Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: rrlQpEj6EjRCKfb65lfV7YHELuyI7/L+6XlVonJGo5o=
Subject key identifier: 42:C0:30:02:CF:A8:68:5C:01:14:96:E1:1A:2B:6B:BD:BD:79:23:D0
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 01987C408BCE8A57EB722E406CE9435D6993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 09BB
Signing time: Tue 05 Aug 2025 22:01:01 +0000
Manifest this update: Tue 05 Aug 2025 22:01:01 +0000
Manifest next update: Wed 06 Aug 2025 22:01:01 +0000
Files and hashes: 1: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: xt5aXmG3sHeIzEeqf8IZTtLu2hdHyusYbBSBrFztKkY=)
2: n_fySMb2KYofNdbrb087aj1eYn8.roa (hash: 77dWHMesUhSClZQyjFlFJHiSjQfgTnJaM+uBOMHku1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:8b:ce:8a:57:eb:72:2e:40:6c:e9:43:5d:69:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Aug 5 22:01:01 2025 GMT
Not After : Aug 6 22:01:01 2025 GMT
Subject: CN=42c03002cfa8685c011496e11a2b6bbdbd7923d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:64:71:52:14:97:7e:05:81:3e:14:06:ff:
cd:b4:10:aa:92:e5:16:e7:06:2c:84:66:71:44:14:
1d:c4:19:a7:bb:92:6c:87:16:00:77:ed:cd:7b:b8:
cd:11:95:e9:db:bf:80:72:e4:a7:e6:74:ca:98:2e:
f4:40:e2:33:aa:81:51:af:51:03:0e:8e:9c:3f:87:
f7:52:99:9a:4f:32:7f:ac:9b:ac:35:9d:fc:78:a6:
b5:40:c7:96:8a:cc:44:d5:4e:ba:55:33:02:cd:09:
dc:6c:a0:5e:d5:71:78:cd:36:c7:5a:c5:60:37:1c:
68:13:ee:41:89:2a:68:78:16:f4:71:e0:28:d3:ef:
38:da:74:5e:13:90:8b:6a:83:1e:86:0e:1f:a3:75:
be:40:44:63:47:c1:f6:b4:85:de:af:94:8a:8e:01:
ce:aa:71:b6:99:77:a1:ca:7d:94:b0:26:34:71:36:
30:ef:1d:25:9d:6b:cd:e5:4c:bb:45:e3:56:2f:54:
56:fb:59:e1:d1:4c:e0:9e:52:47:44:ee:74:63:86:
f3:1a:9c:6e:ee:ec:fe:bd:3f:48:32:c6:f1:8f:92:
2c:d8:02:38:f0:0a:11:80:ba:fb:d6:2f:c3:cf:9c:
73:4c:ea:b1:41:b5:40:09:45:b9:06:e8:48:32:74:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C0:30:02:CF:A8:68:5C:01:14:96:E1:1A:2B:6B:BD:BD:79:23:D0
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:95:a2:44:2c:30:09:dc:82:85:30:37:2c:bf:f3:34:ea:3e:
9b:5c:f7:aa:55:03:57:42:6e:1b:6d:7b:dc:6a:50:43:8b:44:
99:30:2e:01:85:76:f8:a0:f4:27:f5:ec:cf:54:55:99:bf:67:
22:8e:41:a8:07:44:32:96:1e:2a:c1:ab:2d:87:24:ad:d1:e6:
e4:6e:8d:75:4d:1f:17:47:da:c0:97:09:a5:6c:27:ad:c9:13:
09:2e:0c:5f:5a:2b:65:4e:e8:cb:02:3a:34:e0:de:b4:74:96:
fd:89:7c:b7:20:6f:32:e5:c5:4c:f6:12:ce:fd:cd:1a:bc:03:
1b:48:32:c8:78:84:8c:0f:8d:f1:6e:44:9a:67:bb:a9:4b:a7:
c2:7c:8a:7f:5d:b8:7e:1a:37:b8:d8:21:ac:63:fe:71:01:eb:
7c:0b:b3:2b:87:07:4b:03:4b:b1:65:f2:56:63:b7:46:66:65:
f3:5b:f5:ae:57:72:e7:89:81:04:90:33:36:bc:9a:67:0a:93:
6e:8f:2f:48:e9:d2:b1:69:9c:44:f8:22:2f:fe:1e:e3:87:11:
50:09:89:5d:b9:35:eb:38:a3:b5:6a:eb:07:33:40:86:24:f5:
aa:5e:19:34:5e:6d:e0:d4:a0:fc:91:19:df:95:68:74:89:60:
66:07:ce:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:13 2025 by rpki-client