Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: 6zp+N9dH7BqKp1ipWnJZetZxoSQ1754p1yhbfn551O4=
Subject key identifier: F0:A6:C8:F9:32:17:2A:E3:3C:FA:F0:C7:B5:64:D7:FB:34:5C:B9:9F
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 01988920CB87089734C997242052C94B774D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 0DA6
Signing time: Fri 08 Aug 2025 10:01:24 +0000
Manifest this update: Fri 08 Aug 2025 10:01:24 +0000
Manifest next update: Sat 09 Aug 2025 10:01:24 +0000
Files and hashes: 1: 1-6tgApGzi84jUfnnO4hR3VcZnhw.roa (hash: HVjUDSjbZacQo7V9+9zKGEkK9aQQLCss0l6qBdFGXKw=)
2: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: IFWn+wv54oBpYovNYxpEpp8cpDMXN6zBKTRZ3Fb0pAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:cb:87:08:97:34:c9:97:24:20:52:c9:4b:77:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Aug 8 10:01:24 2025 GMT
Not After : Aug 9 10:01:24 2025 GMT
Subject: CN=f0a6c8f932172ae33cfaf0c7b564d7fb345cb99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:20:e5:a4:81:fc:aa:e1:77:cd:c5:ac:05:be:
db:12:87:80:c9:f4:51:59:7e:a1:df:64:a4:4e:47:
2a:ec:75:39:de:77:30:18:59:c4:0f:dc:9b:85:0c:
f4:e3:ec:b8:52:49:5a:29:53:19:59:a6:81:b9:2c:
b7:a2:0a:1a:08:a4:50:62:ef:c7:5b:60:08:5f:23:
9e:d6:dd:ae:4f:ed:43:21:4f:fd:20:de:c9:6b:f3:
79:fe:13:74:f0:8e:34:8d:c9:f7:b2:e9:c4:c3:4b:
3d:10:ce:eb:9f:eb:e4:90:cb:d9:f7:3e:fe:41:a7:
a2:74:3e:b8:0d:68:bf:4c:a3:ef:b5:87:29:cd:52:
6f:22:5b:b6:ac:c8:06:95:7a:da:f3:1c:6a:4e:d3:
7a:ed:22:7a:3b:64:f9:3a:e8:1d:1e:4c:8a:4a:8a:
45:54:2e:4a:b4:bf:3a:c4:b3:c2:14:a5:49:24:78:
98:13:56:f0:a3:c2:50:94:07:6d:03:72:3d:0b:de:
58:40:29:39:71:e9:61:de:34:68:ed:28:56:7e:c2:
fe:5a:14:ba:7e:54:60:17:54:62:51:b6:50:5b:31:
bd:e7:e0:75:21:63:61:ba:0a:bd:08:4d:dc:02:33:
f6:23:af:83:eb:f0:5b:56:11:ac:b7:89:8a:e4:c5:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A6:C8:F9:32:17:2A:E3:3C:FA:F0:C7:B5:64:D7:FB:34:5C:B9:9F
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:11:db:77:24:02:45:e2:56:f2:ac:9d:0a:fe:65:a2:a2:ba:
df:ba:9b:14:bc:00:a8:1c:92:6b:e9:d0:37:24:5b:b1:ae:91:
e7:bc:50:ad:70:7b:4a:2f:7b:91:0a:dd:20:2a:65:c7:29:27:
e4:a7:fb:d5:e5:69:78:8c:64:da:dc:4a:cf:c0:6c:26:0a:8e:
41:66:34:ab:79:ed:f6:07:96:9f:8b:84:cd:65:3a:89:2c:ce:
cf:51:bb:d0:0b:de:6c:f3:11:65:30:55:c5:53:82:0a:05:70:
5a:50:24:c0:0f:67:ab:32:d9:2a:70:39:04:1e:87:e9:df:d5:
0f:4d:fe:eb:97:8e:7c:e0:d4:09:74:6c:2c:ee:bd:41:a8:21:
32:6e:d8:70:c1:10:ec:e7:fa:95:b6:09:13:55:65:01:ca:f3:
0d:57:fe:b8:db:50:6f:2c:5f:5e:00:f2:38:1f:ad:b0:ed:0f:
2a:34:2e:0e:3e:81:3d:11:9a:3a:48:d1:5f:55:44:20:f0:95:
46:c0:37:21:07:93:8b:8e:b6:43:17:d1:b1:35:19:89:a1:dd:
07:3e:98:c6:6e:2f:10:bb:14:12:2a:70:e1:61:96:4d:ec:ff:
dd:01:d8:bc:70:48:db:67:c1:2b:90:e4:f0:e6:67:74:80:71:
4e:44:8d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:21:12 2025 by rpki-client