Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
File: G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft (raw, json)
Hash identifier: rfhgGLytLPCaGV2wRekdVd8Qt2N+3eyDkYkVBZFEqqQ=
Subject key identifier: 13:DF:9D:BD:6C:89:0F:00:35:AE:0E:80:4B:83:2A:45:4B:99:72:2E
Authority key identifier: 1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
Certificate issuer: /CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Certificate serial: 019894B679AEFA550132E37B49EB803947F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
Manifest number: 15BA
Signing time: Sun 10 Aug 2025 16:00:43 +0000
Manifest this update: Sun 10 Aug 2025 16:00:43 +0000
Manifest next update: Mon 11 Aug 2025 16:00:43 +0000
Files and hashes: 1: G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl (hash: wkg9cyyDN//eNJurXU13jDNQ8Q6RQ1u8YLNjh5YkDuQ=)
2: h-vjilG4zsTOTFr8jyiuNr7YOYQ.roa (hash: J1qho6qvh9PzDmhMh26kyKPFY1m2ydeARTE83gY+gJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:79:ae:fa:55:01:32:e3:7b:49:eb:80:39:47:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Validity
Not Before: Aug 10 16:00:43 2025 GMT
Not After : Aug 11 16:00:43 2025 GMT
Subject: CN=13df9dbd6c890f0035ae0e804b832a454b99722e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:02:ef:d5:84:98:5d:58:97:a4:b0:29:77:
73:15:e7:1a:ef:11:88:7f:69:f0:cc:21:62:2c:c1:
63:c7:47:eb:39:57:cb:10:7e:9d:6c:ea:ac:9d:bc:
55:3d:3e:31:21:cd:3a:86:39:91:10:4c:bb:61:e9:
b7:07:01:3b:4e:64:4a:f7:f3:68:07:3d:8f:54:2e:
d1:a0:a3:c6:aa:53:68:c3:03:52:da:01:38:8e:f3:
07:41:b2:97:11:12:f6:70:70:66:99:f5:dc:fe:8a:
5e:72:22:84:96:a4:b0:36:87:eb:b4:55:b8:75:74:
25:64:7f:ed:c3:c6:77:b5:38:00:7a:77:68:22:cb:
e5:95:22:14:d4:9f:53:e8:44:15:85:13:08:a5:94:
a3:50:04:d3:73:b1:a4:de:ac:1a:f1:0a:7e:a2:df:
de:a8:e9:38:67:9d:27:0e:e1:82:0f:f9:ec:8e:32:
01:b6:7c:05:c1:2f:5d:31:a4:6b:8d:fa:41:4a:ed:
f6:4a:57:77:ed:c4:bf:fc:3e:d5:6f:d8:6c:ae:0d:
43:ff:30:1a:db:f5:4a:25:69:42:a5:3c:bd:df:4e:
ee:4a:bb:8d:0c:42:64:6a:0a:4d:d5:45:8b:9c:cc:
30:73:40:20:eb:5a:11:cc:1b:16:f5:91:80:d3:e8:
f9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DF:9D:BD:6C:89:0F:00:35:AE:0E:80:4B:83:2A:45:4B:99:72:2E
X509v3 Authority Key Identifier:
keyid:1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d2:be:51:11:04:53:80:93:7d:a2:fb:2d:aa:6f:cf:63:f5:
85:67:b0:21:c8:74:83:61:8e:a6:1b:9e:35:37:f7:72:4f:9c:
da:25:e1:cf:29:33:30:8e:fa:3e:10:6a:44:ee:6c:04:a0:c1:
93:cf:f1:78:fd:8b:11:fd:69:08:d4:63:5b:cb:61:05:a9:63:
78:e1:43:ce:59:5f:83:9d:99:1e:08:11:11:e4:18:19:81:95:
63:b8:a9:1c:f9:42:a3:6c:08:82:1b:ac:9a:35:e3:73:e3:aa:
06:df:d7:28:2e:5b:ce:ee:27:2a:37:7e:80:5c:ad:39:6b:83:
2b:a6:cf:5f:22:6e:62:44:63:82:41:eb:a7:b1:85:31:5f:9d:
80:5e:9c:0c:60:22:f1:99:c2:da:c8:06:bf:3c:58:0e:9a:36:
86:24:01:6d:0e:7f:ce:51:1a:95:5c:a8:95:a8:0f:94:47:81:
70:29:6a:20:e4:32:37:71:d7:df:f1:5d:84:56:e3:60:ad:a1:
1f:85:d1:b8:b9:55:4e:cb:50:c2:28:35:ba:f3:3d:36:3a:f6:
32:2e:64:a1:2a:34:dc:f0:c8:2e:d8:e3:7a:42:5d:00:50:85:
fc:1b:bc:b4:1f:8a:f2:9a:12:b4:d2:60:94:75:e5:c7:c2:a2:
dc:62:a1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:16:18 2025 by rpki-client