Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: nnm/qkKWVKOfLZ6cJKNsuYgqpUSgxpfIrt9tETQQ8dU=
Subject key identifier: CD:2E:64:A6:9B:9C:A2:00:34:09:23:D3:E2:01:A0:F5:A0:1E:CB:F5
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 0197790A8A387BC6A6E89CFF1C36F603D1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 14:00:23 +0000
Manifest this update: Mon 16 Jun 2025 14:00:23 +0000
Manifest next update: Tue 17 Jun 2025 14:00:23 +0000
Files and hashes: 1: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: 1VTBIxbekTWVGjGWkU1YCiI1FEt6tRVS+Y8C7AMj+5I=)
2: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (hash: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=)
3: Y2jaKnMLOg7L7yt3a5FoJKVZD9M.roa (hash: E77+sc63md8h3e/NARC1FrCtInem3ClY6WQ72Z8aT70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0a:8a:38:7b:c6:a6:e8:9c:ff:1c:36:f6:03:d1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Jun 16 14:00:23 2025 GMT
Not After : Jun 17 14:00:23 2025 GMT
Subject: CN=cd2e64a69b9ca200340923d3e201a0f5a01ecbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:f7:a2:6a:21:3b:c5:5b:8d:55:e1:0c:3e:
9f:42:0e:29:d9:49:a1:d7:5a:e7:26:f8:61:f6:10:
67:7c:06:5e:2b:b9:bb:bd:9f:3f:47:7e:da:73:02:
a7:ea:67:11:ce:53:19:b6:21:4c:c4:ce:7e:c2:1c:
19:c9:a8:8a:8a:0e:b1:d4:aa:b4:78:a0:84:7d:fd:
00:1d:13:1d:d7:d9:d2:f8:3c:4b:25:15:f9:06:61:
bc:0c:51:91:2a:83:bf:8c:c1:ec:24:31:af:be:21:
ef:2c:6f:ad:21:8b:70:81:d0:4d:f1:e7:fd:21:b5:
cb:1f:6b:fd:3c:e4:7a:e0:4b:e0:ab:9a:c3:2d:44:
92:65:55:50:84:b3:b4:38:4a:9b:d0:f0:75:1c:9e:
6e:4d:85:c8:25:71:7a:35:78:9b:42:0a:de:5a:b8:
08:aa:f2:cb:9a:3b:7f:73:0c:af:cd:17:92:b3:d4:
0d:b3:43:82:30:b4:1e:da:fe:79:a7:61:20:0a:ba:
4b:27:3a:e4:85:2c:b4:e5:9e:f7:f7:56:30:28:c9:
5e:70:15:4e:7c:51:a0:2e:34:02:2d:91:d6:6a:b7:
3b:8d:fa:74:6b:55:5e:4e:21:fa:10:4c:d0:4f:18:
34:b7:a4:89:67:81:ac:b2:81:43:5f:1e:ce:27:a2:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2E:64:A6:9B:9C:A2:00:34:09:23:D3:E2:01:A0:F5:A0:1E:CB:F5
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5d:2a:e7:79:5a:f8:b3:41:a2:b7:a1:ab:74:91:c2:07:29:
cb:8d:e3:22:4a:b9:c5:6c:f8:f1:2d:f6:68:da:30:78:c6:a5:
a2:00:4a:4c:04:e3:d9:71:25:75:2c:32:cf:15:97:c7:47:dc:
3f:d6:6a:00:33:c4:e0:e9:17:90:1f:4d:17:9d:fb:58:28:23:
7a:d7:fe:60:d3:29:c9:8e:0f:97:fa:66:be:b6:6e:2f:3c:c4:
95:6e:12:75:b7:41:29:ce:08:d8:7a:1e:6d:2c:a7:21:3f:3b:
4f:dc:43:08:8f:37:ef:e6:f8:2d:6b:d1:c5:af:93:71:00:f2:
ca:c4:46:c4:57:fa:33:4e:fb:70:88:a0:64:a0:f9:d7:68:52:
ea:d7:68:58:02:55:96:a9:63:32:17:56:85:67:6a:b5:73:99:
be:44:cc:4e:9f:a6:fc:2d:40:cb:51:e5:08:c6:98:23:62:06:
33:53:cf:a7:43:57:f5:48:2e:f9:10:86:3e:cc:07:37:26:de:
9a:10:db:a4:14:34:9e:05:34:b1:3e:7e:9f:45:99:8a:9e:36:
16:6f:1e:f8:0c:03:c9:87:80:27:a0:43:b4:f7:b2:4b:b4:aa:
5c:16:b4:da:9e:75:61:f8:15:e8:f6:3d:fe:f4:47:09:9f:c0:
82:c8:7f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:14:50 2025 by rpki-client