Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier: IOGoFcs13/eVyFJSztXKXbMVLyQFWSWjz2W4jOKZc/g=
Subject key identifier: A2:D1:08:39:D1:99:1C:6C:D4:0B:A3:40:2A:03:41:BE:91:AC:8E:5F
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 0197692A08FDFCA10270D08D9BFBE97BCE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 12:00:51 +0000
Manifest this update: Fri 13 Jun 2025 12:00:51 +0000
Manifest next update: Sat 14 Jun 2025 12:00:51 +0000
Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: CleuNkVPW/y8lXMu6RG2FSBziSbKE3GlEcnQbLLxne0=)
2: xIsbgd-1jNIqLfaxvWsXTolM4hw.roa (hash: IbSWm3FdPDBzLYRsZr3IBY9SNHNxrtPl7LMS9I121XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:08:fd:fc:a1:02:70:d0:8d:9b:fb:e9:7b:ce:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Jun 13 12:00:51 2025 GMT
Not After : Jun 14 12:00:51 2025 GMT
Subject: CN=a2d10839d1991c6cd40ba3402a0341be91ac8e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:df:e6:85:a1:b8:33:b8:36:46:9d:77:1c:
b6:d3:07:df:a9:4b:c6:be:e4:db:d8:00:a5:b6:e4:
e3:6b:21:c2:78:ab:99:dd:4b:7c:46:89:95:f1:4b:
b0:77:51:ae:86:95:48:e4:7e:45:09:d6:5a:59:42:
f5:3e:73:ce:6e:8c:1b:81:74:44:6b:df:b9:74:cb:
4f:10:7e:1b:f4:64:35:dc:dd:de:c2:3c:63:e1:60:
f3:46:22:6b:e1:0d:a1:74:56:35:4d:5f:e9:31:42:
70:3d:e0:86:0e:b8:5b:78:ca:a5:ed:10:fa:b0:d6:
32:09:52:c2:c9:d8:ee:df:5d:b6:68:8d:2a:d9:c3:
93:26:48:cc:0b:49:1d:d7:fc:4c:59:36:1c:4e:08:
18:08:bc:2e:bc:03:63:fc:11:7d:9f:e6:d5:27:39:
95:a4:6d:c3:8c:8a:cd:65:1b:c5:17:79:cf:ad:6f:
91:27:6d:a3:1d:63:4a:8e:38:83:13:7e:a7:34:67:
6f:44:b7:49:88:c1:c7:b9:ae:a7:68:4c:50:5b:4a:
dc:d1:9d:a4:6c:10:d9:f3:ee:bb:ad:13:89:35:75:
08:af:8c:64:c6:52:77:e7:5a:ec:98:ae:76:a5:ca:
c8:1f:37:ee:11:b9:67:22:b6:bb:be:b5:d4:f3:cd:
0c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D1:08:39:D1:99:1C:6C:D4:0B:A3:40:2A:03:41:BE:91:AC:8E:5F
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:83:b3:89:af:15:88:d7:d6:c1:dc:a1:90:67:aa:fb:50:b8:
49:56:9f:f9:a9:00:27:a7:4b:34:b8:4c:4d:05:16:d8:0e:65:
9d:36:6b:6d:ae:41:06:5f:68:ce:65:06:f0:2d:e9:bd:dc:85:
47:5c:d3:28:95:27:78:9a:e2:ef:df:c6:c9:71:ee:53:41:dc:
7d:a7:50:61:40:e4:41:06:c9:5b:53:86:96:dd:db:f3:2e:1e:
9f:a2:0f:5a:80:f2:30:ac:3d:76:0d:cb:46:a5:f1:1e:05:10:
1c:2a:1a:f2:1e:3a:e2:cb:21:d0:c3:a2:eb:ed:a6:c5:e8:c6:
78:71:f8:22:b7:74:11:ef:f8:2a:1e:24:53:b5:ef:0f:8b:0f:
c1:04:01:72:6f:0d:f7:3b:a4:51:7f:73:2f:7c:98:86:a0:5d:
70:0d:3f:4b:03:d4:7b:22:d0:52:eb:48:ca:6b:04:7f:ef:02:
cb:45:d5:2e:52:90:b6:13:2b:17:0a:53:a7:79:61:ec:02:2f:
59:b9:dc:39:28:20:a5:91:49:8d:03:1b:a4:d7:b4:ca:64:46:
f3:93:56:00:a2:d5:fe:dc:9d:19:df:fa:ba:cb:1f:d9:bd:f2:
6e:b5:c0:42:59:7e:02:79:a4:f7:45:ad:67:31:ce:7f:df:d3:
37:59:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:26 2025 by rpki-client