Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: +Q1YSu7ZT6seMh4djytM+M+wxJSk0hpCIp/RgonGhLo=
Subject key identifier: DA:38:A5:39:79:8F:A8:9D:EA:67:13:92:19:BA:47:7B:FF:EF:E7:59
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 01987418C8B0A0951758381DA59120065709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 0E3E
Signing time: Mon 04 Aug 2025 08:00:37 +0000
Manifest this update: Mon 04 Aug 2025 08:00:37 +0000
Manifest next update: Tue 05 Aug 2025 08:00:37 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: Eyu52XRAL55pUqMyoRAAPPethU6O/1uraUzZp0Bg7ro=)
2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:c8:b0:a0:95:17:58:38:1d:a5:91:20:06:57:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Aug 4 08:00:37 2025 GMT
Not After : Aug 5 08:00:37 2025 GMT
Subject: CN=da38a539798fa89dea67139219ba477bffefe759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:1e:9f:e0:ba:da:4e:a1:a1:6a:14:1d:d2:
4a:7b:a3:b0:0e:42:d7:ef:b4:5b:19:bb:57:1c:5d:
bf:87:38:ea:b4:fe:fe:e0:e2:76:9f:1c:b6:da:2d:
d8:2f:4a:42:9d:29:0c:41:bd:33:80:2a:fa:52:e1:
e3:0f:be:d5:e7:87:e8:ec:c9:5b:5c:78:92:e0:5c:
f3:6f:b1:91:3e:28:71:61:f8:18:86:c4:c2:6c:e1:
80:b4:0f:01:4f:b5:9b:9a:f7:87:9c:3f:f7:f5:f5:
76:07:93:a2:91:10:ca:e6:a4:92:fa:d5:f4:65:d6:
bd:f1:99:00:45:11:8f:ba:c3:77:f6:ae:f9:1b:e1:
8f:17:49:20:c6:3a:39:4b:19:f3:5d:a7:0e:01:87:
8e:cc:35:18:c3:65:d5:68:b6:c2:bc:e0:64:1f:c8:
51:fd:86:1f:31:f8:51:e3:8d:d9:89:16:05:5f:d5:
b6:e9:ff:bb:26:a6:cf:34:99:7e:4e:72:ef:a1:44:
ef:94:a3:9a:12:3a:4e:01:cf:b7:17:fd:27:2b:8f:
f8:09:d1:57:b2:45:f9:ae:87:24:d2:89:bd:4c:ca:
71:45:2d:6f:ec:25:e7:8e:a4:4d:9a:8e:36:08:91:
f8:aa:52:df:bc:ff:5f:16:cf:d8:8a:17:b1:3d:f8:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:38:A5:39:79:8F:A8:9D:EA:67:13:92:19:BA:47:7B:FF:EF:E7:59
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:78:13:13:a2:18:19:9b:5d:a7:c4:82:73:92:60:5c:33:95:
d2:21:dd:1e:e1:ea:58:ba:d2:d8:48:e8:ef:3c:37:bb:1e:82:
4b:21:d1:93:10:c0:de:8d:e4:0d:35:78:94:22:c1:f3:2f:c8:
1e:a1:f0:71:9e:1a:42:f0:8d:15:aa:27:49:75:d0:0f:a7:15:
9f:f4:d8:b9:2d:81:89:11:d2:93:72:81:e6:ea:fd:87:1b:ca:
93:fa:40:4b:af:07:65:e2:6f:b6:28:91:64:35:2e:93:d3:11:
3a:bd:20:4d:3f:dd:e9:6f:8b:1d:df:4c:31:39:84:32:c6:c2:
46:27:9d:30:51:08:c3:44:1c:05:7f:85:f8:ec:fd:7a:ac:4a:
50:a9:2c:a8:ff:db:9b:83:92:14:03:b3:0e:6d:b6:f4:31:89:
c3:0d:1f:0c:0b:48:5f:5c:57:fe:50:9b:4a:01:09:b5:c6:2f:
38:f5:5f:b1:44:23:db:e8:0b:9b:1a:4a:c2:c3:05:6c:1a:e4:
7d:da:42:49:9e:7f:35:c8:59:8e:d7:03:35:b3:92:1a:d2:c3:
2e:1f:9d:f7:79:8a:91:94:42:65:33:57:af:2a:77:d1:cc:f2:
34:b1:71:da:f7:bc:97:c6:ae:b8:dc:5d:04:70:3f:3c:68:c9:
aa:3e:2c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:38 2025 by rpki-client