Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: uSR/5Eaa9+ZmRv1sFMrql4QfjgIdwzAV+LKQCJUN12M=
Subject key identifier: 3F:2C:E4:5A:F5:FE:9E:C5:20:4F:76:13:17:01:1A:F8:7C:A8:13:68
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 019768BC42ED685167ADF5015BB40A6D8DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 12A5
Signing time: Fri 13 Jun 2025 10:00:57 +0000
Manifest this update: Fri 13 Jun 2025 10:00:57 +0000
Manifest next update: Sat 14 Jun 2025 10:00:57 +0000
Files and hashes: 1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: 06r1exMkXt6SqkOEDsZLX5rPG3KmR4E0c5nr4f1oWlg=)
3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:42:ed:68:51:67:ad:f5:01:5b:b4:0a:6d:8d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Jun 13 10:00:57 2025 GMT
Not After : Jun 14 10:00:57 2025 GMT
Subject: CN=3f2ce45af5fe9ec5204f761317011af87ca81368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:ca:2a:43:a9:54:34:b1:a5:4b:77:51:d4:
83:cb:06:b1:40:7f:65:f7:95:10:6d:59:2d:da:86:
e2:e7:4f:06:e1:34:da:f9:50:fb:55:fc:b2:28:47:
e3:f5:ad:40:55:dd:12:5a:92:a9:41:e3:f4:26:67:
1c:d0:1d:d6:08:0c:f2:29:0f:8f:65:1e:b4:66:50:
8e:78:c0:42:48:4e:dc:a1:cc:61:56:e8:48:9f:19:
84:b2:fb:e4:69:d0:4e:77:63:b8:c6:49:81:28:ad:
7c:43:a0:dc:fb:75:68:5c:70:e4:7b:d9:d2:2f:22:
0e:e6:e2:fd:fd:72:7d:37:50:9b:ae:24:f4:7f:b4:
b0:c4:3c:b7:a5:f9:c9:34:e4:c2:d6:3b:bd:00:8f:
9e:46:8e:e5:b3:a1:3f:8e:4a:d4:9e:3a:6b:70:0c:
b9:d3:e1:05:87:2e:0f:7c:31:ea:cf:6b:6e:50:5f:
88:8e:9d:48:c8:a9:9c:a4:c7:f5:07:4f:01:e2:db:
c9:7d:8a:e7:c3:5c:57:3d:df:bc:83:45:e4:91:03:
79:eb:04:f7:17:99:ab:b2:de:3e:dd:98:a8:26:d8:
8a:b7:16:eb:bd:a5:26:f1:31:1a:23:9e:65:8f:83:
62:3f:e9:d7:dc:9f:e8:4c:34:49:ed:81:55:e3:19:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2C:E4:5A:F5:FE:9E:C5:20:4F:76:13:17:01:1A:F8:7C:A8:13:68
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3e:92:d8:d2:e0:6c:88:25:e2:e8:3c:18:ac:77:02:fa:d5:
bd:4d:7e:dd:ec:39:23:82:49:09:75:88:20:04:75:31:aa:d1:
7f:6b:09:ce:ed:a9:be:83:79:83:13:d1:4b:a3:2f:c5:55:19:
cf:74:e5:e0:f6:8e:fd:0a:2a:af:eb:6b:c8:b3:be:e9:8d:c2:
44:51:ee:b9:57:88:80:29:68:fc:9d:88:4e:7e:68:44:f4:53:
c7:c9:d0:fc:ac:f4:95:5f:1f:d1:1b:0e:b0:01:84:c9:76:68:
be:36:11:e0:15:a8:5d:4e:65:ba:2e:0c:c8:aa:ad:1f:7d:f0:
5c:28:6c:44:4c:35:d8:df:b8:ab:a0:6d:8a:74:ec:6f:23:e2:
5d:15:b7:ff:aa:65:25:45:71:d6:80:95:a1:81:06:cd:5e:2b:
eb:67:31:4a:c6:47:59:dd:d8:fb:26:b8:69:f5:b6:5e:ca:24:
31:00:82:f1:8f:4a:5d:5b:0d:39:1a:fe:13:c5:91:9b:6f:52:
c6:7a:cc:2c:ea:65:f5:d1:07:ee:64:3d:1c:64:54:00:20:eb:
42:e7:a9:5f:9c:5e:4a:30:a1:a6:69:ec:c6:ea:71:f1:d8:24:
55:86:97:dd:de:08:c5:09:9b:d9:10:85:31:3e:aa:9b:91:81:
e6:4c:27:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:36 2025 by rpki-client