Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: FLc8Wo54buSAFqiF5DziLSuLKcDAYrKzs002qM5ec7A=
Subject key identifier: F2:34:91:15:12:B7:FF:39:64:25:6A:14:31:40:4F:BF:2F:22:A9:ED
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 019890DAD440B2CBDBCE02EEFC8B92AB9A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 22:01:56 +0000
Manifest this update: Sat 09 Aug 2025 22:01:56 +0000
Manifest next update: Sun 10 Aug 2025 22:01:56 +0000
Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: Je4IgR03OiaOLU6JgFhOTKerUM8MPbULJ04qUPvcgTg=)
3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:d4:40:b2:cb:db:ce:02:ee:fc:8b:92:ab:9a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Aug 9 22:01:56 2025 GMT
Not After : Aug 10 22:01:56 2025 GMT
Subject: CN=f234911512b7ff3964256a1431404fbf2f22a9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:36:03:20:f0:af:96:53:ce:ee:49:9a:77:
51:45:6b:fa:77:6a:c3:79:78:ea:9a:25:e4:0b:11:
d0:0c:e5:11:4a:25:82:dc:3f:89:91:76:7d:a6:87:
88:99:10:69:80:26:23:76:19:64:3c:9e:a9:35:be:
58:8f:3c:76:a0:0d:8d:8a:60:a8:85:65:8d:6c:bc:
2b:77:64:f4:d4:4d:ca:96:11:04:43:be:6a:14:f0:
ad:12:28:bd:e5:b8:ba:cd:1f:76:02:05:69:3b:55:
52:eb:a0:ab:d2:f4:62:06:ea:78:09:75:34:fe:42:
56:2c:ed:a9:2a:03:c7:27:48:d7:bf:50:32:62:a6:
27:31:77:77:bd:77:05:0d:0d:4a:f8:5b:8d:97:83:
4b:2a:de:22:5c:df:7d:73:3c:e8:b0:65:bb:23:78:
63:bf:5b:b5:2a:c9:6f:37:7e:be:f1:33:92:a5:13:
5b:58:04:00:3a:c7:92:f3:3c:18:d6:d9:3c:60:f7:
b0:8b:6d:88:6f:79:1a:de:05:90:b0:32:ff:ce:52:
fd:d6:41:27:fd:15:c3:a6:e1:45:e6:8e:67:aa:d6:
76:04:53:77:9d:65:f0:77:1d:95:3c:bc:0a:1b:f3:
43:e2:e8:ef:71:11:ce:04:39:fb:d8:ac:37:44:d6:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:34:91:15:12:B7:FF:39:64:25:6A:14:31:40:4F:BF:2F:22:A9:ED
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:90:6e:ef:02:31:63:f1:d2:76:9d:e1:24:fc:d0:88:58:0c:
d0:ae:b6:85:35:83:04:25:48:26:c6:6c:15:e8:ee:85:e2:1c:
74:3f:1f:e5:e1:cd:fc:83:43:ad:6e:cf:19:17:17:33:b5:49:
16:a4:b4:8b:db:74:ac:22:3b:d8:c5:47:3a:5b:63:09:ff:7e:
97:26:24:ab:e1:a2:b4:89:a9:3b:b9:ca:21:ce:25:6f:fc:17:
62:ef:b3:6e:8b:39:ac:f9:a6:14:ab:3d:f3:2d:1e:41:a2:5d:
0b:1a:5e:4b:9f:4d:8c:bc:ab:3f:6c:bd:8c:c9:78:c6:45:9e:
a4:60:e0:ef:f8:0c:2e:06:3e:94:72:ef:7a:42:be:e7:b7:74:
3f:a1:18:d2:57:cb:82:49:9d:0c:d8:ec:dd:76:5f:7f:23:4f:
b2:28:f3:04:5e:61:62:d1:5d:49:2f:a9:7f:7e:b1:36:d4:27:
65:39:7e:0a:91:38:a0:b2:35:6f:6a:10:d2:77:83:9b:19:90:
10:e7:42:51:ff:b6:c7:0a:b1:44:8e:6d:6d:98:20:78:66:b9:
ea:ab:ea:f7:0a:ea:11:d2:9f:57:bc:c0:85:46:a2:35:95:af:
28:a9:ef:3d:e8:c0:49:c9:63:e3:f2:21:bc:e1:7e:69:fd:0d:
f0:75:23:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:58:47 2025 by rpki-client