Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: Sv2NTMXwflYa0FuFzS9vtjiUhdMcnPv58GvlhuM6ax8=
Subject key identifier: A4:32:21:10:89:4E:69:F8:A5:11:A0:27:7D:7C:31:0F:0A:04:8A:7C
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 01976F2C63CB1731FA98BBF8F74FAA432613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 16:01:09 +0000
Manifest this update: Sat 14 Jun 2025 16:01:09 +0000
Manifest next update: Sun 15 Jun 2025 16:01:09 +0000
Files and hashes: 1: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: ZzziJUr7/R6Q5/Jhcqu+1aL+RZsi43k9hZGxdizYXAU=)
2: hwl_pJftKoYgWaDLkyi1NUP4Iqo.roa (hash: zD6uA78lx0+tAtyuIqfvTt4SALf3UDD47V0kgwtFI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:63:cb:17:31:fa:98:bb:f8:f7:4f:aa:43:26:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Jun 14 16:01:09 2025 GMT
Not After : Jun 15 16:01:09 2025 GMT
Subject: CN=a4322110894e69f8a511a0277d7c310f0a048a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:56:7e:b0:55:a8:e8:1d:f7:46:67:9e:32:
61:36:91:d5:4c:da:04:db:ac:11:1e:b8:26:26:c2:
fe:c5:6b:26:44:ec:75:eb:30:c3:46:b8:2a:7b:4d:
ae:48:f5:cb:af:8b:4a:76:c5:5a:e6:81:d2:f0:c4:
1a:75:51:74:05:44:2a:db:82:38:d3:e3:82:b2:69:
18:55:a8:72:1e:30:4f:76:65:30:28:15:b7:c2:77:
12:a0:95:55:9e:95:34:f0:e4:2a:a9:8b:e7:7f:31:
58:77:e2:9a:c4:c3:01:f4:68:7e:30:b1:db:aa:68:
c7:e3:91:60:aa:a9:5e:84:53:67:68:f7:3d:02:ee:
08:69:9c:e9:28:dd:76:0b:6d:90:4c:6f:e8:be:e4:
ef:5a:74:b6:cf:ed:be:01:1d:a0:a7:82:4b:77:d9:
ce:b8:03:26:9b:e4:37:f8:ac:8e:fa:b0:a3:70:d4:
54:27:22:2c:6e:3b:7b:ad:f2:ab:5d:60:47:83:b0:
2c:60:29:5d:d6:91:59:39:bc:c6:71:7d:cd:7a:83:
35:20:06:7b:9e:5d:15:a6:38:81:10:f0:51:2c:56:
30:2e:54:84:91:ba:77:9c:d1:c7:d1:c5:d1:89:3b:
55:d1:84:e9:d3:25:15:12:70:09:c9:6a:b0:21:d8:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:32:21:10:89:4E:69:F8:A5:11:A0:27:7D:7C:31:0F:0A:04:8A:7C
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3e:02:bf:ef:0a:b1:dc:c7:8e:04:94:f4:82:b0:9b:77:61:
43:7f:b5:b9:bf:b8:ba:ed:cc:97:78:1f:12:6e:8b:a8:c4:1d:
25:53:4a:7e:4c:94:d6:b2:11:86:39:01:19:ec:be:fd:91:c2:
ae:98:0e:75:31:36:09:1d:ab:f5:66:6d:54:93:f9:5d:15:f2:
25:5c:f0:85:db:20:ff:dd:99:05:65:3e:95:0f:a7:36:9b:79:
5a:9d:44:c9:1c:ab:ec:f0:cf:1d:e5:a9:c4:7c:f4:f8:77:03:
e0:32:ab:07:a5:08:41:2f:6f:2a:b6:15:6e:15:05:11:81:65:
8f:19:72:86:b2:e5:7a:19:dd:fc:e3:e5:ed:a6:f8:cf:84:f5:
75:43:2c:96:59:d2:4d:ae:cd:57:bf:79:ac:25:1b:d3:b4:3e:
da:3b:cc:5b:9f:29:7e:e5:b8:c5:50:7c:72:0d:af:63:f8:70:
a8:ca:e0:5f:c2:26:ae:e0:bb:d5:c6:87:9f:72:b7:02:79:dc:
56:89:86:21:47:dd:50:bb:09:78:78:45:34:d6:32:73:11:c1:
6b:e8:8f:b5:52:4f:3e:c8:23:81:8a:5e:ce:f3:87:a4:30:f2:
2f:02:68:2b:0d:7a:45:84:ea:4c:13:94:de:3a:78:1d:09:cd:
23:45:cc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:58:06 2025 by rpki-client