Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
File: G7gLSjMnxYOuzbA87z9k8zvVmwg.mft (raw, json)
Hash identifier: keYBstI0CW3sBFBHdkoA2Avr0DjsLbR5xsUvjVr7wi8=
Subject key identifier: 9E:20:0D:93:56:8C:12:29:AF:CA:98:89:5D:09:07:DB:D5:EE:DE:5F
Authority key identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
Certificate issuer: /CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Certificate serial: 019745F8D76E92E227716DBA5437EE71F6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
Manifest number: 0A9E
Signing time: Fri 06 Jun 2025 16:00:25 +0000
Manifest this update: Fri 06 Jun 2025 16:00:25 +0000
Manifest next update: Sat 07 Jun 2025 16:00:25 +0000
Files and hashes: 1: G7gLSjMnxYOuzbA87z9k8zvVmwg.crl (hash: wK2JZbgu1G1nHc4LRsAESyZY2hLKrtZzazFSYchJ0Ws=)
2: f9_4yHGEiJhxZligkSR6T3R3EKU.roa (hash: zpcNNRByx6ZecO+EUAONqKSkYOomMoB7CmsUhShj7mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:d7:6e:92:e2:27:71:6d:ba:54:37:ee:71:f6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Validity
Not Before: Jun 6 16:00:25 2025 GMT
Not After : Jun 7 16:00:25 2025 GMT
Subject: CN=9e200d93568c1229afca98895d0907dbd5eede5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:f2:d7:9b:f5:07:94:51:b8:e1:59:94:82:
b9:f7:32:dd:a8:b9:4a:e1:67:3d:81:24:73:ff:85:
45:99:a0:b0:f7:c3:aa:d4:6e:50:9d:9a:66:43:ed:
8e:96:e2:f2:cc:74:79:84:dd:e4:32:b9:81:b4:95:
36:74:4c:e9:c1:94:ee:4b:97:8e:66:79:6f:f4:4a:
24:aa:73:8a:3c:3a:b5:71:d8:98:b1:6a:80:07:c7:
fd:9e:49:d3:85:9e:c3:8a:cc:50:88:e0:ce:97:6d:
92:77:68:4b:34:79:ff:44:f6:a3:1e:4c:ce:49:2c:
f5:cb:d7:8e:b8:14:52:44:e7:a8:05:0c:37:f2:8f:
f5:c2:a1:60:a3:56:49:68:37:20:fa:b5:31:3a:e0:
da:8c:dc:c5:83:ee:63:2e:77:99:f6:ae:26:c8:d6:
0b:73:22:9f:49:3e:15:b9:3f:14:6f:e1:ea:20:bf:
44:22:de:b6:19:b8:97:4b:9c:19:e3:ac:2d:73:42:
af:35:6d:c1:8d:3b:2c:26:e2:d1:f0:35:c3:7f:24:
8f:8f:ac:88:2d:d7:df:e5:ee:36:1a:59:b7:32:30:
82:13:ca:b6:a5:a9:ab:9a:ae:3e:1a:b4:3e:5f:e8:
cc:9a:1b:54:dc:eb:90:b9:14:62:13:16:5d:39:93:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:20:0D:93:56:8C:12:29:AF:CA:98:89:5D:09:07:DB:D5:EE:DE:5F
X509v3 Authority Key Identifier:
keyid:1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:76:5b:b1:2d:e6:5b:d8:ff:28:18:e0:00:d4:7e:7a:60:c6:
19:00:4b:29:2c:20:7b:1d:b3:29:a4:0d:ac:00:4f:58:1a:f5:
30:f8:ad:77:5e:bb:35:25:15:f9:f6:71:df:80:ab:f9:4a:84:
ff:f8:88:7f:9c:84:a6:0e:b9:ef:a2:f5:b2:bb:23:6b:ba:41:
2a:66:1a:55:f6:72:38:99:84:38:70:27:96:c7:e2:a6:39:30:
6f:31:b9:21:f4:cc:08:13:6e:b3:35:f3:18:fb:cd:8a:ed:42:
63:5b:56:c2:5a:c6:df:b0:79:bd:58:ab:09:ac:77:93:af:33:
b2:a9:9a:2a:cf:ed:cd:83:b7:48:91:d1:bf:92:58:03:63:39:
33:af:3f:81:21:c1:e0:de:96:92:60:88:6a:c3:cf:ee:64:e0:
10:dd:7d:f9:79:e8:0e:fa:ec:01:c0:18:71:13:62:61:66:b6:
f6:49:bc:01:3c:de:ea:ea:f5:12:7d:60:34:f6:3c:26:9e:97:
18:c7:6a:7e:4d:32:af:2e:e0:8a:36:67:16:52:36:63:35:55:
c6:7e:91:bd:cc:08:ed:f3:4b:d2:ec:ff:11:1d:32:b6:9d:5d:
b0:ba:76:e5:e3:eb:77:a8:cc:0f:fe:32:8f:31:25:e8:bd:17:
1d:db:46:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:11 2025 by rpki-client