Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier: xwCPM7scdfzezv1ENzhry2YxsRkVWRVdi/+T5scAg/U=
Subject key identifier: F7:1B:45:7D:49:9C:68:38:4D:73:65:C2:03:80:2E:57:FC:62:05:C0
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 01987E2EE61650B004864E66C5372263C84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number: 12C1
Signing time: Wed 06 Aug 2025 07:00:59 +0000
Manifest this update: Wed 06 Aug 2025 07:00:59 +0000
Manifest next update: Thu 07 Aug 2025 07:00:59 +0000
Files and hashes: 1: 1ISrUMvXtY8idtkbmSmcNCBmXOs.roa (hash: JdzcjRC1qPASLJAyKXCJZ2jvTuTxM21yeidKZ9A5IsQ=)
2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: 3M15LC8InYNFbTn7cK10C+BtekK7o0IbsPA3hgwCHEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:e6:16:50:b0:04:86:4e:66:c5:37:22:63:c8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Aug 6 07:00:59 2025 GMT
Not After : Aug 7 07:00:59 2025 GMT
Subject: CN=f71b457d499c68384d7365c203802e57fc6205c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:46:f4:95:bc:2d:a0:79:b1:16:ac:b4:53:
12:7a:bc:07:f9:b9:79:04:1d:e1:0e:02:11:6f:02:
c8:3e:3c:15:97:df:9c:3d:3d:15:62:52:04:41:3c:
fc:a1:45:2f:07:e3:92:fa:da:c4:d6:21:f2:22:16:
72:8a:4c:c1:a0:5e:29:91:e6:c9:dd:29:b5:06:39:
04:76:49:9b:13:ed:cd:a8:bd:81:f2:d9:0a:78:60:
46:0e:1f:0a:28:cb:12:0a:36:de:71:99:1e:d2:c9:
5b:e0:0b:ad:45:6b:ea:cf:f4:3c:a7:05:1c:ad:d7:
8f:73:62:c1:65:94:df:4f:49:38:d1:1c:11:19:01:
55:40:f5:94:fc:54:4b:72:66:a6:ba:ca:04:0b:61:
d9:24:34:86:49:55:0a:ed:f4:0f:a0:2a:e9:c4:75:
3a:56:a3:1b:85:2b:b1:0a:a0:7a:fe:a6:41:9c:7c:
4c:5b:f5:27:e2:61:61:8e:6b:ba:0e:52:25:95:8b:
e8:72:bd:78:f6:c4:52:50:85:79:72:27:26:6e:cc:
35:5a:cf:89:cb:ee:be:b1:1a:6d:7b:ea:32:61:6c:
c4:cb:ab:bb:c2:4c:07:1c:49:5c:d2:dc:6f:20:93:
03:32:ab:90:aa:a9:b1:ff:fd:6d:49:e6:bf:f8:d1:
cd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1B:45:7D:49:9C:68:38:4D:73:65:C2:03:80:2E:57:FC:62:05:C0
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0e:52:eb:e5:58:98:e7:fb:b6:02:f3:b1:30:70:40:26:55:
6b:77:55:ac:8f:b9:f7:a7:ed:47:45:36:d1:43:1d:78:a7:4f:
84:07:68:2c:fa:91:73:68:68:46:eb:93:8b:b3:d9:e8:c7:b3:
1c:bd:c3:0e:3a:9b:07:7a:55:68:86:b8:a8:9f:74:7c:35:c4:
90:dc:62:ee:ae:e5:12:17:02:91:5e:25:91:3a:1c:77:ca:a8:
8a:e7:a7:67:c9:92:00:c6:29:ba:55:de:7d:34:77:20:6d:8f:
d4:fd:f1:88:56:8e:bd:b3:bc:61:31:ed:24:70:1e:34:24:14:
99:80:9a:e5:ee:88:20:ae:da:95:d6:3e:2e:24:a5:91:31:81:
4c:d6:2f:5b:18:cb:18:a7:14:25:20:f1:d6:28:a4:6f:a1:8f:
c8:47:4a:13:55:6f:7e:47:f6:2c:20:78:3b:54:43:b0:58:30:
1e:85:46:5a:49:c3:fd:4d:74:d4:31:09:20:93:05:9d:e7:04:
7e:f7:ea:99:34:b9:36:ca:6c:47:d9:64:d2:0f:81:10:1d:a3:
ce:3f:8c:4a:33:cd:ad:58:f9:e7:61:a7:8e:8a:ee:51:db:0b:
c9:e9:bc:3b:8b:a4:f1:02:30:bd:37:9a:58:b1:72:49:db:ac:
24:f0:0b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:09:49 2025 by rpki-client