Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
File: G_GA7KTkQF6Heotjkjp1iNd-OdI.mft (raw, json)
Hash identifier: C66xIU+oN6xChXcCO9tOjdqRwglzNGcfgac7l0ETIUU=
Subject key identifier: 7C:4B:67:26:40:30:8D:58:BC:A4:F1:FC:1A:98:8C:D2:58:6B:6E:6E
Authority key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
Certificate issuer: /CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Certificate serial: 0199225528D3264C9AF4F8DFEAE6A76FA9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
Manifest number: 05C8
Signing time: Sun 07 Sep 2025 04:00:30 +0000
Manifest this update: Sun 07 Sep 2025 04:00:30 +0000
Manifest next update: Mon 08 Sep 2025 04:00:30 +0000
Files and hashes: 1: G_GA7KTkQF6Heotjkjp1iNd-OdI.crl (hash: PZgIlD08GHt7As51QRe3sRqAOtaTssNDpRMWg0Zulb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:28:d3:26:4c:9a:f4:f8:df:ea:e6:a7:6f:a9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Validity
Not Before: Sep 7 04:00:30 2025 GMT
Not After : Sep 8 04:00:30 2025 GMT
Subject: CN=7c4b672640308d58bca4f1fc1a988cd2586b6e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:00:98:21:2c:45:6d:27:e8:fc:33:d9:50:
4f:bd:63:35:d1:3e:58:af:e1:60:b7:99:a9:0b:ea:
bd:a2:f1:46:4b:76:ce:15:5a:c2:dd:e4:25:00:2e:
de:8a:da:4a:2c:d7:a5:7c:53:97:5a:67:b0:c8:ea:
8f:c9:bc:77:ba:d4:6c:af:95:f1:91:a7:d1:0c:6c:
0d:4e:2a:15:8b:ea:a9:c9:f4:72:b9:a3:6d:c9:c1:
84:57:4b:97:f6:bc:55:a1:1a:bc:2e:4a:ed:8b:fe:
66:48:84:d6:07:4c:3e:29:44:d2:cf:af:b1:40:db:
72:5a:68:20:23:3c:19:d2:d2:98:85:39:e8:e4:44:
18:25:71:10:70:f3:15:84:8d:3b:30:ca:0b:57:45:
49:65:9d:9f:84:5f:59:9c:3b:e7:03:0b:37:11:4d:
80:92:35:3d:50:78:bf:ee:e4:59:54:d4:7f:38:16:
7a:69:83:b8:41:a3:09:32:c6:bc:8d:68:fc:3d:78:
8b:a4:64:5e:27:aa:3b:42:e6:f1:ab:aa:dd:8e:d2:
3c:50:f6:6e:78:2e:95:00:29:d5:d7:e7:fa:d9:45:
7b:a7:7d:10:5a:a7:10:5f:ea:c1:b6:0e:32:c5:b3:
0b:5f:7f:cc:13:28:b9:09:f4:f8:64:da:51:45:4f:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4B:67:26:40:30:8D:58:BC:A4:F1:FC:1A:98:8C:D2:58:6B:6E:6E
X509v3 Authority Key Identifier:
keyid:1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6c:45:89:ac:75:6a:0b:ac:66:87:ce:65:44:8b:0f:dd:d8:
7d:39:eb:e3:13:f1:ec:ce:78:01:b6:d7:50:a4:2d:19:ce:bb:
4e:37:d7:39:58:64:6b:57:25:25:c3:43:5a:6d:25:3f:8b:6b:
5a:50:3c:ca:92:ee:11:3b:44:f8:54:6e:d7:81:5b:85:45:ae:
29:28:4e:1e:4e:97:b6:63:4f:0a:12:f3:b9:d0:f9:b0:16:d1:
c6:39:9d:46:92:82:8d:cb:8b:67:45:a7:36:15:f7:1a:d1:b1:
1e:cf:a4:3b:55:90:09:03:45:d8:2f:b1:04:06:b3:6c:1c:39:
95:37:83:ca:bd:6b:b2:e9:76:f8:47:f3:9b:36:3f:84:5b:92:
ec:fe:dc:4f:b8:e1:a6:7b:90:2c:45:35:9b:4f:60:a8:32:ee:
5a:3b:f4:98:5a:d1:7e:58:9e:14:80:ff:1f:ec:fa:e3:ad:d0:
4c:11:d1:fa:9b:25:4c:c8:32:3f:0d:28:9e:24:c6:4d:e5:ad:
1e:6e:7b:0b:83:e9:a2:6d:9f:ae:92:64:51:df:80:11:da:3a:
35:b6:aa:55:be:fb:7e:62:f9:69:cc:fd:d4:33:39:41:8a:07:
d6:de:85:6b:38:7d:76:3b:28:08:e5:b4:35:20:0e:42:4b:f4:
bb:45:40:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:32 2025 by rpki-client