Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File: G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier: rko/Aa0N7d3j4nJ8f5b22uTDcjp8mybGoKZkdZ22R+E=
Subject key identifier: 11:26:B8:B3:20:C9:D5:F5:F4:66:DA:23:B5:D4:E3:87:31:D0:66:5C
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer: /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial: 019882B0E37BA537548BC4A289B4E3F256D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number: 0566
Signing time: Thu 07 Aug 2025 04:01:27 +0000
Manifest this update: Thu 07 Aug 2025 04:01:27 +0000
Manifest next update: Fri 08 Aug 2025 04:01:27 +0000
Files and hashes: 1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: QeEz1jixbaRB8YaWiS3qucRW8F8ORE00zyCutDDaD2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:e3:7b:a5:37:54:8b:c4:a2:89:b4:e3:f2:56:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Validity
Not Before: Aug 7 04:01:27 2025 GMT
Not After : Aug 8 04:01:27 2025 GMT
Subject: CN=1126b8b320c9d5f5f466da23b5d4e38731d0665c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a2:b9:3d:92:c4:74:a4:50:b0:12:62:33:e4:
5b:97:6f:7d:f7:ac:ce:89:71:69:96:1e:0b:f0:30:
b2:97:7b:e5:ae:27:29:d3:6a:a8:8d:9a:e3:14:b0:
1c:f0:74:4a:e3:cd:b2:09:bc:c1:aa:95:a4:1d:b1:
20:d6:38:e1:61:e5:95:0e:ad:80:39:10:c9:90:21:
1b:0a:7d:f3:21:40:c4:74:ab:fa:29:d1:95:0d:02:
82:3f:f8:53:39:8a:8f:ff:dd:ed:b7:fa:c6:34:a6:
4d:9c:13:b3:8f:92:15:c3:ec:1b:83:98:81:da:df:
e8:3f:4d:43:b9:8e:f3:d2:57:7a:4f:1f:bd:2d:3c:
3d:5f:37:37:63:a5:82:d8:06:c9:8f:d6:68:94:8b:
eb:48:60:a9:cc:4a:c7:46:bb:58:84:cb:be:bb:99:
bd:64:10:23:df:24:68:25:0e:6d:ec:42:f0:f0:00:
99:ca:98:95:c5:e9:d3:9f:ac:d7:ad:f9:53:60:a5:
e3:8e:7c:df:48:7f:ba:9f:25:e7:4f:fa:5d:a4:ab:
3a:f6:a3:62:81:87:36:1a:2e:a4:53:c8:52:af:27:
bd:ce:fb:fe:01:b0:e2:87:b2:6d:f0:ca:cb:36:c5:
a0:a3:d0:de:58:b9:88:3c:09:cd:c6:f1:36:81:a5:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:26:B8:B3:20:C9:D5:F5:F4:66:DA:23:B5:D4:E3:87:31:D0:66:5C
X509v3 Authority Key Identifier:
keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4b:85:50:e4:69:71:51:0e:53:12:32:00:e6:39:7e:d1:c5:
35:c6:6e:ec:1a:6e:f2:59:b0:10:f7:79:82:78:e9:13:21:41:
45:dd:c1:4c:18:37:ae:e7:48:b7:aa:8c:8a:56:21:7d:b3:a0:
6a:7b:99:02:03:8d:95:54:21:32:d5:75:07:27:36:16:b0:02:
58:a3:eb:8c:c5:3a:cc:8c:79:d6:ce:82:48:b7:12:f5:b3:b6:
9b:55:ac:63:9e:b3:59:df:4b:59:c5:d2:d1:56:ca:92:b0:42:
08:ba:7f:36:82:8b:af:17:21:76:fe:8a:12:ca:9c:48:f9:dd:
09:8e:80:2d:fe:e8:85:7e:6b:70:c0:ea:31:50:75:bd:59:b1:
b2:9d:6c:35:4c:e6:b8:9d:84:1a:1d:3b:de:d6:89:f8:15:6b:
e8:93:8a:9a:92:27:e9:32:ab:e7:75:86:58:6b:11:6e:f6:f5:
53:9b:fb:f3:e5:36:db:df:23:29:03:de:26:e2:c3:65:31:fc:
66:c8:fd:bd:94:d2:09:ab:f6:c8:19:75:9f:1f:75:0c:97:28:
4f:99:9c:5f:54:fd:cc:35:d6:aa:d2:d4:70:68:14:41:4f:f4:
bb:56:85:5e:86:e2:4b:5f:d9:67:eb:05:f7:05:ef:43:ac:8f:
f3:ca:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:36:51 2025 by rpki-client