Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: hZsWEjHevYlLXpPn0YFnraR9+sTbkHD8hA7UtRZ8n8s=
Subject key identifier: 9B:23:ED:41:04:36:84:9A:8B:5F:8A:39:D6:65:34:24:E2:85:17:9B
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 0197488CC191C7671B12F78671E6068492A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 04:01:13 +0000
Manifest this update: Sat 07 Jun 2025 04:01:13 +0000
Manifest next update: Sun 08 Jun 2025 04:01:13 +0000
Files and hashes: 1: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: cojGRnrXmvU/8EflrYZu1TvYDt6OLmaM3SiJTHqzRhY=)
2: hwl_pJftKoYgWaDLkyi1NUP4Iqo.roa (hash: zD6uA78lx0+tAtyuIqfvTt4SALf3UDD47V0kgwtFI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:c1:91:c7:67:1b:12:f7:86:71:e6:06:84:92:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Jun 7 04:01:13 2025 GMT
Not After : Jun 8 04:01:13 2025 GMT
Subject: CN=9b23ed410436849a8b5f8a39d6653424e285179b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:21:f1:67:72:db:2b:30:82:8e:1a:1d:83:
24:aa:d0:10:67:e9:5f:ae:b6:5a:4b:f3:04:69:e9:
fd:a4:1d:c8:9b:08:11:05:ed:23:b1:ad:fc:56:d5:
28:5d:85:2d:fe:f3:4e:cb:fd:0e:46:d9:aa:48:2e:
f9:03:98:86:cb:a6:0e:3b:5e:61:ca:f5:61:27:3e:
aa:0f:eb:12:04:fd:81:c1:1e:d0:18:f5:d1:77:30:
39:ef:1e:c8:38:c8:c1:fb:bc:41:fc:77:83:b6:57:
ff:88:18:e3:1b:25:aa:dc:db:b4:00:16:41:a1:4e:
4f:89:12:60:36:cd:c3:a4:f8:f3:23:68:74:11:e5:
53:be:ab:5b:4d:76:c5:ce:af:72:c0:60:b2:8f:f8:
7c:b3:da:ba:a9:aa:d0:8b:f9:3e:5a:b2:b3:06:9f:
55:ef:b4:d2:b1:dd:fd:e8:9f:ea:0f:ff:fc:ca:66:
e7:d8:b7:8c:38:0d:8b:75:a3:94:3e:6f:a1:a4:cb:
d8:15:c0:17:9c:aa:fa:1c:1d:e3:63:d7:6a:01:ec:
a2:47:05:b5:9d:af:c2:c9:01:d8:e0:55:a5:4c:6b:
bf:c5:91:ab:f0:15:40:36:21:51:cf:eb:64:f4:53:
6e:ea:72:cd:a5:b0:55:32:5b:c8:da:d4:75:4b:89:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:23:ED:41:04:36:84:9A:8B:5F:8A:39:D6:65:34:24:E2:85:17:9B
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ff:6a:58:f6:09:26:92:e8:15:f7:16:81:dd:1e:b7:ac:63:
ef:a8:e9:0c:95:8a:be:93:3c:d6:8c:1a:02:16:8c:ea:d0:c5:
71:87:42:be:32:16:e4:6d:bb:d1:f7:03:3a:17:88:25:ad:5f:
34:07:74:e3:07:4e:c8:92:b2:e4:1d:49:2e:53:f8:ee:0d:1d:
74:2c:ca:ee:7b:da:c1:f4:27:83:c1:fb:d5:2f:d3:5c:3a:bd:
fe:b3:7f:5f:b1:c1:8c:8f:b9:60:08:68:d1:a9:e7:91:12:3d:
ac:23:e5:4e:f4:3f:cf:75:42:c2:56:25:0e:be:fe:35:c1:f4:
29:fe:8d:a8:0a:a9:d2:a3:88:35:50:4a:8c:fe:91:3e:78:4a:
ff:38:e1:e6:e6:5c:7c:10:4a:c2:0c:79:5e:fd:cf:99:ef:ff:
a1:74:04:75:63:61:d1:a9:73:73:b6:91:02:d7:a1:4c:7e:54:
82:8f:7d:f0:1f:bb:5c:fa:0b:88:42:df:11:62:c0:30:9e:c2:
33:db:7c:4f:52:85:2b:9f:f8:26:61:64:c4:6d:c2:85:73:2e:
e7:e8:1e:da:70:98:1a:50:cd:b9:d9:ce:d3:59:0e:c1:80:f3:
18:84:e1:77:68:1a:a9:01:d9:93:7f:4e:77:0f:27:30:bb:fe:
40:11:33:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:44 2025 by rpki-client