Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
File: G7gLSjMnxYOuzbA87z9k8zvVmwg.mft (raw, json)
Hash identifier: bMFcetiizgW4L7emcpshw0gm+DIiD5frSmI9YlUsjaQ=
Subject key identifier: A3:85:B1:BA:98:F1:0A:FA:49:07:49:E5:CA:C5:76:DB:C1:E7:45:BF
Authority key identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
Certificate issuer: /CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Certificate serial: 0198E33F1402D31D434012029CBE63FD5E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
Manifest number: 0B74
Signing time: Mon 25 Aug 2025 22:00:18 +0000
Manifest this update: Mon 25 Aug 2025 22:00:18 +0000
Manifest next update: Tue 26 Aug 2025 22:00:18 +0000
Files and hashes: 1: G7gLSjMnxYOuzbA87z9k8zvVmwg.crl (hash: 6ZxeLiAEOkMEG66ibXRKiZObjcapUwAE+XZenYKZCA4=)
2: f9_4yHGEiJhxZligkSR6T3R3EKU.roa (hash: zpcNNRByx6ZecO+EUAONqKSkYOomMoB7CmsUhShj7mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Aug 2025 14:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e3:3f:14:02:d3:1d:43:40:12:02:9c:be:63:fd:5e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Validity
Not Before: Aug 25 22:00:18 2025 GMT
Not After : Aug 26 22:00:18 2025 GMT
Subject: CN=a385b1ba98f10afa490749e5cac576dbc1e745bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:3d:9c:4a:e7:0e:db:63:1b:b6:b2:28:7f:
5d:b8:7f:77:9b:5b:14:4b:39:d7:f0:6d:02:eb:e5:
2f:7c:dd:a3:c4:db:66:8a:69:c8:3d:bc:37:90:4d:
44:a3:54:b3:99:97:d5:c9:e4:77:0d:60:ec:c3:f6:
16:39:19:7c:73:11:37:f8:c4:81:ea:8f:18:f8:c6:
c0:a9:6a:d7:20:03:12:66:0f:c9:4a:5e:51:69:42:
c3:c9:61:25:9a:5d:17:dc:66:33:4e:42:93:63:89:
41:a4:a9:92:58:7c:6c:5e:63:bb:2f:0d:40:e6:3f:
1d:4b:e8:e9:e7:54:a3:84:36:29:b2:23:f0:77:bb:
11:d1:e7:52:63:cc:2c:5f:9e:a9:4d:18:a2:58:18:
79:a5:f7:3d:09:dc:d1:9e:55:6e:17:9f:b1:99:1b:
c3:5b:41:c6:45:50:5b:fa:b8:aa:3d:d1:a6:67:d3:
be:ee:37:69:4c:6e:52:93:b8:6e:7a:c9:20:02:c6:
57:da:c9:be:7a:ef:f0:28:6d:ba:ca:ca:0c:f0:51:
fc:b3:82:c8:fc:2c:cc:cf:39:92:f4:33:be:9d:d6:
79:6d:7c:be:cf:34:b1:35:4a:5d:42:d4:be:1b:ff:
5b:4a:1e:cc:9c:9b:ec:0d:1a:b0:6f:1a:76:1d:0e:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:85:B1:BA:98:F1:0A:FA:49:07:49:E5:CA:C5:76:DB:C1:E7:45:BF
X509v3 Authority Key Identifier:
keyid:1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9b:34:d3:a4:14:e7:49:bd:ab:2f:ca:b6:f2:2a:56:90:4d:
81:a2:6a:e3:0c:07:33:44:c1:4c:b9:58:37:11:e4:96:f1:1a:
b4:21:12:9c:32:26:28:af:c3:6a:44:bc:69:c4:5b:96:82:7d:
44:8e:39:3e:bf:3f:67:e0:9e:dc:61:31:97:96:7e:a8:29:f1:
55:70:58:a0:bb:db:ff:dc:13:04:b0:a3:fd:56:c4:d6:dc:c2:
c5:35:39:50:12:1b:a8:10:16:06:92:df:f2:52:ef:14:6c:e1:
b9:1a:1b:75:38:ba:86:f0:c1:ff:f4:49:fa:3c:9c:ff:16:2b:
df:7a:c4:db:f6:11:44:f5:b2:77:76:85:17:7f:73:f4:d4:53:
be:50:5b:93:03:8d:30:25:49:d5:18:d6:05:9f:96:a7:ee:f8:
d9:94:aa:ee:da:23:a4:e4:c4:07:26:26:a2:87:e3:5e:d0:88:
77:4f:11:64:d7:d9:26:29:25:d0:ab:e5:c6:f7:a9:6d:ba:f4:
06:5b:b8:d2:9b:34:45:f5:9e:ce:a6:e0:71:54:f7:18:d4:1b:
82:b8:2c:1c:61:32:d6:69:63:4d:f8:98:80:52:ab:90:66:6d:
0e:7e:e3:c7:ae:e6:d5:18:c4:91:48:8f:3e:3f:f8:c5:70:1b:
9f:96:36:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 00:13:12 2025 by rpki-client