Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier: e1gcFFZs3NiExBFsH7V8XOC2ih3f6SGQw8yxnI/Cwwc=
Subject key identifier: 66:16:13:F8:33:C7:9C:17:1C:B2:F7:CA:4A:F1:A7:47:B3:07:12:EF
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 01976BF40586A2EE716347432BBD0B252D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number: 1233
Signing time: Sat 14 Jun 2025 01:00:43 +0000
Manifest this update: Sat 14 Jun 2025 01:00:43 +0000
Manifest next update: Sun 15 Jun 2025 01:00:43 +0000
Files and hashes: 1: 1ISrUMvXtY8idtkbmSmcNCBmXOs.roa (hash: JdzcjRC1qPASLJAyKXCJZ2jvTuTxM21yeidKZ9A5IsQ=)
2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: YQy5XkLkcHk2ouSfCJryHeh7DThf+ztJPH1Hs60caVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:05:86:a2:ee:71:63:47:43:2b:bd:0b:25:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Jun 14 01:00:43 2025 GMT
Not After : Jun 15 01:00:43 2025 GMT
Subject: CN=661613f833c79c171cb2f7ca4af1a747b30712ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:6f:d9:60:67:85:58:e1:3d:63:22:41:2f:
9f:d3:cc:8f:fb:01:92:2d:79:10:e4:25:ef:c8:1d:
6a:fa:4b:9f:4f:20:9d:7d:f6:e7:5a:cb:43:0d:ce:
3a:af:d8:e8:21:73:49:22:73:c6:50:7c:42:d6:c1:
58:5e:e2:87:a2:e2:46:51:d3:40:46:de:1f:22:1d:
51:3b:34:27:4d:7d:ee:f9:b5:51:44:12:62:1a:11:
40:0c:ac:30:48:b3:ff:cb:42:f8:6e:36:e9:9a:05:
21:43:f4:4d:11:92:12:ff:57:67:98:87:df:81:1c:
3a:bb:db:cb:be:be:bc:6b:fe:78:d9:51:51:f3:c3:
0b:81:ef:8d:af:d8:a4:40:14:9c:62:f1:24:01:62:
7f:ca:ba:f9:3c:32:ba:50:ab:17:ba:0d:99:a4:ca:
b8:42:32:a1:da:54:d1:db:29:be:35:df:c4:20:ad:
c4:bc:09:99:7a:99:e9:79:1b:42:de:f5:78:d5:45:
9d:6c:6c:b1:08:11:df:d5:49:17:6d:89:f3:3a:1b:
e8:54:4a:d8:f8:73:c2:5a:2c:14:dc:3b:70:5a:fc:
1f:2a:b3:f9:56:c6:6a:98:f5:30:3e:14:7d:f6:a6:
a0:f9:c0:47:33:f8:54:6e:5b:ec:01:fb:4c:bb:76:
01:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:16:13:F8:33:C7:9C:17:1C:B2:F7:CA:4A:F1:A7:47:B3:07:12:EF
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:40:ed:a6:23:9c:b3:48:86:d2:b2:8f:fb:bc:b7:b1:3b:72:
6b:93:d2:b0:e8:8e:06:a8:5d:e1:3d:ba:3f:cc:89:e8:c0:b5:
d8:43:5e:12:bf:01:b7:33:2e:fb:9b:9e:a1:c7:64:4a:1b:46:
8c:4d:b0:47:99:72:e0:d8:18:c2:78:9d:08:90:63:0b:aa:4c:
3b:ea:b0:02:17:2b:0f:52:61:2d:fa:b1:7f:05:cc:3f:d8:e6:
ed:19:c7:d6:f4:bb:72:49:c0:9c:01:0b:82:4d:dd:65:4e:3e:
54:87:f5:dc:4e:4c:6a:9a:24:af:f4:bb:11:b1:57:3d:5f:a4:
45:f5:fe:ca:ce:26:b0:9c:d3:c1:a5:8c:c0:9b:98:d3:fc:71:
2d:ce:74:e3:cf:d4:5e:8a:6d:a6:c9:e8:33:15:7c:a7:ee:14:
d4:a4:58:1e:69:90:aa:42:fc:16:56:df:f4:f2:6b:6e:a2:4a:
78:36:ff:60:26:7d:10:28:bd:f3:3d:8b:22:7d:44:dd:6a:0b:
eb:bd:5e:45:9e:37:89:97:c2:97:cf:e6:fd:1f:07:29:be:a1:
42:46:c2:68:48:b2:eb:0e:4c:d7:c4:16:79:0e:31:f3:79:3e:
79:0d:87:e9:4b:25:71:ae:2f:53:54:84:eb:3a:93:be:a5:7a:
98:58:1a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:20:21 2025 by rpki-client