Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
File: G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json)
Hash identifier: Vc/zfyATTlYaGfaSDNqWYhkMGgznoJztq03mCLoIRFk=
Subject key identifier: 3B:99:F3:C8:79:D1:D5:CA:C6:10:0B:01:CD:55:99:D0:80:2E:B2:26
Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
Certificate issuer: /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Certificate serial: 019922FAB304A113E1DF49FB7630399346B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 07:01:19 +0000
Manifest this update: Sun 07 Sep 2025 07:01:19 +0000
Manifest next update: Mon 08 Sep 2025 07:01:19 +0000
Files and hashes: 1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: OhyG7zlXO3d/ykmellvEzbUcojvdqyRkoV3armCHHJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:b3:04:a1:13:e1:df:49:fb:76:30:39:93:46:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Validity
Not Before: Sep 7 07:01:19 2025 GMT
Not After : Sep 8 07:01:19 2025 GMT
Subject: CN=3b99f3c879d1d5cac6100b01cd5599d0802eb226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:41:89:a6:46:50:6c:4a:fb:80:be:7b:ff:
0d:56:e2:dc:8a:88:59:73:6f:63:e9:1f:98:a0:31:
e8:3f:f8:a4:5f:23:94:22:13:37:b7:31:1a:96:b9:
01:ea:83:28:e9:f3:38:7b:09:61:cd:4e:fe:d6:a4:
9e:3c:ab:d2:2b:41:ee:02:22:ff:c8:dc:87:d4:a6:
dd:83:b8:8a:6b:f7:93:36:c7:fd:8f:c9:ee:de:5c:
fc:8b:a1:d1:8e:66:c4:5c:75:57:7f:64:35:15:e3:
c0:14:bb:fd:11:22:c3:24:0f:c0:43:c7:8d:a8:82:
a8:89:2c:ef:1e:06:e1:25:e2:89:5c:e9:5c:3d:ea:
e8:a2:ea:a5:d0:4a:57:57:ba:b6:cd:b9:9f:25:f7:
69:5c:d8:ab:3a:d6:57:77:1a:2e:73:9b:81:bb:98:
f9:c8:27:15:54:42:54:09:c7:fa:21:aa:4d:cc:7c:
15:88:22:07:0f:f3:94:1d:65:1f:ce:ff:8d:e7:60:
54:a8:bf:79:55:44:9e:0b:f8:9a:b2:c3:d0:de:22:
15:94:6e:45:ea:3e:66:71:d7:aa:6b:e4:65:8d:c5:
65:c8:f6:54:fc:c6:55:c2:e8:d5:38:e3:f4:ce:d0:
ec:53:d1:7e:f4:23:7b:5d:d8:5b:69:f6:be:0e:d9:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:99:F3:C8:79:D1:D5:CA:C6:10:0B:01:CD:55:99:D0:80:2E:B2:26
X509v3 Authority Key Identifier:
keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:42:30:cd:f1:f2:c2:45:0f:cf:42:4d:34:73:5c:0c:37:0e:
d0:b2:e8:98:57:9d:1f:df:b8:b0:10:88:0a:f2:c8:5c:89:25:
23:87:cf:c5:0c:4c:3c:88:cb:1c:8c:5d:5f:e6:50:0c:f8:cd:
cc:0c:5b:92:22:88:55:07:85:65:18:8d:1a:11:c8:f0:b6:f3:
26:c4:f6:ed:67:fd:e0:3c:fb:24:7c:76:38:d4:31:88:7e:3b:
eb:79:1c:67:73:33:39:72:ee:c8:1c:50:f2:0e:f1:9c:cb:1b:
4a:a3:b4:1a:31:a0:aa:d2:cd:ea:a3:e3:ae:25:0c:51:3f:59:
0c:56:6e:1b:fa:89:dc:88:df:2b:b5:47:ea:dd:b8:60:c1:a7:
fe:d0:ce:f8:90:bb:88:06:bc:9b:2f:13:58:ae:cd:d1:12:f9:
f8:71:b8:30:ff:f1:ca:22:01:c0:64:6a:df:93:fc:40:28:7a:
2f:11:ac:8d:ae:05:b9:1f:f4:b6:ca:27:50:60:9b:f7:2e:fb:
d6:81:b8:11:01:4e:a9:32:d7:d5:fb:67:4b:c7:0b:15:36:d3:
2b:d5:2e:c4:dc:0b:e7:38:c7:86:15:2f:7b:d3:3a:c2:5a:0a:
49:95:46:bc:8a:cf:0d:c9:9a:b5:e2:29:43:74:54:a9:3c:ca:
44:23:6c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:36 2025 by rpki-client