Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
File: G6jqOiKIpq-PZKg4MALHQIVXmgc.mft (raw, json)
Hash identifier: N2y36kZWD99avx2vsr9g7UxnrjAK/dduj5eQRZWFn2I=
Subject key identifier: 89:B7:D3:10:40:FB:CE:C4:41:70:B8:BC:B3:3E:88:1D:B8:55:55:4B
Authority key identifier: 1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
Certificate issuer: /CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Certificate serial: 019922C32D57678C4558E8DC8E6E72AAE7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
Manifest number: 150C
Signing time: Sun 07 Sep 2025 06:00:40 +0000
Manifest this update: Sun 07 Sep 2025 06:00:40 +0000
Manifest next update: Mon 08 Sep 2025 06:00:40 +0000
Files and hashes: 1: G6jqOiKIpq-PZKg4MALHQIVXmgc.crl (hash: t6fghW3HzC3s9O7/HALhVy8NnOinP2M89x4d2uuTinE=)
2: awSvsuAzEkNxIrYxJqTZDb_nVnE.roa (hash: 3jZ+yIojuG+AZ6SFsISQRAEfZSYSxHFN/YCIQpbx+o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:2d:57:67:8c:45:58:e8:dc:8e:6e:72:aa:e7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Validity
Not Before: Sep 7 06:00:40 2025 GMT
Not After : Sep 8 06:00:40 2025 GMT
Subject: CN=89b7d31040fbcec44170b8bcb33e881db855554b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:ff:68:89:5a:2d:3c:92:1d:8e:82:2b:be:
7c:20:db:99:35:83:4f:d2:bf:3a:24:54:54:77:09:
02:e9:ef:41:d0:b7:59:52:48:32:15:c8:db:e5:a3:
e0:34:ba:e7:d6:60:61:5e:1a:a9:77:f8:a9:9b:0d:
3c:f2:6d:a1:4b:4a:bf:dd:ba:bf:4a:a9:e3:ea:bb:
0b:f0:ca:67:ae:69:ad:85:d9:22:ce:05:43:36:24:
54:5b:5a:20:ab:5b:c8:ce:2a:b6:16:b4:81:ed:08:
35:57:5e:ee:1d:70:00:69:43:d5:af:88:48:5c:4d:
7d:e1:d0:a1:54:95:a9:22:86:d6:ee:3c:3d:5d:d8:
46:d6:da:73:ac:36:2f:c2:98:59:57:b5:35:2c:ff:
85:8c:31:17:a5:c5:ff:03:27:2c:55:cc:5e:96:08:
db:6c:f4:fe:43:12:e8:5f:65:f5:c2:08:8f:ed:8b:
20:2f:bc:f9:d3:46:94:92:d1:11:48:f3:24:31:90:
4b:6b:85:fa:b6:e8:3f:f3:bf:3e:17:9f:71:40:04:
ca:2f:e4:b7:6b:c2:34:c4:4e:fc:63:eb:82:71:6f:
68:7b:ab:93:1b:88:45:7c:58:b0:08:6c:25:9e:5d:
49:63:d0:4f:23:d3:59:d4:70:72:a0:b7:2d:e0:c7:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B7:D3:10:40:FB:CE:C4:41:70:B8:BC:B3:3E:88:1D:B8:55:55:4B
X509v3 Authority Key Identifier:
keyid:1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8f:c2:15:e3:98:c7:98:e6:b4:da:6c:dc:3b:4f:db:4a:21:
4f:cd:11:69:e0:4a:64:4a:d1:d8:91:04:c1:90:6a:9d:06:e6:
53:de:78:41:7b:f5:69:97:56:d9:33:35:e6:2c:d4:ea:cb:64:
5c:ca:df:73:53:e0:48:5a:df:b8:68:c4:27:73:ed:d9:2a:8d:
5d:df:35:3f:81:7f:8a:6c:2a:9f:7e:ca:93:67:16:e8:af:80:
86:a4:82:16:f2:6f:d0:60:49:d6:0f:9f:e9:60:87:4d:c9:12:
ac:e0:77:cd:39:bb:eb:55:2e:98:9d:63:ac:68:54:fa:47:7d:
b5:0c:49:cc:b8:bd:dd:84:ee:35:bc:14:a8:5b:5c:f7:3d:b0:
41:a6:a5:c3:00:d0:d9:a7:f5:40:79:e3:7e:e5:85:8b:b9:e3:
a5:27:13:57:b6:ba:c3:6c:05:46:17:0b:f3:d8:83:7e:04:5f:
b8:78:0d:92:76:e9:8a:d9:be:e8:20:38:cd:6a:97:5e:51:fa:
f2:23:42:4b:5b:cb:e9:24:0b:52:de:5b:ec:2f:79:08:39:a0:
0f:a8:e4:4d:c0:03:29:46:6b:12:74:91:9b:62:f8:6c:40:43:
b3:96:4b:02:7b:b5:0a:8c:6e:36:63:7c:8c:39:2b:10:9c:ae:
c9:15:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:39 2025 by rpki-client