Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: wIUv7gXMJPCPfabBWgi4LYxoOoa+kCHF6PMmolomTs4=
Subject key identifier: 76:3E:DA:63:A6:7D:79:1A:C5:D5:3C:85:C3:A2:28:B4:2D:EE:86:80
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 0198737418A43FA11DB62884A9671EC7F079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 14F0
Signing time: Mon 04 Aug 2025 05:00:44 +0000
Manifest this update: Mon 04 Aug 2025 05:00:44 +0000
Manifest next update: Tue 05 Aug 2025 05:00:44 +0000
Files and hashes: 1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=)
2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: GQwbBlO7cw0cWNnj+kWB0Xcnon9yxpG3yrQXvDgGmv0=)
3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:18:a4:3f:a1:1d:b6:28:84:a9:67:1e:c7:f0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Aug 4 05:00:44 2025 GMT
Not After : Aug 5 05:00:44 2025 GMT
Subject: CN=763eda63a67d791ac5d53c85c3a228b42dee8680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:a1:f6:70:30:0b:99:14:42:da:de:2e:37:
10:d6:8b:3b:17:37:8a:3a:a5:ba:79:2a:69:e1:8c:
7d:bb:3e:1a:75:3b:81:c1:12:a6:52:8a:b1:1c:09:
74:0a:b1:b8:dc:bd:08:c7:16:80:00:d3:11:4c:21:
e4:1b:0e:9b:f3:a4:4b:11:d8:fd:b5:5e:db:b7:7e:
bb:09:3a:a3:96:6d:1f:9b:4e:ee:26:fd:fe:61:34:
1b:30:62:fc:4f:c0:b8:64:e7:d5:65:9e:f9:96:63:
63:d1:ca:8a:b7:f3:16:50:33:d8:12:52:46:dd:48:
db:e9:2e:d5:7b:19:92:6a:a3:9c:02:c5:3b:01:28:
7e:1c:23:c4:da:a8:18:34:87:a1:1a:a5:bf:13:f4:
f3:04:e1:59:ca:83:c8:05:0b:50:5a:5c:dd:6f:81:
9a:fc:4f:1f:17:1c:33:e6:a4:07:46:d5:ba:82:32:
c7:f5:1c:ab:63:cf:d8:af:d1:d6:78:f6:31:8a:81:
b4:93:5d:8c:93:8e:d4:3f:22:ae:f6:95:a9:d0:e7:
89:c3:51:7b:9d:98:6a:31:c3:64:7c:c6:d7:7a:49:
39:f6:82:b1:57:92:01:20:d9:e5:41:99:5e:49:d2:
c5:be:b9:d3:f2:e2:09:7f:1e:42:be:25:6d:85:b5:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3E:DA:63:A6:7D:79:1A:C5:D5:3C:85:C3:A2:28:B4:2D:EE:86:80
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c7:43:4c:02:e3:53:60:b6:b7:f5:12:a0:46:92:78:b1:b2:
4e:67:3c:db:c9:76:d2:45:a6:0a:0e:af:8e:80:30:7f:d9:f4:
52:ca:1f:95:42:f0:cd:54:51:93:4e:4e:7a:84:eb:2a:d8:25:
56:be:ed:09:33:75:94:2b:c3:75:1a:18:36:90:2e:a6:5d:e0:
94:d5:51:c7:5b:48:c3:fc:47:1e:06:7d:2b:d1:91:e0:e0:3d:
85:76:52:d3:00:8d:f1:71:26:0e:27:d1:2a:80:95:c5:1b:72:
ac:41:ef:97:f1:45:20:66:20:05:cc:e4:ac:34:d2:fc:a0:9c:
59:10:a1:83:21:9d:25:8f:bc:fc:e8:9b:88:03:5c:a2:2c:42:
00:99:98:be:ee:aa:3e:ca:71:9c:86:b9:f2:fe:79:77:3e:47:
3e:ca:37:5f:81:5b:1d:b1:8b:54:b2:81:b9:78:50:a6:8f:34:
77:a3:16:93:e8:34:5d:4e:c7:5e:30:56:90:3b:88:cd:ad:1a:
44:dc:1f:ef:67:8e:e5:81:1c:44:71:5c:87:15:98:14:40:22:
b3:d5:67:5f:b6:ce:53:86:96:29:b6:e7:57:9b:9b:8e:3e:d0:
f5:35:18:21:83:f9:ba:49:a5:74:da:9c:a1:7d:2e:a7:95:f1:
25:e6:70:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:48 2025 by rpki-client