
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
File: G7yEG3eaK7LCio2u4rLRDVp8NNU.mft (raw, json)
Hash identifier: HZDArXy7/5Sw47euKdpsQCnA7hMupp6XJuzcj/u7V6k=
Subject key identifier: 70:91:91:45:44:E6:0F:6A:10:E1:94:C2:2A:E0:E5:4E:A8:D3:CF:F1
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Certificate issuer: /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial: 01976FD0E54436DADE453C025AC3F1DA69E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 19:00:50 +0000
Manifest this update: Sat 14 Jun 2025 19:00:50 +0000
Manifest next update: Sun 15 Jun 2025 19:00:50 +0000
Files and hashes: 1: G7yEG3eaK7LCio2u4rLRDVp8NNU.crl (hash: XV8piqGu7WaGWkP8tDfXA9P/wgh5kgI3sfgjtLes/nA=)
2: VBl-ShtkY5AIJWsXxjtVR-loSP4.roa (hash: UuFGS1s0gPMKN8UjwJZO3gcLtja3SP+rxmHIDo2PFTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:e5:44:36:da:de:45:3c:02:5a:c3:f1:da:69:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Validity
Not Before: Jun 14 19:00:50 2025 GMT
Not After : Jun 15 19:00:50 2025 GMT
Subject: CN=7091914544e60f6a10e194c22ae0e54ea8d3cff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:bd:f1:65:c0:ad:bc:27:b1:93:3a:13:9d:
66:f7:10:f7:1b:13:b7:fa:40:96:bd:a1:c4:3c:74:
77:77:45:2a:61:a8:5c:d8:4a:f4:5e:51:b5:8b:eb:
f0:77:91:a2:51:62:07:e6:f4:52:ac:f5:69:0a:d6:
3e:5f:3e:c6:88:c6:9e:03:86:99:8b:5b:cf:3e:8b:
78:bb:5c:85:73:da:df:99:36:47:ef:d2:9d:60:43:
24:21:8d:de:5b:7b:ff:ef:db:7a:de:d0:4c:70:84:
df:cb:d3:19:31:74:d6:a5:66:8b:c0:d8:e2:25:82:
bd:59:fe:fd:2a:40:51:0d:ce:d3:70:71:6d:ab:95:
a9:31:b2:d4:8e:38:ac:43:ac:46:c9:a2:7a:5b:0b:
4c:b5:1c:e9:00:73:cf:d7:4f:71:ac:81:50:5b:c7:
e8:76:6b:a1:c4:75:2a:e9:32:bb:1a:7a:d8:9f:2a:
5d:e4:7c:9f:c7:c4:8b:03:ab:61:d0:54:e7:48:5c:
20:a7:ae:94:10:61:c0:48:d6:49:cf:57:44:ed:2c:
05:d8:96:dc:22:7d:90:fa:e8:aa:8b:35:cb:b4:97:
49:37:b7:7f:9d:f5:e1:53:f5:9f:0c:7b:aa:26:6c:
27:35:6e:4b:1e:67:5d:eb:33:38:da:b9:6d:69:a4:
25:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:91:45:44:E6:0F:6A:10:E1:94:C2:2A:E0:E5:4E:A8:D3:CF:F1
X509v3 Authority Key Identifier:
keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:68:fb:16:d4:ce:3a:f6:9c:ce:e0:91:fe:ee:c7:cc:0b:d2:
54:59:f3:b2:a3:c4:28:82:25:4e:fe:aa:03:b2:d0:aa:07:8d:
21:c1:1a:00:ed:ee:36:78:3c:78:b5:c3:8c:36:68:ce:a2:47:
07:2c:fb:3d:b7:e5:e6:39:af:b6:65:28:3b:eb:cf:5b:e5:a9:
3a:43:cf:a7:31:cf:b9:59:95:b1:6b:10:43:82:04:85:78:18:
2d:f0:13:a5:cc:72:89:fb:8a:8e:d5:e9:e7:d8:56:7a:c5:a4:
a5:d2:d7:4d:59:25:85:e7:0e:a3:d4:9f:a1:7d:d4:75:cb:69:
4d:ae:44:55:cd:dc:99:e0:67:55:f8:4d:84:db:ec:8e:91:60:
5d:df:d8:47:50:5c:ba:37:fb:2c:cd:c0:41:bf:4c:2d:ea:9e:
78:57:5e:29:d1:9c:2e:cc:15:ad:cf:ab:ca:c6:54:7e:8c:c9:
df:c3:8c:52:6f:b6:08:04:c0:d7:c1:1d:a5:04:10:ac:7e:48:
51:36:bc:e1:75:19:b4:ca:a0:d2:a7:f6:06:91:bf:23:1e:b7:
ad:45:8f:80:46:12:df:34:ee:ed:b1:a7:32:e2:12:24:d1:be:
32:26:4c:69:24:83:80:d4:a3:0a:98:92:a7:8f:e0:36:5a:73:
8f:1a:ae:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:15:26 2025 by rpki-client