Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
File: g1-7knspUGK30KcgR7a0qhsPmyk.mft (raw, json)
Hash identifier: 4ITrjk1ESbd1gytp2+xbJppC/NWTg0ZuudwPPqLDaVs=
Subject key identifier: DC:D0:74:EC:D1:8A:F2:1A:23:AA:5B:92:31:F8:0B:45:85:3A:9A:2F
Authority key identifier: 83:5F:BB:92:7B:29:50:62:B7:D0:A7:20:47:B6:B4:AA:1B:0F:9B:29
Certificate issuer: /CN=835fbb927b295062b7d0a72047b6b4aa1b0f9b29
Certificate serial: 019769CF1A51532904B75864C94A0D349D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
Manifest number: 0ABE
Signing time: Fri 13 Jun 2025 15:01:09 +0000
Manifest this update: Fri 13 Jun 2025 15:01:09 +0000
Manifest next update: Sat 14 Jun 2025 15:01:09 +0000
Files and hashes: 1: Xz1rL6dK4mQZieGCdBgSZgZHbZ4.roa (hash: gmK1QKVfo/W+VuZX9S2XVVxCk24nsYt3d8ghU+Ddwrs=)
2: g1-7knspUGK30KcgR7a0qhsPmyk.crl (hash: NqD7iJLlWn1hybLP6yhI7L74cu82AxUBoYsbfe8YWmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:1a:51:53:29:04:b7:58:64:c9:4a:0d:34:9d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835fbb927b295062b7d0a72047b6b4aa1b0f9b29
Validity
Not Before: Jun 13 15:01:09 2025 GMT
Not After : Jun 14 15:01:09 2025 GMT
Subject: CN=dcd074ecd18af21a23aa5b9231f80b45853a9a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:72:70:01:21:69:fd:d5:2f:52:7a:30:63:a1:
af:dd:73:60:73:6b:5c:4b:3f:e8:7a:8c:57:3c:88:
01:a2:6e:ec:ae:d2:fa:83:1a:b2:9e:a0:48:1b:48:
b2:f7:fe:b2:40:1c:3e:13:a0:91:3e:96:e0:e4:db:
23:90:e2:c2:53:43:4f:51:54:64:77:5a:13:71:28:
20:3f:a3:48:91:43:0d:97:30:69:27:42:9d:4f:ff:
6c:23:32:84:7e:93:59:38:66:74:1e:a2:eb:9d:42:
83:c6:ee:11:1e:a5:db:d7:5d:bf:ee:21:97:e3:fd:
bf:ec:3c:84:f7:60:14:7a:97:ba:65:1c:d2:00:c6:
a9:5b:18:d5:d0:5c:1e:29:e7:b5:80:a0:c6:70:e4:
25:ea:e6:7b:84:a1:7f:2e:60:59:7b:f5:54:1a:b2:
ab:10:86:27:7c:62:fc:20:9f:30:e9:dc:ad:c4:de:
c6:f5:0e:c9:1a:a9:2b:10:04:b4:a4:17:66:3f:d0:
10:2a:c5:32:55:f0:83:c1:f0:7f:3f:87:d1:1a:56:
81:da:36:f3:c9:15:29:89:b7:dd:c6:3e:49:40:ca:
83:32:34:c9:5f:bc:94:bb:21:ae:43:d0:e4:c1:15:
24:03:5f:f2:66:3a:3c:86:23:a3:a5:08:5e:c5:0b:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D0:74:EC:D1:8A:F2:1A:23:AA:5B:92:31:F8:0B:45:85:3A:9A:2F
X509v3 Authority Key Identifier:
keyid:83:5F:BB:92:7B:29:50:62:B7:D0:A7:20:47:B6:B4:AA:1B:0F:9B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:20:72:70:05:47:f6:c9:29:c2:12:d4:5d:7c:74:a0:12:80:
4c:80:25:82:5f:a9:71:c6:54:a8:73:a0:1c:4a:01:73:67:bb:
9b:bd:4b:95:8b:52:bc:e6:f2:1d:61:48:81:84:e8:f2:93:3d:
19:c8:81:5b:20:96:7b:0c:b3:fb:7c:90:6b:e2:12:47:ea:9c:
bf:52:22:80:b9:6f:0b:2d:3e:23:50:ea:79:d6:c5:71:5b:96:
61:17:fc:5c:39:00:03:d7:12:dc:2f:2f:73:08:f0:81:6f:0f:
01:20:e8:2c:72:63:ab:df:53:e0:97:36:62:bc:9c:df:57:a0:
30:af:91:9b:21:f2:64:83:4c:ef:71:89:45:18:a5:8a:75:6e:
39:ab:79:67:99:5c:b0:10:76:3a:6e:f2:ff:92:32:74:f7:d7:
f4:03:68:0d:6d:cf:2e:34:a1:ff:5a:8b:88:5e:41:fe:bf:cd:
4b:60:96:b3:f6:5f:1b:db:a5:e7:70:f9:66:44:42:ff:bf:e8:
7b:a0:6d:19:ff:68:12:b3:28:d0:45:8e:21:d9:11:10:ee:37:
d3:9d:b3:5f:57:68:9a:87:bd:b0:a1:b7:c9:b6:e6:c0:8c:53:
e8:87:44:71:9d:c9:0b:b4:8a:4b:80:1a:50:9a:52:78:6e:93:
0d:6d:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:22 2025 by rpki-client