Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
File: G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json)
Hash identifier: KKD1ghfGbFENY4XxX3LwHXmXRJrT6tw12H1t7qP1l24=
Subject key identifier: 8B:B4:C2:D2:8E:6E:C2:99:9E:40:09:26:13:88:68:C7:85:36:FB:C7
Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
Certificate issuer: /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Certificate serial: 01987D8AD88D52368FD175F2183E6A73C07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
Manifest number: 14FC
Signing time: Wed 06 Aug 2025 04:01:48 +0000
Manifest this update: Wed 06 Aug 2025 04:01:48 +0000
Manifest next update: Thu 07 Aug 2025 04:01:48 +0000
Files and hashes: 1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: BCk4BJvTvgMjQChqB6ED8ildz/h/irEtOGQLuEBU2eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:d8:8d:52:36:8f:d1:75:f2:18:3e:6a:73:c0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Validity
Not Before: Aug 6 04:01:48 2025 GMT
Not After : Aug 7 04:01:48 2025 GMT
Subject: CN=8bb4c2d28e6ec2999e400926138868c78536fbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:d9:40:1b:95:ce:08:17:56:ce:d9:34:8f:
7c:91:4a:8e:47:a8:30:3e:2f:0a:fb:cb:6a:24:91:
00:6e:fa:ea:03:3c:81:3b:0e:fc:e5:fa:76:06:e3:
58:62:0c:f2:e9:de:d2:f3:74:9e:53:03:d8:2e:97:
97:86:b9:b7:8e:8e:5a:d5:d1:22:e6:05:4b:4a:01:
85:83:f4:2d:a9:45:88:41:3d:5f:ac:b8:1f:1e:52:
85:b5:da:22:ae:62:56:29:3f:6d:02:ee:72:6c:12:
98:4f:ec:93:be:5a:a3:f4:b5:b9:85:75:b8:66:06:
c1:d5:4f:3d:e5:11:6b:3b:8a:81:72:bc:f9:a4:43:
26:11:b7:6d:31:77:00:7c:6e:13:b1:5f:e6:33:0b:
b2:cf:9b:a5:37:f6:31:31:7a:d5:06:ae:71:4d:af:
ba:71:e8:d1:31:76:af:26:04:24:f2:d7:b3:15:86:
4c:de:d4:e7:57:8b:73:e2:16:30:51:24:dc:d9:39:
e3:13:98:fc:85:c6:2b:1e:d8:b0:32:98:12:70:48:
22:87:49:ec:f0:3b:fe:b5:1d:47:69:09:91:1b:ba:
1f:de:6d:50:7f:4f:17:16:71:33:2a:95:1f:3a:4c:
41:64:46:4c:f8:5a:3b:eb:11:13:cb:62:9f:44:9c:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B4:C2:D2:8E:6E:C2:99:9E:40:09:26:13:88:68:C7:85:36:FB:C7
X509v3 Authority Key Identifier:
keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:e0:da:35:24:ec:10:6a:54:46:cb:07:c4:8a:8e:7f:ab:73:
41:64:d6:c2:5b:03:4e:82:02:8e:96:0e:60:6c:60:cc:7e:ad:
1e:3a:67:f9:b3:f0:13:b4:f2:30:23:42:42:54:16:8b:99:b1:
2b:0f:27:fc:80:c0:ff:2a:50:bb:e0:f7:86:51:f3:d2:bf:54:
49:7b:6b:f9:e8:9c:eb:ae:81:b7:a2:bd:5c:32:ee:55:d6:a4:
b1:59:fb:a0:98:c6:0e:cb:67:9e:84:d9:cc:1e:e9:dc:10:1c:
12:ef:8a:97:05:1b:c4:0d:de:46:f9:ce:15:fc:dc:00:86:39:
f6:71:72:95:0a:75:36:1f:90:7b:7c:4b:36:4a:8e:37:d1:b8:
9f:d9:06:23:b3:78:9b:86:33:b4:a9:23:4e:1f:cf:da:0c:f2:
9d:9e:7a:04:31:ac:12:7c:65:57:d5:fa:32:b1:3d:95:4a:70:
17:db:cc:cf:f5:3d:8b:82:3d:0d:35:fa:e3:8a:04:8d:b0:26:
b2:36:22:89:4b:fc:a0:2b:7d:05:79:f7:c4:60:fe:3e:bd:c9:
2e:0a:ad:70:7e:52:21:04:9c:df:3c:ba:3e:56:c5:f0:f0:00:
86:f4:e2:41:d9:fb:f5:9e:4e:2c:57:4b:33:28:df:aa:cb:b8:
c2:a4:34:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:02 2025 by rpki-client