 09 Jun 2025 09:00:57 +0000
Manifest next update: Tue 10 Jun 2025 09:00:57 +0000
Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: 40ErLiifw+ttJxc9rKus41/tHq/Jat/dJSWZKZfDFUE=)
3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:e5:00:51:db:06:8d:3e:c0:ef:e5:0a:38:21:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Jun 9 09:00:57 2025 GMT
Not After : Jun 10 09:00:57 2025 GMT
Subject: CN=bea80581e77920024be81c1571e03014b95f8203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:43:1d:06:b8:fb:8a:7d:dd:18:d8:c8:bf:99:
5b:01:89:e2:ac:40:57:1f:e6:ce:cf:d6:3e:da:05:
50:e6:7c:98:ce:d7:0e:c4:e9:55:80:34:f0:c5:2e:
07:79:c8:ae:a5:19:10:96:59:91:1a:32:0c:f6:8d:
7f:b9:ae:f0:fc:87:65:76:f4:66:f8:5d:3c:8b:6b:
81:02:72:49:f2:93:d8:89:6f:4e:3a:97:b9:9b:73:
f3:a2:11:31:e4:b4:7c:30:7c:8d:97:62:45:26:9e:
8b:fc:d8:5c:9a:16:1a:ab:15:c9:bf:cc:ca:09:ff:
0e:96:eb:63:cb:4c:29:c5:96:2d:c7:6a:2f:c7:55:
79:e2:9d:09:5e:a0:7d:16:0c:f2:68:bf:3a:d7:c0:
08:63:c8:92:cd:e9:1a:b8:84:4e:b2:bc:94:55:58:
73:2f:23:eb:da:17:37:31:4b:3f:f8:34:5b:74:72:
0c:77:f6:ee:46:52:8c:7e:e3:da:8c:cd:c6:be:5a:
1d:00:9f:09:05:9d:ed:72:4c:8d:b5:35:cb:67:36:
80:4f:57:24:09:8a:a4:c9:a3:69:62:91:3c:9f:ad:
91:38:29:0f:02:68:14:ad:d6:a5:97:59:86:cc:df:
c6:59:ab:6a:c7:5e:bb:31:b7:e2:76:80:16:1d:28:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:05:81:E7:79:20:02:4B:E8:1C:15:71:E0:30:14:B9:5F:82:03
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1a:30:cd:77:09:f7:22:a4:18:cf:e8:66:2f:25:06:56:78:
42:a9:f7:bf:59:00:11:5f:29:23:2a:1e:ce:25:e0:ee:09:3b:
7a:c2:22:de:fe:36:2e:65:51:75:8d:dc:53:6b:b4:e5:02:22:
04:d1:02:08:c9:35:84:cd:bb:f0:b1:be:0d:4e:14:40:ee:d6:
76:41:e1:97:7d:cb:05:ec:f0:1c:2f:f0:af:c8:c3:89:f7:2d:
9c:02:bd:79:15:eb:d1:fd:7d:81:6f:13:a1:06:5c:df:96:ea:
c5:7e:58:04:2e:20:4d:1f:6e:e3:fa:c5:ad:76:5c:6d:06:6e:
6b:02:6d:23:73:ef:c0:6b:83:eb:43:b0:51:0c:2d:60:97:74:
10:7a:b7:fa:03:ec:02:45:36:2d:61:6a:f2:1d:69:8d:44:f0:
c7:34:21:fb:d1:f8:ed:a4:f1:c0:94:c2:60:2d:20:0d:1e:e1:
4a:f5:ad:31:db:3d:96:a1:be:91:ca:05:30:d9:c2:59:ed:fb:
e8:f6:a4:05:e0:f3:0e:54:eb:e4:52:ac:12:f4:48:30:4e:5b:
b9:f1:75:de:b9:c4:96:42:20:84:1b:87:11:10:b1:45:68:f9:
56:16:8f:52:9c:7e:5b:fd:46:61:63:25:33:40:bc:e3:26:8f:
32:ce:1e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:12:42 2025 by rpki-client