Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json)
Hash identifier: 9vrcGi3PJVG8sR64pUVyDbz08j11AjaDi2bD0ywA5w0=
Subject key identifier: BF:95:70:FC:4B:3E:D8:65:DC:E0:B7:95:50:45:4A:24:B2:C3:0D:E7
Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Certificate serial: 01991809C7048FFFF87211112BABFB4F694B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
Manifest number: 09D3
Signing time: Fri 05 Sep 2025 04:01:57 +0000
Manifest this update: Fri 05 Sep 2025 04:01:57 +0000
Manifest next update: Sat 06 Sep 2025 04:01:57 +0000
Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: mVUpySaEj+LDR3w8b04vfThtfEeecXSKoKBNXJkKjJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:c7:04:8f:ff:f8:72:11:11:2b:ab:fb:4f:69:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Validity
Not Before: Sep 5 04:01:57 2025 GMT
Not After : Sep 6 04:01:57 2025 GMT
Subject: CN=bf9570fc4b3ed865dce0b79550454a24b2c30de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:61:c2:f1:11:aa:e4:cc:ec:7e:15:da:eb:2f:
c6:00:ef:64:7c:b7:da:8d:08:ab:f3:5a:28:c2:4b:
ff:a7:8c:29:72:10:47:4f:63:a2:ee:0c:e6:92:a3:
00:a8:fb:18:9f:f4:6d:38:8f:1f:8d:2d:6d:75:3c:
ec:ca:6f:e7:41:ba:2b:a0:18:13:8d:87:6c:ea:ec:
93:74:f2:a9:54:25:ea:31:75:9f:44:64:f4:d5:20:
b1:44:9d:cd:e0:d3:79:48:2c:40:34:16:40:0c:4c:
31:61:75:62:83:39:11:ea:96:73:8b:b2:a0:98:f0:
2b:fb:a9:be:b4:f8:63:9f:68:21:27:69:8b:cf:c2:
25:b4:bd:ef:5c:66:a1:8f:f3:96:59:21:93:06:aa:
71:36:29:56:b0:03:6b:57:bc:d6:9f:21:82:d0:b3:
1b:f2:00:fb:b7:7a:02:59:d2:6b:f3:c0:fe:94:2d:
46:08:17:03:f8:33:40:8d:9b:ff:3e:e1:3c:70:92:
35:ee:a5:f6:b1:ff:34:a7:b8:3f:bd:a9:95:29:4e:
6e:4b:22:b1:1e:9d:2d:a9:3d:69:51:6c:17:f6:f4:
dd:59:ab:c6:34:6f:ea:e6:06:04:d6:5f:1d:0d:2e:
1a:9d:49:eb:05:f2:ad:53:27:e2:2b:2d:81:16:51:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:95:70:FC:4B:3E:D8:65:DC:E0:B7:95:50:45:4A:24:B2:C3:0D:E7
X509v3 Authority Key Identifier:
keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5d:87:85:f9:d5:09:31:8e:b6:f9:f8:35:7c:95:cc:c1:7a:
72:c6:e2:7b:9b:aa:76:ec:a8:f5:cb:a5:b9:0c:f0:a0:5e:fc:
2c:7e:b5:ea:a9:08:e2:7c:bd:15:00:48:ee:5b:3a:44:8c:a3:
84:08:14:1c:87:9c:1e:4f:8c:bd:dc:e4:12:6e:3e:a0:39:85:
3f:72:f2:b3:0e:18:d5:ee:53:fb:c5:3e:c1:cd:03:3c:a4:1e:
cf:af:ef:82:10:ac:1e:13:a4:bc:d8:04:e3:6b:cf:0a:92:e2:
8e:e1:33:65:6b:61:e9:71:87:12:d2:9a:66:0e:b1:fd:43:72:
ef:9d:85:2c:65:ff:6a:7f:4b:2c:3b:f2:86:b4:d2:f8:08:93:
fc:30:d7:e3:1c:eb:c0:4e:42:30:63:38:1b:c7:89:69:da:b8:
5c:75:8b:4d:7e:f9:fc:07:1f:47:19:25:94:b6:fd:67:60:0e:
b6:9e:72:59:21:5f:0d:59:f8:63:6f:28:05:06:09:40:b8:2c:
0a:44:f5:94:62:b5:e5:2a:bc:36:7e:f3:82:f1:90:10:de:ad:
04:8e:66:48:d5:24:7d:57:7b:75:54:fd:07:51:bb:77:6f:a9:
b0:23:a0:f1:74:a9:bd:0b:ee:09:da:fd:65:85:72:c7:5f:33:
21:c2:fa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:52:03 2025 by rpki-client