Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: s0zFk25b4725JTKLkuhlFlxDDNR8xyuxara0NbNI4D8=
Subject key identifier: 06:85:0E:04:EE:5D:1C:82:C1:F7:8A:E0:E0:95:E3:AA:C5:D2:A6:CF
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 019889C58BBF7FC31A2B27E5F40F08987C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 091A
Signing time: Fri 08 Aug 2025 13:01:21 +0000
Manifest this update: Fri 08 Aug 2025 13:01:21 +0000
Manifest next update: Sat 09 Aug 2025 13:01:21 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: FiNRy8vCtYUwQlpLpYkQO7cOF3UrPweNpDMg34hsEz4=)
2: zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa (hash: haMcqGD9VuWSxs2wPMo5yLhdGqSHCO1AnFtOfllpTYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c5:8b:bf:7f:c3:1a:2b:27:e5:f4:0f:08:98:7c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Aug 8 13:01:21 2025 GMT
Not After : Aug 9 13:01:21 2025 GMT
Subject: CN=06850e04ee5d1c82c1f78ae0e095e3aac5d2a6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:1e:d5:1f:aa:d6:af:1f:9a:60:ec:0a:e9:
bb:fc:bc:4d:b1:5a:68:19:be:03:b2:b2:c7:92:43:
82:a1:07:4e:c7:96:60:96:01:47:f3:d8:56:84:5b:
20:48:ac:e9:1c:b4:19:99:0d:f0:c1:e9:1d:42:ce:
bc:97:10:c6:07:a2:ba:68:49:09:fd:ea:3d:8c:b1:
4e:9d:00:25:a6:e3:7c:e7:7d:cd:86:b6:99:12:d9:
03:76:eb:f8:52:98:b0:07:2b:70:a2:cb:2a:17:59:
ea:45:69:e1:53:d1:25:37:23:94:55:bd:3b:9e:74:
97:ac:8a:0c:19:fb:06:63:49:a6:31:55:08:98:5a:
1d:76:bf:ae:e7:97:29:60:ee:49:60:72:c9:f2:23:
84:e5:92:09:3b:84:e1:d0:b8:fc:05:98:59:a8:e1:
71:a3:64:80:e7:5c:1e:68:85:22:23:08:c9:d3:de:
b8:06:1d:49:2d:75:ad:a1:21:90:71:da:0a:87:34:
33:b2:84:59:ce:bb:13:cc:1a:bc:7c:2c:9e:ea:0c:
35:de:95:3b:8a:ef:67:b4:77:d1:c8:60:63:71:e2:
6f:50:7f:ee:20:b9:66:44:ab:c8:ba:d3:34:c6:b7:
b2:1a:cc:a0:6c:e3:11:bb:73:7d:7e:88:7c:5f:ff:
71:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:85:0E:04:EE:5D:1C:82:C1:F7:8A:E0:E0:95:E3:AA:C5:D2:A6:CF
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:66:75:81:bd:25:10:6e:89:a8:d3:98:ba:93:fd:e2:e3:95:
4e:7a:95:34:ba:28:97:d4:4a:fc:5a:7b:8d:57:4a:31:e0:7e:
03:d5:14:f7:e2:ea:7a:dc:33:77:61:c5:22:42:2d:21:f9:2f:
1d:ab:3e:50:51:5e:25:ea:f7:c1:0b:32:d5:d8:d1:60:64:63:
62:f5:d0:2d:f9:c4:2d:dc:59:ed:b7:17:4e:7d:00:cf:e3:61:
d0:30:d8:6c:5a:29:b4:2d:8b:08:6e:1e:e2:c8:b2:72:ba:1b:
82:8d:14:6e:cb:67:b7:9d:b5:3a:f3:d0:4c:d4:4a:d9:bc:6c:
8d:9a:7f:73:e4:af:fa:ec:f9:70:56:2c:ca:89:fc:dd:15:ae:
8f:d4:5e:16:ad:e6:d1:f6:18:89:0a:24:3b:4d:d7:78:96:fb:
12:df:b0:a7:87:3f:d5:47:21:08:d7:f0:e5:5a:3b:30:e4:b0:
60:9b:ef:76:b8:d1:82:ec:45:b5:8a:c5:c3:80:c3:aa:ea:af:
2d:6c:9d:16:c9:52:7f:f8:26:aa:42:1d:bd:ee:f4:89:28:55:
f0:8b:a6:92:75:62:a9:14:b4:88:4e:cb:b2:bf:f8:09:a3:29:
6b:62:16:13:9d:16:76:98:05:31:d2:0b:ed:0b:81:f8:a1:b5:
a8:fa:f0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:45:48 2025 by rpki-client