Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: QB74kmX9DWcSXrh6I/e/bM/rUHXf09mC6GG7WJQh63Y=
Subject key identifier: 55:6A:15:41:25:15:E0:29:8D:75:AF:2D:CD:1C:73:E8:CA:7D:20:D0
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 01977150FC665B39AF7842388B44427B1E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 0DB8
Signing time: Sun 15 Jun 2025 02:00:22 +0000
Manifest this update: Sun 15 Jun 2025 02:00:22 +0000
Manifest next update: Mon 16 Jun 2025 02:00:22 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: bikyC1+tFmXDLvJGq5Vexj816n2JPUakQwgq0pOHQQY=)
2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:50:fc:66:5b:39:af:78:42:38:8b:44:42:7b:1e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Jun 15 02:00:22 2025 GMT
Not After : Jun 16 02:00:22 2025 GMT
Subject: CN=556a15412515e0298d75af2dcd1c73e8ca7d20d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:57:3d:f2:40:be:6d:8d:97:a0:e3:5a:c6:
83:b1:47:af:b2:dc:5c:e7:0f:d3:ea:e7:b9:16:13:
c8:8b:ba:c1:73:c4:4d:72:78:20:7b:03:6c:ca:35:
86:81:dc:a1:82:ab:55:58:74:c8:a2:c4:b0:b1:73:
f4:5d:3f:9d:f3:7b:63:c5:ce:00:b7:98:4b:1b:f5:
c0:29:1d:06:92:06:47:14:4a:93:3b:62:26:c1:70:
41:2d:e0:c3:b3:bf:3a:f4:bb:11:77:95:3c:06:10:
ad:f9:12:b8:8b:1c:64:1a:a6:4e:c2:c9:66:d5:38:
b2:d3:24:34:6a:67:04:e1:35:e3:c6:75:dd:d7:23:
6a:2f:7b:09:ab:e5:02:74:05:7a:1d:d1:9b:81:9f:
eb:3f:60:dc:ed:eb:3f:c8:6b:a6:92:d5:9b:27:57:
f1:cc:5c:88:4c:40:9f:42:f8:28:1a:3a:68:ed:4a:
62:64:3f:ca:d8:26:ae:b5:c3:1c:f4:df:8f:6d:ca:
df:64:ec:8b:5c:ab:18:97:e3:98:9c:05:fc:2c:a0:
0a:93:c5:25:9f:ef:45:ea:a0:7e:db:ef:ec:ea:74:
3f:b8:d1:d2:85:ab:a9:da:3e:59:34:0d:b9:70:03:
1f:e8:00:ab:d2:72:f3:73:e2:72:92:70:e7:ee:36:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6A:15:41:25:15:E0:29:8D:75:AF:2D:CD:1C:73:E8:CA:7D:20:D0
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e4:34:87:b3:92:0c:44:b9:d6:a2:5e:f1:85:e9:cb:1c:40:
1e:98:ba:97:5d:bd:fb:71:ee:18:59:5c:80:8e:0e:82:d7:58:
e8:2a:1d:41:79:b8:3d:00:c4:74:31:94:7c:97:45:e9:10:e9:
96:2b:c2:37:cf:74:63:41:92:82:a6:94:cf:93:ed:7a:8a:48:
f8:f1:9a:fa:48:d7:d5:5d:de:fd:f7:56:b8:b1:e8:62:72:23:
f7:cb:9a:5f:08:46:fc:3b:05:ef:98:74:5f:e0:68:61:e3:5a:
71:e7:9e:c5:fb:64:a1:52:9d:c4:7d:62:ba:69:15:e1:58:8b:
3d:ae:43:00:5c:22:8f:6c:14:30:22:bf:a7:c2:28:dc:39:81:
eb:fc:42:dc:37:18:e3:48:fd:3f:86:dd:f1:5c:7e:29:7a:0a:
ec:20:d7:68:e8:e5:7a:9f:3d:98:25:ff:02:f4:65:f8:9b:d8:
a6:49:01:59:65:2c:44:cd:64:6a:63:85:cf:f5:b1:cf:6f:24:
23:8f:38:76:3b:b8:87:60:83:ea:10:6d:7d:37:5a:39:f3:1a:
b2:ed:e1:c8:d8:51:e6:71:1f:f5:e1:9d:3c:4b:37:20:61:cf:
bd:67:31:cd:21:b8:2e:13:68:f0:fc:13:11:eb:fd:ab:a6:00:
c1:7c:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:31:46 2025 by rpki-client