Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
File: G3NaOdmSptxEu-c6TZm-PIQvqWg.mft (raw, json)
Hash identifier: RxHZn9tm9/C/mJpWC5GNpGTIWY7S3R6RRQKalPQDGSc=
Subject key identifier: E2:90:9C:99:92:3B:1A:A8:7B:1B:02:E9:AC:D3:D3:8B:75:AD:B4:88
Authority key identifier: 1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
Certificate issuer: /CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Certificate serial: 019921E7F0FE28118BAC06EF30B5FECCFDBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
Manifest number: 0400
Signing time: Sun 07 Sep 2025 02:01:12 +0000
Manifest this update: Sun 07 Sep 2025 02:01:12 +0000
Manifest next update: Mon 08 Sep 2025 02:01:12 +0000
Files and hashes: 1: G3NaOdmSptxEu-c6TZm-PIQvqWg.crl (hash: YRXOhGFhM5u5TQ7/tQ+lenDV69PQ7ywRtxgjrXK0LDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:f0:fe:28:11:8b:ac:06:ef:30:b5:fe:cc:fd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Validity
Not Before: Sep 7 02:01:12 2025 GMT
Not After : Sep 8 02:01:12 2025 GMT
Subject: CN=e2909c99923b1aa87b1b02e9acd3d38b75adb488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:1a:26:db:59:af:92:33:0c:d8:6d:2d:62:
35:e6:4c:40:74:ad:86:69:ca:67:18:47:e5:ff:5a:
c3:ca:a0:38:c9:f0:77:18:b3:87:29:7b:b5:84:ef:
78:e5:b6:aa:3a:42:b4:7b:38:d6:27:0e:d9:7b:02:
2f:d2:81:09:27:a4:4c:03:ff:60:42:ae:85:a1:c4:
52:fe:45:5a:b8:ee:e3:dd:28:d0:c7:a4:cb:b1:e2:
b1:7a:1f:31:5a:92:f6:2b:81:ac:f0:64:0c:71:d9:
3e:37:00:e7:a3:4f:77:7a:32:23:d7:6b:6b:41:39:
20:74:28:4b:1e:12:b8:02:fe:51:4d:7f:73:4e:f3:
c4:05:09:a5:39:d1:25:3a:ca:35:5b:cc:8e:8b:f3:
0e:7d:d3:d4:77:b2:d6:ec:03:95:cd:ab:12:43:ff:
2d:43:65:6b:64:cb:9f:ef:32:e8:e9:4a:b6:7c:70:
c2:b1:38:aa:87:57:74:5a:cd:b5:25:42:1e:27:c5:
74:2b:7d:ab:0e:ef:7c:b5:db:db:b9:e4:4e:20:ab:
b6:37:94:25:ec:18:c6:ca:08:0f:41:f2:43:a2:6f:
6b:b2:ae:a7:14:04:8b:30:52:01:85:4e:45:6a:eb:
7b:ab:b7:e3:d0:03:98:47:78:95:2b:54:12:9e:cb:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:90:9C:99:92:3B:1A:A8:7B:1B:02:E9:AC:D3:D3:8B:75:AD:B4:88
X509v3 Authority Key Identifier:
keyid:1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0e:ae:ac:f2:46:6a:ae:8a:80:39:22:58:f5:18:20:e5:d1:
35:49:5d:17:35:91:55:2d:2c:a6:fb:54:cb:76:aa:9e:9b:b4:
09:01:47:f6:11:9d:a5:d9:cc:a0:e3:fa:ae:0a:82:20:55:f9:
b4:9b:4c:23:36:9c:20:26:58:89:05:5b:67:bf:57:cb:b9:bb:
8f:82:75:98:03:13:a7:52:4c:dd:33:71:4e:92:70:11:87:9e:
64:1a:fb:24:2f:07:65:a2:ce:de:d3:5e:fe:6e:88:0d:82:45:
40:a4:b3:4b:b1:e7:03:00:92:64:1d:f3:19:87:e2:fa:c8:e9:
d3:e4:0c:35:12:da:49:b3:d3:82:d5:35:31:b6:b5:4b:88:19:
13:0b:ca:94:86:f6:ca:7b:c7:01:98:94:2b:97:08:ba:b0:8b:
54:80:a9:98:e0:5a:0e:b7:2b:26:06:5b:c4:8a:4c:9a:e3:7a:
66:f8:f0:1e:11:fb:d2:ca:a6:55:1a:1e:a2:c1:95:4c:dd:0e:
47:49:62:48:5b:8c:11:98:9b:d9:3b:6d:e9:6b:02:90:30:57:
5b:f9:a7:ce:f3:74:e1:23:5c:fa:8e:0d:a3:ea:8d:24:45:02:
b4:0d:3b:69:12:c2:c4:85:29:cc:a0:87:25:3f:de:bd:ab:dd:
62:ac:e2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:55 2025 by rpki-client