Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: yXz5r1ZQR5Ie4oKlMS5ugJUJeFcms+fvhjX41E30zn8=
Subject key identifier: 0F:E3:42:3F:A0:E0:7F:1B:EC:3E:43:92:5F:DF:7A:C6:BE:DF:BF:BD
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019873E2CEF19B38B1065491B22891261320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 07:01:40 +0000
Manifest this update: Mon 04 Aug 2025 07:01:40 +0000
Manifest next update: Tue 05 Aug 2025 07:01:40 +0000
Files and hashes: 1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: YhwQCw92JQvhfeixiYyF/OBVhsU2QnJyhnIrlloSNag=)
3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ce:f1:9b:38:b1:06:54:91:b2:28:91:26:13:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Aug 4 07:01:40 2025 GMT
Not After : Aug 5 07:01:40 2025 GMT
Subject: CN=0fe3423fa0e07f1bec3e43925fdf7ac6bedfbfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:1a:58:b1:6c:7d:cd:ec:5b:07:e4:2a:4b:
d5:d2:83:22:d1:d8:dd:9e:60:22:38:90:1d:81:d4:
6b:8c:62:0f:81:5c:14:fd:52:e4:97:6e:8e:85:f5:
d7:b3:ad:68:0c:37:f1:12:e5:05:58:47:2e:62:ed:
f6:3f:08:a4:c5:90:e3:34:94:9c:2b:ef:b9:38:90:
d7:25:d1:4b:fc:3b:e9:b5:16:04:4b:f8:95:41:d5:
59:71:53:d8:dd:c9:54:ce:ac:b6:ed:09:c5:ec:5a:
4c:8e:03:94:6f:1a:2a:32:98:2c:91:ef:04:89:ea:
d1:75:65:9c:6a:73:30:a6:08:0c:cf:20:31:96:bc:
88:04:37:5e:55:10:06:34:22:ad:fd:0c:6f:3c:e9:
9c:15:98:33:c7:e2:03:00:04:13:f6:98:9b:a9:2d:
0a:53:c7:e2:32:4d:80:2f:8f:4e:a9:7d:97:cb:33:
c1:f0:27:2c:83:22:cc:3c:23:cc:4a:f9:30:60:33:
27:27:97:aa:43:a8:fe:4b:36:bb:ad:56:0a:29:3c:
65:c5:cb:0c:89:cc:29:0b:e5:5a:17:bf:c5:fe:86:
6e:45:4d:23:66:2d:d5:6e:e1:93:82:b6:0e:50:9f:
48:9e:bf:e3:35:ba:a0:ed:6a:0a:89:e0:b2:bb:a5:
25:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E3:42:3F:A0:E0:7F:1B:EC:3E:43:92:5F:DF:7A:C6:BE:DF:BF:BD
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:19:8f:59:95:45:5c:a6:e1:fd:8e:a6:d8:34:32:96:87:88:
68:b3:e5:e5:3b:29:2f:dc:f1:55:ac:84:91:d8:70:1d:3d:25:
ed:4b:c1:69:e4:5e:77:71:62:7c:81:ed:fd:91:92:21:c4:8a:
9b:96:9c:d4:4a:bc:ad:e8:d5:02:5e:77:6e:20:c3:b9:e2:f3:
8d:6a:a3:d8:6d:32:92:f1:24:e7:24:bf:27:7c:2e:e5:28:60:
15:66:08:5e:80:89:18:42:34:19:0b:52:f7:e7:8a:96:1b:82:
db:86:e0:7c:8a:68:87:7d:09:50:8f:d3:df:d0:cf:a9:c2:83:
fa:24:2b:9d:72:7f:47:1a:fe:91:e5:45:8c:05:68:2e:b5:7f:
e3:65:93:3f:d2:af:e8:86:76:0f:55:fe:0b:e5:30:1a:d0:83:
bb:8c:0a:59:e6:ff:03:0e:18:ce:7a:aa:c9:7c:c8:8b:65:ac:
28:26:08:f3:be:43:c8:a1:77:50:8e:f9:bd:12:37:48:6c:8a:
d9:88:06:8e:0b:de:ac:cd:1f:f4:f6:7e:8a:63:84:99:d0:de:
28:16:7e:30:52:31:30:ae:0c:81:65:fe:08:88:77:ff:1b:5c:
c9:58:ba:52:bd:4c:a4:c3:45:82:1e:19:91:dc:2d:98:32:f0:
69:70:b3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:13 2025 by rpki-client