Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: o0AaXrWGNjfOJHCjwL6ZHYeAFaMXftxqxibAt9tGgJw=
Subject key identifier: 38:C2:43:2C:FD:23:D8:B3:CB:6B:9D:BA:29:AE:84:E6:42:3A:91:C5
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 0197CEA923934C97E05E6AE2DD0139F34AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 1307
Signing time: Thu 03 Jul 2025 05:01:20 +0000
Manifest this update: Thu 03 Jul 2025 05:01:20 +0000
Manifest next update: Fri 04 Jul 2025 05:01:20 +0000
Files and hashes: 1: 7LJ9xawxzsvCYv_ns8BJ_8ldo2M.roa (hash: f0+qr316tmp0FcJIZdHHGP/bQ0+RaN5V5m4qk2p7tRk=)
2: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: zwPjjrJhLTPLvCiYNCnpKXa8zmdmf14XlqRrojFrllA=)
3: PnNWpVBdWoAd7atmJEGFvS64Mws.roa (hash: tnccYlmQkpOSmjFbn8qMQEzLxuwoQXHA9SM9r5ZMjAk=)
4: VUW_CECBbTHdD7KnSWpCp7f6Uls.roa (hash: dGtVeAhKlKvD4goyS7nYKPSCr10+/VHRE76M3fcZW0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:23:93:4c:97:e0:5e:6a:e2:dd:01:39:f3:4a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Jul 3 05:01:20 2025 GMT
Not After : Jul 4 05:01:20 2025 GMT
Subject: CN=38c2432cfd23d8b3cb6b9dba29ae84e6423a91c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:83:d1:34:82:74:fe:5a:e8:c3:e4:27:c8:
c0:54:60:ee:d9:35:b5:6c:c5:ed:fb:2a:8f:66:93:
4b:4c:ac:2d:8b:eb:48:b7:97:fd:b5:71:e1:b5:67:
6d:a2:cf:6b:33:cf:4d:0e:9d:c7:6b:a3:57:be:5b:
2b:b1:ee:b9:42:cf:38:26:68:77:3d:d4:af:c1:41:
e1:48:ed:a5:cb:cd:26:bf:2a:44:c0:ba:10:92:3d:
e1:95:22:16:99:5a:58:55:b7:66:ac:bf:34:bb:2d:
15:98:10:75:f3:51:14:eb:fe:c3:8c:2b:73:0a:6e:
d1:2e:4f:09:5a:c4:d6:89:83:a2:bf:ce:10:4b:95:
f8:35:ce:3c:07:53:3f:c0:29:a8:86:1c:1c:0d:cd:
32:31:11:1d:2a:ab:35:30:fd:ea:1b:d1:1e:ea:b9:
f1:04:5d:de:69:ac:ac:f1:df:c1:2d:85:b1:dd:9a:
b6:3b:fb:b0:c2:6d:cb:bd:7f:9b:6e:cd:5a:0d:2e:
7e:53:f8:c0:5e:1d:0f:57:77:d8:95:a2:97:92:ff:
7f:97:c1:3e:86:9f:1e:17:fb:c5:49:64:18:1a:23:
86:fd:01:c1:a5:c8:da:70:47:5c:3a:27:4f:ec:eb:
13:f1:ee:22:0d:6e:81:c0:90:64:28:4e:1e:0a:2e:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C2:43:2C:FD:23:D8:B3:CB:6B:9D:BA:29:AE:84:E6:42:3A:91:C5
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:df:f2:80:99:26:47:59:4d:0b:95:39:f7:be:d8:5e:6e:d3:
63:0f:80:c5:a0:50:60:76:cb:61:d5:be:3f:31:a8:25:e8:f6:
bb:76:27:69:86:3e:64:31:a7:fb:ec:fd:02:43:87:b0:5b:7e:
c4:bc:b2:31:14:d0:14:e6:dd:ff:1b:40:2f:4a:46:6a:c7:6d:
a5:4e:37:79:3f:b0:76:ae:33:4f:7c:0f:ae:a3:38:e5:31:4c:
3f:f9:42:3b:3c:6e:70:9d:47:51:2f:d5:75:59:f6:4a:7f:43:
b5:3b:5a:49:4f:9e:b8:74:61:33:60:98:ed:9a:68:5b:ec:d0:
10:75:72:c5:31:c1:a1:8d:b4:d2:90:8f:4f:26:d9:eb:44:c8:
7e:a1:ac:16:bc:70:77:37:0c:d8:02:5c:9d:cd:a1:03:3c:ff:
a4:dc:0c:7f:03:0b:ac:7b:79:73:3c:db:05:63:1c:30:2f:a3:
a5:0e:90:a5:3a:a5:ac:92:1a:75:81:5b:50:b8:d3:7f:c2:aa:
d1:ba:27:0c:17:ae:ad:f5:36:9a:e1:ba:b6:f8:2e:d1:9d:55:
1a:4f:47:de:98:e6:10:8a:ca:2d:09:a0:56:f8:48:6c:68:4f:
47:16:72:0e:a3:42:f3:4c:63:2e:47:0b:ac:19:1a:8d:0b:42:
7b:71:b8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:12:19 2025 by rpki-client