Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: gBknNWYjmcNM2VFVUqfjkR++GuXTA7jB7a6cbQrH2Jc=
Subject key identifier: 64:A6:3D:7E:7A:98:55:63:38:1A:CA:67:80:0D:99:7A:2A:1E:DA:6B
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 01993725867A7326DD06D3BE8E6FDE40C74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 0EA3
Signing time: Thu 11 Sep 2025 05:00:30 +0000
Manifest this update: Thu 11 Sep 2025 05:00:30 +0000
Manifest next update: Fri 12 Sep 2025 05:00:30 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: Ch6zKVMLpT9AfeYiVbMVYFiXeu2EqmxmtqOd/i307Ug=)
2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:25:86:7a:73:26:dd:06:d3:be:8e:6f:de:40:c7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Sep 11 05:00:30 2025 GMT
Not After : Sep 12 05:00:30 2025 GMT
Subject: CN=64a63d7e7a985563381aca67800d997a2a1eda6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:51:82:2c:a7:e1:ec:9b:33:d7:66:ae:95:
55:5a:6d:27:62:6e:d7:d1:9a:fd:11:46:b7:7f:7c:
c2:2b:da:9e:00:d2:a9:29:c1:f9:7d:be:fe:76:43:
c0:27:f3:7c:64:95:b6:36:1a:53:fb:98:84:be:5c:
d1:9d:e7:b3:42:b1:b2:67:ae:e4:51:23:e1:95:ac:
5d:9f:6a:df:b4:e8:11:ee:e6:42:45:c4:f2:5e:01:
29:45:91:df:fb:df:b9:ad:f0:9c:52:10:54:8e:17:
10:4f:bd:f2:56:65:79:ed:7f:00:c9:03:8a:c3:1b:
22:82:98:da:2c:1d:56:2a:52:6c:d8:2d:bb:40:85:
92:c0:4c:de:42:d7:5f:6f:7f:32:33:c3:d6:4a:f1:
38:87:2d:35:41:df:7d:63:4c:bc:44:e9:6a:f5:21:
a4:37:32:53:a5:cc:a8:86:b3:eb:34:2e:c7:dd:a7:
eb:60:71:4e:af:ce:2c:49:e3:4a:cf:15:e7:5b:53:
27:1f:68:fc:14:09:b5:3e:b9:59:23:3c:ac:b9:c5:
3a:8f:8b:a3:50:a0:06:6a:cb:93:b3:16:45:7b:20:
62:aa:f9:0b:df:17:ce:73:ce:56:34:66:6d:52:0f:
bc:c1:8d:7e:b0:0c:3b:ee:9e:88:41:33:f8:e2:43:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A6:3D:7E:7A:98:55:63:38:1A:CA:67:80:0D:99:7A:2A:1E:DA:6B
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b7:48:93:db:62:58:e9:07:6c:5d:55:e9:b7:c3:0a:e2:9f:
8f:a3:1b:dc:e9:0e:8f:3f:fe:ca:6d:a2:bd:a9:a0:4f:ea:40:
ef:cc:c5:d9:6f:b6:a3:fd:00:01:9f:e9:21:a7:c9:4c:5c:01:
d4:d7:aa:65:48:13:7c:aa:52:d2:16:2b:2f:77:1c:ef:a6:42:
af:92:d2:40:c9:42:0a:b4:3d:69:7d:9b:81:2c:62:4a:d4:10:
6b:57:28:33:7b:14:25:a6:06:d3:a7:0d:c7:f9:cc:36:45:47:
1b:f9:ba:5a:dc:09:7a:19:ee:7a:c8:33:91:b8:a3:bf:7f:2c:
2f:79:0c:68:a6:ab:13:05:4e:b9:8d:ca:ea:b6:27:cf:59:29:
ec:f8:07:68:bb:c7:e0:80:f9:11:65:1e:49:c9:91:58:87:da:
d8:65:ca:cd:d6:de:db:95:44:86:71:9a:c1:45:a2:b2:fb:ac:
9e:5f:07:81:3b:1a:cf:ed:14:9f:ff:21:c5:e9:19:72:4b:6d:
a9:52:44:45:a4:22:b2:1a:f6:01:29:69:ed:9a:4d:38:fb:5e:
a7:40:50:09:51:e8:7c:62:a0:be:35:a1:74:19:42:46:5e:1b:
e7:84:62:62:04:22:96:23:40:bc:01:31:ee:4e:06:0a:ad:30:
cd:11:ff:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:59:23 2025 by rpki-client