Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File: G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier: jvJS5KgNHrNJ+uZX7VOw6iyZI9J0Y711uVwKjxcgIBE=
Subject key identifier: D3:A0:3E:EC:AA:E3:55:18:C6:F0:F1:E0:BD:62:75:12:32:CF:66:CD
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer: /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial: 01976C620489F4EE53235AFFC4ADD455D27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 03:00:52 +0000
Manifest this update: Sat 14 Jun 2025 03:00:52 +0000
Manifest next update: Sun 15 Jun 2025 03:00:52 +0000
Files and hashes: 1: Csk8FW5y7YJBzT_KmLLv1t_20_E.roa (hash: v8gWLbfcXD73mmO4K/7j3PoZmZQLB/oP8z7Xeflu12k=)
2: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: +uFqnd3A9zeSG1EUE1qKK+9+qyA2/ZtqeIIrBQN4j4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:04:89:f4:ee:53:23:5a:ff:c4:ad:d4:55:d2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Validity
Not Before: Jun 14 03:00:52 2025 GMT
Not After : Jun 15 03:00:52 2025 GMT
Subject: CN=d3a03eecaae35518c6f0f1e0bd62751232cf66cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:58:51:d8:2b:5d:8d:3e:b4:14:0e:00:4f:
74:d3:82:1f:65:74:e2:6f:a5:d6:e0:9b:65:de:69:
4e:d1:7f:95:3e:cc:35:14:81:dc:08:72:f7:96:79:
c1:1f:3c:c2:6f:70:24:55:e7:73:bd:ad:e0:e5:62:
93:06:25:4a:dd:0a:1a:08:03:bb:26:89:d5:a9:6c:
7a:cf:98:84:0d:5f:f3:35:cc:9d:96:9a:03:76:13:
51:09:fb:92:f9:01:49:30:a1:1a:aa:5f:1f:f2:63:
bf:68:7e:a4:2b:a6:74:a2:c3:5c:b0:80:3a:65:54:
66:07:40:f1:18:61:09:80:e7:e5:f4:72:3d:f3:ac:
9b:b8:fc:2a:a2:d0:a4:fd:41:f3:4b:d6:4e:53:b0:
95:39:10:a0:57:70:7a:b5:c5:fb:3c:0f:cd:dc:d0:
8c:be:b8:fd:55:be:9c:5d:48:56:9b:2a:87:2f:ee:
2f:4f:79:67:22:cb:53:20:a1:d4:5f:c9:80:9a:4c:
a7:99:3f:83:29:6e:c4:dd:5e:6a:c7:20:60:9b:a3:
8a:af:36:49:57:f5:5c:ca:94:27:db:2a:01:ae:8f:
56:69:a1:9d:99:1b:a3:43:79:45:ce:39:4b:03:f2:
28:c9:db:ad:e9:39:e0:40:5e:74:29:ad:11:43:f3:
cd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A0:3E:EC:AA:E3:55:18:C6:F0:F1:E0:BD:62:75:12:32:CF:66:CD
X509v3 Authority Key Identifier:
keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1c:a6:8a:68:e5:b2:d2:43:33:3e:de:c9:50:2c:44:38:89:
a8:7d:25:60:5d:9c:73:c2:fe:00:04:0c:27:96:f4:8c:c9:dc:
c3:17:d4:09:37:52:c7:f2:1d:b7:77:b4:2a:00:88:df:67:ea:
8e:83:c4:3e:c6:39:2c:08:75:fe:15:e3:9e:d4:2d:5c:7a:b5:
41:5c:7b:0b:38:3b:b2:72:7a:70:24:75:a2:31:e8:b5:f3:83:
9d:26:d9:f7:83:37:15:bb:64:12:7e:86:c9:10:42:13:4a:3c:
70:8f:71:b9:5a:8b:3d:af:e5:94:09:4c:4f:de:ea:22:b2:f1:
d9:bd:61:74:df:55:a0:34:86:53:d9:52:84:85:0e:5b:03:5d:
3a:2b:b4:cc:b5:b3:83:72:8a:fd:1d:1b:df:ef:eb:94:ba:0f:
17:87:00:1e:f5:93:0e:80:d0:d6:8c:71:95:bb:0a:64:13:06:
fe:5c:fd:84:ab:6b:b4:ad:39:a0:7d:d3:0c:bb:3a:e7:07:70:
17:35:0d:bb:aa:2d:f3:7e:e8:15:71:39:ac:6b:4f:5a:44:16:
ad:01:8d:e3:48:2e:96:22:5f:02:17:f8:bc:7a:d4:d7:bd:b5:
94:40:fe:d4:9a:5c:e0:c4:22:ed:d5:15:cd:fa:03:7b:43:0d:
9f:7f:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:01:20 2025 by rpki-client