Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: FnHQg3L10RrwYrY2nhr9Wc+7VYahfR/6rjAV8UHUi2o=
Subject key identifier: 28:20:06:2A:B6:8C:63:9E:3F:E8:9B:09:79:4A:81:F9:38:5C:B1:12
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 01987F786D4462CE337DFE2D7D2FA7C5B786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0B28
Signing time: Wed 06 Aug 2025 13:00:55 +0000
Manifest this update: Wed 06 Aug 2025 13:00:55 +0000
Manifest next update: Thu 07 Aug 2025 13:00:55 +0000
Files and hashes: 1: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: f8afbwzmUT7MzQ78gpfN/8TSfjNzD+qcWce7EDxbv7E=)
2: TRfMCYgQom2qb1ltkPZ8pDFMPbw.roa (hash: B/bZzAE30Cbi1NKH6O3ZfRrv6UmAF6KTnp6VWp5movg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:6d:44:62:ce:33:7d:fe:2d:7d:2f:a7:c5:b7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Aug 6 13:00:55 2025 GMT
Not After : Aug 7 13:00:55 2025 GMT
Subject: CN=2820062ab68c639e3fe89b09794a81f9385cb112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:8d:7e:41:bc:06:f9:12:f3:31:50:66:54:
7a:88:80:5f:98:de:d3:98:c2:90:9a:84:f9:47:ab:
f6:eb:74:2e:c2:9c:73:f7:a0:c1:6d:a3:07:1f:83:
ec:73:b6:93:84:e5:c9:10:63:94:e5:9e:f9:7a:20:
74:1b:f8:00:07:a6:10:84:36:ae:12:25:62:f2:20:
47:5a:63:58:88:69:d0:13:57:0d:15:8a:51:07:05:
d2:1a:ef:05:d5:28:a1:92:82:5b:36:f7:78:13:7b:
5b:cd:60:3a:1f:10:9d:d9:61:95:96:7f:ab:b6:01:
c1:f6:d8:25:29:81:e7:89:c2:31:75:ff:96:93:29:
e7:62:fc:53:ae:2f:fc:75:7d:67:1b:de:f5:d9:9f:
5a:2e:ec:56:8d:a2:1c:25:c7:c9:9b:cf:c8:83:23:
54:f9:3c:43:27:a4:e2:a6:8a:79:59:0a:45:1e:80:
a3:42:36:cd:7d:c3:38:b3:55:bc:52:d4:64:0e:26:
d3:45:38:9c:72:37:85:7e:ca:33:59:cd:8a:50:bc:
21:72:20:50:1d:8e:8e:d8:01:94:06:2f:b3:46:e5:
f4:49:e6:9f:8a:b1:b9:4d:14:32:8a:9d:f3:a1:5c:
bf:64:c4:ee:dc:5b:7f:50:00:4d:a4:a4:03:b6:3c:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:06:2A:B6:8C:63:9E:3F:E8:9B:09:79:4A:81:F9:38:5C:B1:12
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cd:e3:91:a0:3b:1a:76:c3:cd:ea:fd:b0:e7:1b:0e:c4:8d:
76:26:7c:a5:e7:54:cd:3b:b9:04:97:8d:a4:bc:41:fb:81:13:
35:ba:a1:c5:04:ff:6f:52:46:fd:5d:57:e0:b9:8f:31:34:ce:
2c:83:5f:fc:4b:ff:a8:40:d6:c0:14:ee:23:a6:23:77:bd:59:
70:8e:04:a0:35:93:31:ab:2a:29:f4:3d:a5:37:c6:71:12:0d:
96:4f:35:6c:d2:b0:68:de:2d:2e:bc:49:f2:db:58:47:ab:fc:
e5:c5:1a:ff:5a:6c:02:f3:9e:68:bc:79:e2:1c:55:77:4e:65:
6b:47:82:69:07:6b:08:f1:a3:d4:51:7a:05:0a:ae:72:07:f3:
db:7e:1e:be:81:59:ef:49:7d:d2:a9:5a:c5:a8:b6:90:f8:d7:
32:71:4e:e2:21:71:be:08:04:18:04:60:13:a3:27:ab:44:f3:
84:77:fe:9b:2d:1a:10:f8:71:02:24:d7:77:1d:2e:2e:d4:4d:
b3:62:3e:c7:d5:2b:9a:6a:50:e1:77:93:04:fd:77:3d:5e:c5:
6b:5d:ee:fc:77:97:7a:c7:50:24:f7:ec:50:19:62:ef:9b:a8:
d2:33:52:22:70:b8:4a:7d:d5:64:ea:1b:bd:56:5d:46:b5:51:
5f:dc:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:10:32 2025 by rpki-client