Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
File: Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json)
Hash identifier: UZdjQAzwP5YGaTVo/UhoSLYHma+QwsEQOX+Cp23PxXM=
Subject key identifier: 3A:53:8F:99:AC:20:13:65:9B:25:1A:60:92:AF:AD:DF:7F:FD:02:A5
Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
Certificate issuer: /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Certificate serial: 0198D54E745240636120235091B30204A7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
Manifest number: 0B50
Signing time: Sat 23 Aug 2025 05:02:25 +0000
Manifest this update: Sat 23 Aug 2025 05:02:25 +0000
Manifest next update: Sun 24 Aug 2025 05:02:25 +0000
Files and hashes: 1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: 8ceWNM7+WbYiTmCA7VHSHOWsSH/ajIuiATtA8A3UzCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:74:52:40:63:61:20:23:50:91:b3:02:04:a7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Validity
Not Before: Aug 23 05:02:25 2025 GMT
Not After : Aug 24 05:02:25 2025 GMT
Subject: CN=3a538f99ac2013659b251a6092afaddf7ffd02a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d0:81:e5:48:e1:1b:ac:ad:d2:7c:d8:43:27:
3a:c3:2b:fe:90:d5:04:90:2b:5f:67:be:51:67:4d:
4b:48:ea:f9:ac:a8:94:24:c3:a0:81:22:94:0a:32:
fe:7d:1d:4f:48:6c:8e:b9:13:65:8c:6e:70:c3:71:
d6:8b:78:a0:c6:a7:e3:2a:03:f6:bc:de:86:75:21:
ec:19:50:e7:08:e9:2b:8b:cc:62:c9:92:df:4e:cb:
bf:88:65:dc:2b:68:b4:96:4a:eb:4f:9d:b7:0f:5f:
1e:4f:77:63:d0:cb:10:80:cc:67:7b:ec:1b:99:c1:
97:6a:f9:55:cf:43:1e:35:d8:34:cc:18:66:a5:61:
ed:7c:0e:13:67:83:2d:11:ee:c2:92:db:d6:46:98:
a7:4f:34:61:d1:36:bd:8b:5c:fa:93:5a:2c:0b:4c:
68:f5:dd:f8:86:35:e9:0a:17:af:9d:57:85:17:71:
02:1c:c0:42:8c:07:38:30:e3:49:ff:fc:5c:40:f7:
1c:ed:4e:41:d0:44:48:df:33:bb:9e:9e:30:02:db:
0e:99:e2:cf:f6:8b:69:2b:c9:d4:b4:78:8c:21:49:
2a:30:6a:30:e2:c0:c4:5d:bb:fb:89:de:fd:34:69:
be:23:aa:84:e7:02:96:83:72:1e:a8:40:ca:4e:de:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:53:8F:99:AC:20:13:65:9B:25:1A:60:92:AF:AD:DF:7F:FD:02:A5
X509v3 Authority Key Identifier:
keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:09:b3:6d:f4:b6:7b:bb:87:bb:36:ba:e3:f6:f4:21:8d:fc:
15:5a:3b:5d:dd:23:5d:ea:5e:e4:d0:80:22:e1:ae:4b:0a:32:
bd:90:07:8e:a5:e4:04:d3:64:e0:bc:41:d0:0e:78:69:43:2b:
df:fd:d6:cf:d4:2d:5b:5d:fb:35:43:99:6d:7d:79:4d:9a:e5:
3a:82:8a:d1:a9:d7:dc:22:54:ac:6e:0c:ec:5c:68:3b:ff:68:
dc:fb:7b:ff:9a:d2:16:ec:14:54:14:20:15:26:d2:4c:ec:04:
d8:d5:11:a4:c3:b5:69:65:8e:a8:2a:d4:3a:78:23:10:70:3b:
89:f5:6c:12:f5:5b:29:87:5d:39:68:6e:bb:16:73:c1:dd:12:
b6:33:ab:fb:00:bd:48:6e:b9:8c:55:24:36:98:49:f0:e5:57:
85:6f:03:ba:b3:c1:c7:fc:24:59:c0:d1:f0:fd:47:e2:ac:c6:
3b:25:2d:a8:a8:5c:8b:ec:25:ce:fd:39:32:0e:2f:eb:52:23:
5a:5f:97:51:3b:b0:39:15:11:c5:fa:30:68:18:e2:d0:fa:e7:
ca:28:51:04:c8:c3:7f:09:f9:b0:c0:2e:5e:ed:4a:e2:e4:62:
fa:f2:fb:94:ef:82:3f:54:61:38:3d:d4:99:d1:5b:9b:7e:57:
f3:95:1a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:20 2025 by rpki-client