Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File: G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier: BtmSG67BtY7CgQOwUjsWoea3SPzCEdcxb4cWDqvYLH4=
Subject key identifier: 71:40:05:1D:4F:BF:25:01:A5:8E:22:74:87:9C:60:F6:07:59:58:2E
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer: /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial: 0199228C7C510A2EB1C36CAC3490B9307F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number: 03A1
Signing time: Sun 07 Sep 2025 05:00:56 +0000
Manifest this update: Sun 07 Sep 2025 05:00:56 +0000
Manifest next update: Mon 08 Sep 2025 05:00:56 +0000
Files and hashes: 1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: Xd2IQFYGsyv+5UdtmDdh00P+zvktsph+d4pV4X/lrYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:7c:51:0a:2e:b1:c3:6c:ac:34:90:b9:30:7f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Validity
Not Before: Sep 7 05:00:56 2025 GMT
Not After : Sep 8 05:00:56 2025 GMT
Subject: CN=7140051d4fbf2501a58e2274879c60f60759582e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:d5:80:1d:9a:8a:27:f5:72:69:2a:85:61:
d6:12:ef:a0:8a:b3:ab:75:08:50:7d:e8:b1:82:1a:
b0:97:e3:ec:20:bc:72:f7:50:c6:3a:e8:9b:44:47:
97:d6:a7:58:3a:33:9c:a2:c8:a3:0e:f0:83:da:b6:
20:da:91:12:e7:5a:32:50:dc:74:14:c5:99:43:34:
95:f1:40:07:e6:e7:2c:89:99:e1:6c:f6:e2:bd:a0:
46:b6:06:04:94:99:75:22:91:d9:1e:54:e5:45:3e:
d4:d9:65:af:4d:10:52:0f:ae:fc:8c:68:f3:0a:55:
8a:d6:39:33:a6:83:e2:49:c1:3b:78:5a:19:33:61:
27:59:1e:44:9e:58:97:bf:e0:55:1f:f1:92:d7:26:
a6:22:d8:00:cc:fe:a5:8b:96:67:78:56:a3:92:ce:
8b:6c:47:63:8c:3b:0e:73:80:7e:d8:3d:aa:0a:fc:
18:11:a4:73:e8:fd:62:7a:86:45:ac:c8:ee:bd:0b:
0f:48:85:d0:6a:e4:5c:dc:09:47:b9:01:56:3d:33:
25:91:01:fe:cc:7d:e4:7f:8f:52:12:b6:66:25:11:
eb:0b:bb:49:0d:6a:3e:27:80:f5:56:22:24:ae:ef:
86:b7:84:25:07:f4:6e:78:03:eb:3d:0f:5e:66:69:
b8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:40:05:1D:4F:BF:25:01:A5:8E:22:74:87:9C:60:F6:07:59:58:2E
X509v3 Authority Key Identifier:
keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:60:39:1c:b8:e8:39:2c:08:99:2a:80:7d:9d:59:8e:b0:46:
85:92:6f:b9:69:ef:0b:87:60:b6:3a:9c:cf:3d:0d:ee:be:33:
c6:ab:ad:24:49:f8:40:dd:dd:25:cf:f3:ae:60:2e:5d:c7:21:
28:2f:5f:97:8f:67:d8:12:c6:7d:57:79:5d:2e:0c:93:cc:0e:
b5:34:bb:90:ba:c2:14:e7:f2:a5:49:5f:d9:7e:5d:e9:1b:30:
49:47:ae:3e:6e:f4:cf:b0:37:5e:aa:68:4a:7c:b1:24:6a:d0:
fe:b3:29:f9:48:c9:b1:4b:50:a5:18:7b:55:c3:86:a9:ba:e2:
f1:e5:09:69:f1:3f:44:38:32:8f:b1:e2:52:bc:ef:a9:26:d6:
d4:e0:19:f5:06:ef:22:94:3e:5b:fc:14:0b:d4:a8:8f:b1:47:
ec:c7:a5:a2:d1:53:68:d5:04:a7:e5:bb:7a:ae:aa:cc:34:16:
a0:0c:a3:a0:30:7e:ee:2f:e0:18:5a:29:75:0e:92:22:fe:39:
95:98:c9:00:5a:8a:f9:93:5a:45:5d:0e:9d:74:74:39:fc:bc:
63:e0:ba:95:f7:e3:25:78:17:7f:cb:e2:bf:07:af:b6:ea:1c:
a2:fd:82:d1:aa:23:6d:cc:d5:17:4b:ac:39:07:63:84:d1:c8:
72:55:96:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:43 2025 by rpki-client