Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
File: G6BsMiNp1EnhdPpzEEezOXI_sB0.mft (raw, json)
Hash identifier: nvoKH3NTwd5WvLLEVU0ewe5e7bLocu3jZOd6o/lcVgA=
Subject key identifier: BE:20:1F:4A:68:A2:5A:97:BC:20:5D:00:E6:1D:17:DB:E1:8F:3D:64
Authority key identifier: 1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
Certificate issuer: /CN=1ba06c322369d449e174fa731047b339723fb01d
Certificate serial: 01993311FCD0F4ED99D6888E298C8AD87684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 10:00:40 +0000
Manifest this update: Wed 10 Sep 2025 10:00:40 +0000
Manifest next update: Thu 11 Sep 2025 10:00:40 +0000
Files and hashes: 1: G6BsMiNp1EnhdPpzEEezOXI_sB0.crl (hash: OGP9CLNHIANhd7GxcBTyDd7lhHA289isZgh3TZQhqks=)
2: fudzAOYoQEbBVmwmOdYtJovy1uI.roa (hash: QG+JwJM3okPXrIbfWoNTAizNGt25NFUxghJxGtiJeCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:11:fc:d0:f4:ed:99:d6:88:8e:29:8c:8a:d8:76:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba06c322369d449e174fa731047b339723fb01d
Validity
Not Before: Sep 10 10:00:40 2025 GMT
Not After : Sep 11 10:00:40 2025 GMT
Subject: CN=be201f4a68a25a97bc205d00e61d17dbe18f3d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:b4:f0:67:f7:83:f7:36:28:07:7c:5c:2e:
7c:6f:1d:d5:65:c6:94:88:c5:9d:34:75:74:96:f4:
a1:d6:46:d1:75:3c:21:3c:36:c6:d2:81:fd:44:8a:
61:6b:b7:7b:4d:a3:b0:d9:06:86:b7:e8:10:51:3e:
ba:a3:3c:01:83:33:91:38:3d:f1:20:e1:59:57:c0:
96:d4:4c:52:72:a3:be:62:9f:47:fe:5b:a5:f5:3c:
b0:ad:99:9c:c5:1e:ee:fb:b6:a7:d4:23:83:7f:72:
48:fc:64:32:2e:06:8d:bf:6b:1d:d9:04:0c:4c:a7:
51:90:bd:52:a0:b6:c5:79:62:56:e3:2e:02:73:cf:
14:30:99:e5:a3:25:35:59:50:73:ee:6f:eb:b3:4e:
c6:ab:42:d6:8f:61:97:22:b8:7e:fe:23:59:a2:8a:
aa:76:27:21:79:76:12:32:56:49:b2:3e:0d:2e:e0:
c4:82:80:62:b2:f9:4a:a7:b5:68:87:19:f0:42:b9:
bc:69:c3:13:bb:3b:d4:9e:6e:83:00:b3:de:bf:87:
86:ca:e8:34:9c:04:ed:82:f7:d6:9c:2b:e8:ae:8b:
1e:d7:41:17:21:42:65:a4:bf:d0:ac:a3:1b:0e:e2:
46:a6:45:f2:ad:c6:dd:ea:59:f3:a5:99:68:7a:9d:
7f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:20:1F:4A:68:A2:5A:97:BC:20:5D:00:E6:1D:17:DB:E1:8F:3D:64
X509v3 Authority Key Identifier:
keyid:1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:8d:60:ca:6d:5a:db:52:a9:29:d4:e3:30:6b:20:d0:39:59:
e3:d6:34:00:40:22:05:ff:52:47:48:22:1a:c8:be:28:8a:fb:
ca:a2:14:88:2c:23:06:1f:97:52:bb:99:4f:3a:eb:31:da:2e:
4d:79:50:68:ff:8e:5a:66:b4:68:ab:75:24:79:a1:71:56:9f:
92:73:ff:5e:f9:e9:b5:8f:ba:64:c5:0e:5a:ab:b6:fe:c6:dc:
1b:8b:0d:5d:10:09:ef:10:74:e5:30:44:c3:4c:96:c8:0c:a6:
19:f0:37:73:16:93:ec:f7:e9:37:1f:53:b7:fa:bb:6e:d6:f3:
0c:42:79:b3:e1:24:05:a1:a9:e1:a9:2b:60:3f:64:23:c5:2e:
e0:ab:fa:8c:d8:aa:f1:58:94:07:af:46:ea:94:43:5f:f3:c3:
2b:68:28:7b:19:ea:b9:73:d0:03:ae:1b:01:b0:be:16:fe:c5:
aa:8f:fe:e1:0c:82:ad:c6:d8:7e:56:4d:7c:c1:f2:67:04:fd:
e1:55:71:59:e6:7c:c4:6d:b3:f8:ce:46:fe:9b:eb:4a:b4:3f:
68:aa:77:14:50:71:9f:b5:7f:49:a9:59:fe:7c:cc:46:42:0a:
fc:3f:99:19:9f:0a:9b:7a:11:a4:7f:2e:58:c3:7f:bd:69:e0:
43:52:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:20:45 2025 by rpki-client