Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json)
Hash identifier: XWb+cGVVkeWqM/h/DhOjxLptJyehD4icxTAnpc/0Exk=
Subject key identifier: C8:00:5E:F3:07:D2:0A:02:14:04:00:D1:77:5F:E1:81:D8:44:AC:1A
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 0197B6A057A4D4BF69705A95812233ACD536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:50 +0000
Manifest this update: Sat 28 Jun 2025 13:00:50 +0000
Manifest next update: Sun 29 Jun 2025 13:00:50 +0000
Files and hashes: 1: EWj-IKBdi-VQbg6FFbIiaaIj7UA.roa (hash: blruzwC9IPFb7cI8V12vzE/ugdCglrr9S2cLxCpCzJI=)
2: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: FQ0Tq+lzCcyYVas/3Q1ktFrdI7QMhBu1h+JhpjiXScY=)
3: l5yAXyPGwA9Y5lyLs2yb1MceJsY.roa (hash: AJ6lbq1xzcp35bTjVgiXhAuT5kBSyVNhwmMHHhgVeKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:57:a4:d4:bf:69:70:5a:95:81:22:33:ac:d5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Jun 28 13:00:50 2025 GMT
Not After : Jun 29 13:00:50 2025 GMT
Subject: CN=c8005ef307d20a02140400d1775fe181d844ac1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:1a:d8:75:62:8e:3c:92:c2:94:b0:48:2f:
a4:dc:9e:90:03:6d:6b:47:ab:a7:5b:60:bf:6f:32:
6e:83:ad:e0:dc:62:56:c5:cf:cf:81:48:93:8b:0f:
10:1a:1e:71:6a:95:a4:bd:e7:a7:dc:7c:54:90:0a:
88:5a:4b:66:f8:c5:b8:7b:eb:7e:8b:6e:6e:1f:ab:
cb:51:47:e4:61:4c:0a:a5:31:50:a3:07:76:98:1e:
11:32:4b:02:ea:81:06:dd:aa:ba:05:19:fe:9b:d8:
00:8d:8c:75:63:d5:9f:f9:f2:61:84:ef:7e:c8:6e:
67:6a:98:97:57:e1:8d:07:d5:e6:a8:7d:33:fd:48:
96:23:40:6e:ca:c3:47:79:ff:71:f6:0a:6f:a5:be:
c7:80:1d:3c:1c:0c:ea:46:79:ab:44:f6:34:0b:2c:
21:19:d3:26:32:38:a2:55:ff:c4:7b:b6:28:7c:8c:
b0:5f:65:83:69:8a:cc:37:5c:c9:54:1d:3a:c8:b9:
6e:8a:d8:68:28:d0:62:12:86:2f:49:cb:94:62:4c:
29:c4:f5:c6:5f:4b:b9:29:f9:9a:00:d8:ed:c2:2f:
17:b5:a6:5e:0c:66:8b:0a:ea:18:20:02:d6:a3:a3:
c3:b3:5e:76:67:81:7b:05:15:ca:47:00:54:e5:cd:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:00:5E:F3:07:D2:0A:02:14:04:00:D1:77:5F:E1:81:D8:44:AC:1A
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8d:22:40:38:a1:f2:5f:f9:54:e7:33:0c:ec:57:89:43:88:
f6:0f:39:5e:ea:e8:3b:ae:60:99:29:a9:14:96:52:ff:69:7c:
d3:7f:68:f3:59:0f:e5:ab:5c:9f:90:e2:c0:e3:73:47:26:7d:
93:6e:c5:fd:35:7c:79:ac:63:10:35:cb:12:23:3a:bd:46:98:
d6:6f:a4:4e:03:3e:bf:53:77:69:7d:f0:9e:f7:6b:c0:84:99:
77:16:3e:25:f7:17:08:9c:87:40:77:b8:00:24:44:a5:a7:b0:
e2:b0:87:4c:b6:7b:71:7c:af:4e:78:6a:31:43:05:47:dd:58:
cf:aa:b9:a7:9b:f7:e2:0f:00:83:a9:cf:b4:45:0f:63:49:be:
2b:fe:fd:d8:87:58:7e:0f:43:30:9c:ba:77:c8:6f:c4:12:80:
57:bb:3c:20:d2:fb:d2:f3:4e:88:b1:f5:19:c6:1a:89:82:03:
06:b4:fb:95:3b:a7:85:1f:e3:85:79:0b:b7:70:f6:89:42:cf:
a5:bf:19:f4:fc:08:7e:17:b2:ed:67:0f:18:6a:e2:34:20:46:
93:3f:bb:a3:9d:73:1e:61:24:6d:91:a4:28:84:c3:24:96:31:
d3:3a:57:78:2a:87:8e:e8:93:78:53:15:43:2d:2e:e4:7c:41:
92:35:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:26 2025 by rpki-client