Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft
File: G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft (raw, json)
Hash identifier: HyZUZ1hVuBo+2iypvNstnMU9gm3RPniAybxFAv4+/GQ=
Subject key identifier: 76:9B:2E:2F:D4:6D:D5:06:D3:3F:87:79:7E:04:29:34:F3:FA:BE:6D
Authority key identifier: 1B:69:30:1F:A8:D7:88:E0:2F:7E:B2:FA:88:02:10:90:74:20:6C:FE
Certificate issuer: /CN=1b69301fa8d788e02f7eb2fa8802109074206cfe
Certificate serial: 01988EEC955DED0432569742853FAAC09905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2kwH6jXiOAvfrL6iAIQkHQgbP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft
Manifest number: 01CB
Signing time: Sat 09 Aug 2025 13:02:06 +0000
Manifest this update: Sat 09 Aug 2025 13:02:06 +0000
Manifest next update: Sun 10 Aug 2025 13:02:06 +0000
Files and hashes: 1: G2kwH6jXiOAvfrL6iAIQkHQgbP4.crl (hash: AYk/hVhwQoeQB+Dmk79UbdRlGlOA56EHVuwYGz1Y9qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2kwH6jXiOAvfrL6iAIQkHQgbP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:95:5d:ed:04:32:56:97:42:85:3f:aa:c0:99:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b69301fa8d788e02f7eb2fa8802109074206cfe
Validity
Not Before: Aug 9 13:02:06 2025 GMT
Not After : Aug 10 13:02:06 2025 GMT
Subject: CN=769b2e2fd46dd506d33f87797e042934f3fabe6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:e5:f4:9a:d6:d7:c5:d1:c2:ec:26:c3:41:
78:60:4a:13:dc:ba:ba:32:2a:26:d8:2d:46:2c:f4:
c5:90:dc:e5:1f:96:57:e2:63:0c:8c:54:d2:1b:4c:
f9:25:91:4b:b6:ae:ba:e4:4b:ee:58:90:f1:c8:ca:
37:b9:01:d6:a8:55:fc:c3:1c:d2:a9:53:eb:38:f4:
b4:7e:e3:4c:d2:a9:6e:92:be:0c:81:59:5e:e9:d4:
f7:de:64:e3:d3:0f:29:bd:b6:cc:49:f3:26:bf:97:
c4:46:dc:c0:56:0d:ce:4a:4f:f3:ac:ca:db:eb:28:
cc:aa:db:d3:d2:57:c9:84:90:ea:cd:77:cb:18:90:
6a:91:cf:b1:41:74:f3:4c:fc:c2:8b:de:d0:82:68:
c2:7f:e6:ea:4c:00:e4:39:42:36:82:88:8c:33:16:
cd:7d:5e:e2:e8:79:b5:a7:9a:65:06:66:21:ae:f5:
76:c8:a9:63:0d:69:75:f6:16:58:49:0f:1d:49:08:
d4:ff:ae:35:f1:62:46:00:e0:1a:93:88:fe:d8:72:
90:f7:7b:24:b6:b3:66:42:ce:07:65:3b:3a:bf:e0:
2d:cc:16:ec:1c:5c:c5:18:ec:0e:c3:e4:12:b2:59:
ae:7e:83:2d:32:fe:af:03:f2:64:74:95:7e:40:86:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9B:2E:2F:D4:6D:D5:06:D3:3F:87:79:7E:04:29:34:F3:FA:BE:6D
X509v3 Authority Key Identifier:
keyid:1B:69:30:1F:A8:D7:88:E0:2F:7E:B2:FA:88:02:10:90:74:20:6C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2kwH6jXiOAvfrL6iAIQkHQgbP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4d:9b:eb:3a:86:9b:5e:65:78:3a:a0:7f:97:4b:e1:12:35:
1d:8f:87:5d:72:a4:8e:b2:9d:a9:e9:04:6e:37:92:f8:80:62:
be:31:19:1a:2f:b3:9d:7b:ac:ee:4f:4d:09:db:7c:47:56:de:
c4:58:f0:70:55:27:f4:2b:63:35:dd:2c:09:66:fe:6c:15:22:
ad:00:d4:f8:32:5b:82:9a:c2:04:fc:34:c3:f8:b2:7d:9b:f8:
ec:76:d4:3d:ab:82:3d:13:96:d7:88:0d:c7:88:bd:11:43:57:
e0:d7:e8:ad:1b:68:7f:c8:bd:56:59:fd:52:f0:2c:ee:e0:a0:
df:cd:e2:99:d5:0f:1a:ba:7d:f5:37:7e:cc:c9:1e:59:a6:d6:
82:d4:ff:84:90:6c:ff:8a:d3:ac:84:72:46:fa:e5:17:ee:5b:
bf:77:70:fe:0b:f4:57:20:9a:45:fd:b2:f5:1d:4b:22:e5:87:
a5:9b:03:70:22:23:df:76:9c:ab:9b:8b:f8:6a:41:90:a1:45:
b2:25:80:5e:f2:89:0c:b9:71:c1:a2:06:21:a5:53:fc:89:0f:
72:98:8a:c0:51:3b:a9:a7:73:6d:84:cd:42:c7:23:1d:88:cf:
19:2e:09:ca:a7:ce:1f:f9:a7:af:14:8c:92:6a:a7:28:38:a8:
eb:ed:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:07:07 2025 by rpki-client