Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: StpVWpfv0V4Q43BrKlyTCXgSNgcu437Imzbafn6ICxY=
Subject key identifier: AC:61:F9:A2:2B:1E:C4:29:F8:E0:91:90:1F:A6:E9:06:73:FC:DD:B7
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 0198D5F145FF7AF59E4B8151A48FC935AD7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 1523
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=)
2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: updBE9OTVRiHceAhCG+2LxgSENfWvunM1nF5OBl5bwY=)
3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:45:ff:7a:f5:9e:4b:81:51:a4:8f:c9:35:ad:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=ac61f9a22b1ec429f8e091901fa6e90673fcddb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:43:12:69:46:59:a3:f2:64:67:b9:04:5b:
18:34:87:b9:71:16:24:16:df:82:b4:84:0e:3e:01:
f1:92:1f:af:ba:df:2b:85:dc:89:ce:dc:7a:10:98:
1b:86:da:32:27:2c:ff:0b:ba:85:09:6c:2c:22:0b:
04:c1:d6:7a:16:08:c5:2e:05:02:a9:8c:fc:8d:6c:
a5:c9:a0:37:85:be:e2:5f:82:af:20:70:ad:b2:9a:
0b:38:b7:b7:f0:cc:54:0d:f0:18:30:34:fd:17:0a:
39:24:7d:17:14:a5:63:66:04:ef:37:e0:6c:5e:1d:
36:7c:f6:97:15:f9:f2:74:5d:7a:b4:57:d5:f9:d1:
c9:21:21:9d:44:f6:7e:1b:2e:e5:d9:da:3c:bb:4d:
96:41:d8:07:13:27:9a:ef:7d:ef:6b:fa:89:b2:a9:
8d:39:eb:16:53:98:c7:5c:f5:fa:3f:85:57:97:70:
23:79:c5:28:6b:d4:57:c2:d9:aa:7e:07:1e:00:1d:
59:ff:20:fd:47:79:6e:fe:8d:4d:be:a1:e8:19:39:
c5:3d:f7:a2:c2:85:9f:0a:f8:25:40:c0:a9:0d:ee:
03:85:5b:d4:b4:36:41:e5:c7:eb:e7:53:97:49:7f:
7b:6b:13:60:f4:bc:70:65:ad:d5:f8:bc:97:58:d4:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:61:F9:A2:2B:1E:C4:29:F8:E0:91:90:1F:A6:E9:06:73:FC:DD:B7
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:70:ac:98:ce:9d:f6:2a:2d:c1:eb:34:e6:33:96:2e:de:df:
5f:a6:9c:57:a9:a4:95:a5:59:4c:3f:e5:49:0f:07:a0:75:d5:
42:bc:af:ac:b5:19:48:c5:52:e9:44:e9:49:2b:f6:3c:a1:67:
05:60:96:63:94:8d:a0:63:74:f1:75:21:49:d7:57:be:99:73:
e2:c4:7f:81:a8:5f:78:ac:e6:1d:a0:4d:eb:8a:cb:61:71:7b:
aa:9a:d7:9b:6e:e0:24:83:61:18:b8:bb:d1:5a:67:e5:fc:04:
d9:5f:66:65:a3:bb:cd:20:46:2d:f1:c0:fe:9b:58:cb:2e:52:
3a:fe:58:d5:d7:5e:b1:d8:e4:19:96:c4:f2:14:6a:21:df:06:
d3:dd:d8:c0:82:0e:d4:75:6a:ca:44:82:05:3e:a8:28:4e:0f:
b7:37:cc:0b:cd:97:1c:00:00:39:97:a1:81:39:32:ff:41:55:
0d:54:19:3f:9d:15:a7:22:42:e9:67:88:44:f1:54:92:21:3d:
9c:f2:ef:9e:6a:f2:2e:7b:ca:d9:c7:fb:95:52:c4:23:fd:b3:
0e:96:58:66:ef:33:85:a4:aa:18:b2:5a:82:9e:54:d4:b9:f2:
0a:73:26:62:43:b1:3b:36:75:82:55:7c:2d:77:8b:c5:12:71:
23:74:32:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:19 2025 by rpki-client