Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
File: G7Qd9-pn1O3-D60S99XOzYPhjZo.mft (raw, json)
Hash identifier: OyTiueMp1exkOJMg2xkQRL21ZqcsLqXnvyMf6y2A0lA=
Subject key identifier: 79:32:05:92:53:22:67:16:15:A5:74:27:4E:D4:43:0A:4C:50:0C:7A
Authority key identifier: 1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A
Certificate issuer: /CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a
Certificate serial: 01989E959E13882AD0707577C205D01192A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
Manifest number: 040A
Signing time: Tue 12 Aug 2025 14:01:02 +0000
Manifest this update: Tue 12 Aug 2025 14:01:02 +0000
Manifest next update: Wed 13 Aug 2025 14:01:02 +0000
Files and hashes: 1: G7Qd9-pn1O3-D60S99XOzYPhjZo.crl (hash: MJHHWGYfvM3j+DqhCa8adNVMjgFz4lYTTPBl8xtnaSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:9e:13:88:2a:d0:70:75:77:c2:05:d0:11:92:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a
Validity
Not Before: Aug 12 14:01:02 2025 GMT
Not After : Aug 13 14:01:02 2025 GMT
Subject: CN=793205925322671615a574274ed4430a4c500c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ec:b1:13:6c:af:3c:9f:57:e8:27:fc:df:0f:
f7:dc:c2:78:9a:08:19:ed:68:3e:1a:12:4c:60:b3:
6c:7c:75:82:32:46:db:0b:61:05:a2:e8:a3:76:2a:
b9:b9:df:8c:49:17:e4:f8:42:e5:d7:d8:50:ff:e9:
23:56:45:a6:90:1f:1e:64:58:65:12:98:5e:d8:54:
d0:fc:33:9d:cb:7c:24:52:67:9a:a5:a4:0a:ae:93:
d0:c9:1f:dd:d5:46:12:6e:15:59:a6:ea:c7:95:31:
59:47:39:2f:31:ab:66:b0:ea:4a:5c:32:60:c1:8c:
b3:36:7c:83:29:c5:d7:43:70:13:7a:f1:7d:93:b4:
18:70:cf:bc:25:2b:be:da:a3:0c:3c:8d:9c:d3:45:
28:ac:04:2e:59:b2:f3:3f:9b:e9:fc:8d:c9:5c:0b:
2a:f2:c3:b5:28:79:cd:31:c5:f3:c8:2c:58:ff:bf:
5a:0a:0f:70:bc:e9:2a:b6:59:22:7a:d5:2c:67:43:
eb:da:d7:0b:ec:5e:a8:2c:d9:89:04:5e:43:61:79:
4c:e1:f8:1c:da:e5:ec:7c:4e:c2:cd:a5:c9:c2:79:
6e:11:7f:12:0b:20:81:de:74:61:af:3c:66:70:b0:
b7:fe:d3:2b:11:47:63:6a:a7:4b:3d:73:40:61:17:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:32:05:92:53:22:67:16:15:A5:74:27:4E:D4:43:0A:4C:50:0C:7A
X509v3 Authority Key Identifier:
keyid:1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f2:b2:8a:1f:12:ae:94:1a:16:8d:d4:14:e3:e3:2f:14:99:
dc:bd:5b:b6:e5:91:95:b5:5a:fe:37:de:7b:9a:f7:58:15:f7:
99:d4:7a:b4:1f:3d:68:a4:ea:11:9f:77:f4:1c:aa:b1:d9:40:
48:43:d0:cd:df:81:d1:22:de:12:05:62:99:33:e4:0b:39:db:
75:b2:09:26:ff:4a:8f:ee:73:32:28:c5:68:d5:90:05:fc:ef:
7d:78:b9:b5:d8:e4:1f:1e:00:da:01:c5:0e:60:59:28:0b:4f:
f6:1c:bc:de:79:c7:1f:0e:35:11:91:cc:1e:52:22:ab:d7:82:
1d:ec:cf:1a:e8:b1:66:f1:79:ce:87:30:80:38:00:9e:de:29:
e9:bf:2b:04:63:a0:60:b2:1b:4d:d7:fb:b3:66:e3:fc:2f:43:
4e:99:a7:52:66:e0:e7:35:66:36:97:09:d7:76:9f:f3:bd:5a:
42:1e:87:35:ec:8d:24:12:bb:fb:e6:cf:93:7a:d0:8e:07:7f:
5d:b4:de:ac:5a:03:7c:a3:7b:61:78:b4:87:77:47:d5:00:7a:
17:32:a1:81:6b:8c:e4:9a:96:aa:e7:44:01:18:ff:7f:35:25:
b4:80:68:df:1d:a4:8f:86:3f:91:f7:66:26:92:0c:9d:9f:33:
c7:1e:3b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:14 2025 by rpki-client