Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
File: A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json)
Hash identifier: GG/B/Up5w9EAT9SUKlNU6o+Xy3AWia2vJbJYkxyYWXM=
Subject key identifier: 8C:22:0F:1F:52:A8:B7:17:F8:BD:E4:92:EA:DC:E1:D7:14:6A:C2:7D
Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Certificate issuer: /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Certificate serial: 01987B9C91DC25C91D85057B776D9DFA733C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
Manifest number: 029C
Signing time: Tue 05 Aug 2025 19:01:55 +0000
Manifest this update: Tue 05 Aug 2025 19:01:55 +0000
Manifest next update: Wed 06 Aug 2025 19:01:55 +0000
Files and hashes: 1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: EJ7quNJnEXCAgyU1C1TX7iJWOK6W/TfrWORBp/WsCwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:91:dc:25:c9:1d:85:05:7b:77:6d:9d:fa:73:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Validity
Not Before: Aug 5 19:01:55 2025 GMT
Not After : Aug 6 19:01:55 2025 GMT
Subject: CN=8c220f1f52a8b717f8bde492eadce1d7146ac27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:8c:a7:7f:8d:f0:4f:ef:24:3c:a7:8a:d5:
40:02:6c:61:ff:48:9a:b6:09:fc:94:81:e7:b8:19:
ed:64:87:97:3a:44:be:d7:7e:6b:f9:4a:71:56:36:
8c:9a:c9:05:19:9f:3f:70:91:73:3d:47:bd:f7:98:
9e:ad:19:26:21:71:bd:4f:22:cf:28:66:3d:e1:87:
02:f1:ca:03:01:f6:8b:45:7e:3d:3e:15:04:ce:80:
29:0f:63:8b:ed:29:fb:bf:9b:97:d8:22:89:4d:45:
f7:42:b8:08:84:11:ca:23:fd:a2:34:04:c6:c9:ad:
92:81:ce:56:53:63:73:78:7c:62:bc:78:23:a9:b6:
c4:20:40:07:58:ee:77:01:09:b9:dc:d7:6a:21:ad:
a2:e7:6e:f9:c7:98:c9:ce:34:a6:3c:ad:1b:7a:b4:
e0:94:86:05:52:70:5c:fc:6b:0e:d6:ae:28:ea:9a:
23:b3:70:0d:9d:61:bf:d4:31:57:6c:d9:65:22:d6:
87:e1:a2:c4:08:71:1a:d3:fd:3c:35:94:9d:4d:0b:
8a:15:0a:cf:08:67:a3:52:3d:11:d1:a2:2e:ca:3f:
90:eb:d0:64:b3:8a:56:f2:91:29:d2:ab:64:e0:1f:
55:db:e4:7d:a2:83:a4:e1:e2:60:ca:51:ce:ac:4b:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:22:0F:1F:52:A8:B7:17:F8:BD:E4:92:EA:DC:E1:D7:14:6A:C2:7D
X509v3 Authority Key Identifier:
keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ca:54:6b:7b:bb:03:5e:1d:c1:b2:96:ca:d7:8f:81:60:0e:
7c:56:63:49:ce:39:bd:a7:02:0c:cf:f5:98:f0:3b:44:92:c3:
23:44:84:42:3d:72:ef:71:5b:1b:6f:10:44:17:6b:06:b4:d8:
f7:e4:6d:47:b0:9b:10:a7:8f:04:8b:a1:d2:af:aa:88:3e:ff:
06:f9:b7:3d:93:19:8c:ce:ae:0a:2e:fc:d8:d1:b0:ec:84:06:
2f:78:83:2f:ca:30:39:80:f5:d6:08:30:73:19:26:ed:63:e3:
b2:29:7e:ed:4d:f1:fc:a1:1d:10:2e:d9:c5:bc:ea:e6:a4:c7:
ba:5a:f3:f7:06:2f:c6:39:1d:c9:4d:ff:41:33:01:3f:00:f6:
91:27:cf:cf:18:09:79:20:18:0a:2f:30:37:65:0a:ed:e3:59:
ce:eb:6a:80:fe:bf:09:a6:d3:cf:68:26:67:38:bd:c2:27:ef:
4c:10:2a:e0:d3:89:03:ef:fc:e5:6e:91:f9:40:d8:89:e3:8f:
af:69:20:4b:04:44:5f:38:bc:9e:bb:27:db:8b:b2:88:4d:fa:
fc:b5:c3:a7:74:d7:62:b5:eb:27:5d:6c:90:f5:e0:53:f3:3e:
3d:00:8e:4a:29:f1:6e:e0:aa:24:31:a4:23:80:eb:79:f3:b7:
e1:53:8c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:50 2025 by rpki-client