Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
File: G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft (raw, json)
Hash identifier: Z/yxdCtrm+IFpUAjAII7CoiqJPuxTAJJwMnST2ZIhJ0=
Subject key identifier: CA:D9:DF:B1:8F:56:73:40:F0:70:21:7C:79:43:1A:85:23:D4:6D:FA
Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
Certificate issuer: /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Certificate serial: 019873743866959CAE2FB8BF11226D6D0968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
Manifest number: CB
Signing time: Mon 04 Aug 2025 05:00:53 +0000
Manifest this update: Mon 04 Aug 2025 05:00:53 +0000
Manifest next update: Tue 05 Aug 2025 05:00:53 +0000
Files and hashes: 1: 1-QgVdEVAtmDVzPL1t30XEpMkKpg.roa (hash: Nb18hgZy/dUiDthUh4PrNXR3WH0/oCbuHBjHexDpA0Y=)
2: G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl (hash: bWAl6FTrPoKKJTSoJ0efPNS9oJL7EcsRe8BU+kxPZu0=)
3: G1iTz--AdrX58wnteKblePSt-Jw.roa (hash: 0Fp+SXPuf0GKZAv8TJo76eTj4M6Vb7IJbISKBHsaJUM=)
4: pBdQvnX6dKY3XlqUYWMWUMcKsus.roa (hash: 7HSL2j8DzWASbakGMcnWSJulH/02edTERxWRK0JJXZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:38:66:95:9c:ae:2f:b8:bf:11:22:6d:6d:09:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Validity
Not Before: Aug 4 05:00:53 2025 GMT
Not After : Aug 5 05:00:53 2025 GMT
Subject: CN=cad9dfb18f567340f070217c79431a8523d46dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:fd:a9:a4:eb:22:09:51:ee:b8:f0:02:6a:
d4:10:67:b6:02:00:e6:11:d9:65:fb:64:32:2a:5a:
50:9b:ba:64:2a:87:56:d2:f9:b0:eb:7c:89:dd:ef:
63:28:70:10:c2:43:e6:5b:6a:95:80:18:73:c3:c3:
09:0a:9a:c0:66:d3:da:cc:28:a7:36:01:0e:4d:8f:
3a:43:54:9c:b7:ba:a4:4d:5e:71:84:95:6a:43:57:
49:ec:8a:0e:4a:c6:31:c9:98:99:9a:9e:58:4d:2c:
d0:8a:75:a8:46:e6:de:15:e1:f5:da:91:eb:66:87:
a9:29:9e:32:ee:43:c0:6c:c4:74:68:9c:d8:0d:6a:
37:bc:e1:0b:bb:56:2a:cd:36:f4:73:2b:96:75:bc:
15:31:25:4c:70:4f:fa:ed:81:59:0b:4c:b0:de:2d:
a3:8d:14:ed:04:46:6f:47:6e:4f:36:48:4a:81:82:
7d:56:aa:85:a4:ed:6c:73:d5:9c:29:ab:61:9e:2b:
1e:de:af:c1:7b:eb:d7:68:ae:88:9e:68:5b:c8:21:
bf:96:52:bc:f2:b3:fe:72:b3:48:81:cb:8b:e8:1f:
4f:55:3f:92:2e:c4:a2:3f:07:03:f6:e4:c6:d1:e9:
a5:cf:a5:23:3d:55:4e:d3:e7:e7:cf:f2:56:77:d8:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D9:DF:B1:8F:56:73:40:F0:70:21:7C:79:43:1A:85:23:D4:6D:FA
X509v3 Authority Key Identifier:
keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a5:d4:25:36:d3:1f:41:b4:0a:96:47:09:e6:07:57:70:cd:
c8:58:6b:21:c3:95:57:cb:4e:96:03:9c:a0:98:85:d7:0a:23:
40:5a:34:3a:45:0f:37:5d:76:74:c3:7b:a5:b7:4e:cd:10:48:
39:9e:61:d2:4b:53:40:cd:bc:c0:49:e4:1c:88:2d:0e:6a:69:
0d:ba:66:96:85:7e:f5:f9:86:c9:22:34:e3:6d:1d:ac:84:4f:
32:1a:aa:1b:98:c9:08:dd:c9:cc:3e:e1:67:6b:93:85:69:76:
6e:b4:d5:e7:37:e8:2c:82:69:4a:23:2c:a7:2c:b2:e8:77:a5:
35:bc:78:05:21:d2:da:d0:32:4f:54:8f:17:29:5a:58:b2:49:
2a:fb:03:2a:3b:d5:17:6b:75:61:44:bc:56:a9:ae:5a:ba:1f:
cb:af:29:69:82:85:42:ef:48:15:60:75:04:f8:d6:10:2e:a7:
a7:cf:00:e0:05:6b:a6:29:34:dd:5b:c6:38:77:68:5d:77:93:
57:ef:97:04:a2:34:cd:0d:76:0e:a8:32:25:e7:57:76:e2:d8:
bc:12:62:0c:e9:75:ff:46:45:43:dc:1a:df:c7:c3:41:5c:90:
18:ef:4c:85:6b:3d:ff:e7:70:0b:69:a9:3f:9a:39:cb:60:a3:
6c:f8:a6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:27 2025 by rpki-client