Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: G3LWEtL8JMRuZaPx0nz/ispSqGtz5SfTeWi7R7Z71NA=
Subject key identifier: CC:8E:CA:AC:47:93:4C:56:BB:A5:B3:08:0E:F7:5A:C1:F9:9E:D6:7A
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 0197711AA226386101F934574ECCAEA1361A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 0D15
Signing time: Sun 15 Jun 2025 01:01:00 +0000
Manifest this update: Sun 15 Jun 2025 01:01:00 +0000
Manifest next update: Mon 16 Jun 2025 01:01:00 +0000
Files and hashes: 1: 1-6tgApGzi84jUfnnO4hR3VcZnhw.roa (hash: HVjUDSjbZacQo7V9+9zKGEkK9aQQLCss0l6qBdFGXKw=)
2: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: 0sSIRxMysst/lV3EjzAoUVToMAbXI+JmNMvCmjBthak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:a2:26:38:61:01:f9:34:57:4e:cc:ae:a1:36:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Jun 15 01:01:00 2025 GMT
Not After : Jun 16 01:01:00 2025 GMT
Subject: CN=cc8ecaac47934c56bba5b3080ef75ac1f99ed67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:65:34:57:10:20:2a:a9:02:c5:27:f3:9f:
eb:44:69:53:a1:f8:07:c5:b7:2a:1b:5e:42:8a:f2:
0d:f0:50:6e:0d:d2:e8:09:d8:16:7f:a2:ce:8f:08:
b5:9c:6c:ea:74:9a:2a:a2:f2:5d:ea:63:34:09:1a:
3e:b9:05:e6:ad:74:70:4e:40:18:83:92:c7:66:c5:
3c:97:74:eb:c6:38:96:3b:e0:28:74:03:6c:ae:c2:
2c:99:50:d8:ee:00:1d:3e:f0:77:98:94:c2:1e:0a:
6e:5b:3e:e9:7f:1e:e0:9c:ad:c6:37:e2:6e:83:59:
5e:14:2e:98:85:d0:f2:69:30:52:9b:75:10:97:a9:
f8:6f:ab:57:96:40:d9:6f:56:d8:26:75:a8:0a:55:
38:7d:4e:e3:46:d6:e1:07:8a:95:b1:64:82:c5:58:
63:05:1f:6c:45:d3:0e:75:1f:bd:d7:3a:11:fe:4e:
70:b7:a2:c6:48:80:29:3f:72:0a:ca:39:fa:0e:5a:
69:b2:6a:01:c0:fb:0a:89:d8:f2:14:69:8a:60:33:
d2:cf:75:b2:8d:bb:72:e0:a4:4a:75:d9:50:6a:a7:
f5:91:ec:06:27:f3:51:ee:62:6c:21:6f:e7:0d:a5:
59:9d:51:a3:c2:58:fc:40:d5:02:e9:59:14:be:e5:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8E:CA:AC:47:93:4C:56:BB:A5:B3:08:0E:F7:5A:C1:F9:9E:D6:7A
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f4:a8:68:5b:65:06:3b:d3:9a:88:22:c6:87:26:da:7a:be:
85:a0:b2:bb:f3:bc:15:d7:4e:e4:44:a2:96:b8:d2:ea:ef:e4:
a7:0b:2a:66:07:5d:29:49:8f:ec:1d:42:47:7a:78:79:83:71:
53:9f:30:f8:e8:a1:54:40:c6:b8:21:fe:65:0f:ce:be:df:c0:
61:5b:12:de:34:ba:fa:2b:c6:0e:8e:6b:0d:10:f6:64:f3:cf:
10:fb:31:08:31:d6:e8:1a:e4:69:0b:47:65:a1:a9:4b:ba:97:
aa:9e:36:11:3c:de:e1:cb:2a:61:83:28:93:ea:ff:4d:0a:32:
ef:6a:77:12:31:31:d8:ae:05:f2:79:06:5a:cb:ff:61:b8:df:
02:c0:9b:0d:3e:68:7a:66:75:b3:fd:17:16:9c:21:ce:a4:d7:
82:e0:c1:f8:5c:63:91:70:36:eb:cc:e9:07:96:25:8c:9e:4d:
53:d4:3d:a7:2c:2d:05:bd:b8:06:00:c2:69:4a:77:8f:ae:da:
82:cb:b3:0e:53:03:7d:36:b0:4c:85:42:f3:ea:04:29:cb:73:
1c:28:a9:18:1a:a5:52:e2:23:a2:68:75:66:f5:76:b9:77:5e:
80:53:02:10:01:42:af:0e:35:fa:a5:15:32:dd:f0:04:2e:2d:
1e:51:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:12:49 2025 by rpki-client