
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: NqHr6RZM8C1hgpBCOQHSW0dVQNFtcKUD26y214TYT+k=
Subject key identifier: A3:91:27:E7:2C:10:6E:DE:B6:CA:6E:34:E0:56:A4:10:23:02:4A:2D
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 0197B6327F2CC51210681A15D1069B5314EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 148E
Signing time: Sat 28 Jun 2025 11:00:51 +0000
Manifest this update: Sat 28 Jun 2025 11:00:51 +0000
Manifest next update: Sun 29 Jun 2025 11:00:51 +0000
Files and hashes: 1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=)
2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: yzpynZ6FBjUxNp5c9JzV7Acfs30gyJ5G+ZTuAg0KJ8o=)
3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:7f:2c:c5:12:10:68:1a:15:d1:06:9b:53:14:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Jun 28 11:00:51 2025 GMT
Not After : Jun 29 11:00:51 2025 GMT
Subject: CN=a39127e72c106edeb6ca6e34e056a41023024a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c5:f7:7e:75:ef:64:0b:49:12:6f:db:77:29:
da:0f:af:b1:36:25:40:ff:2b:dd:49:33:8f:bd:c7:
ce:9f:a8:35:c7:b5:82:c6:e6:ca:ae:18:87:21:f7:
a7:ee:d7:41:f1:13:98:a3:8c:87:f4:c6:08:5f:76:
01:d8:58:17:c2:24:ff:d7:8f:e7:fe:17:c9:45:35:
fd:53:ef:72:a8:72:bf:36:3f:98:b6:8b:6d:34:89:
ca:53:79:11:d1:b5:3d:d4:87:39:6d:2a:1d:dd:93:
57:e3:c4:f9:10:7b:e4:03:cb:94:f9:f5:18:0f:a0:
7a:1f:6f:fa:86:98:67:5a:74:e3:cb:f4:68:ae:a2:
f0:e1:46:81:9c:5c:c4:10:e4:da:7c:ef:72:ba:bc:
9b:43:bd:f5:fc:c0:eb:3c:03:ac:6e:99:95:86:dd:
a2:13:83:78:fe:f4:c3:3c:b5:6d:bf:2f:6c:5b:64:
70:ab:99:12:e1:b0:2c:dd:20:52:e3:2f:21:bb:88:
9b:58:ce:8e:20:91:91:59:de:58:34:36:73:b2:e4:
7a:df:2f:de:01:c2:d5:7f:f3:28:25:45:bb:70:a0:
b4:d6:e3:75:29:05:2c:fe:ec:1f:a6:8b:14:3e:95:
a9:2e:f3:71:74:41:7a:f6:51:2a:5a:a2:4c:36:24:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:91:27:E7:2C:10:6E:DE:B6:CA:6E:34:E0:56:A4:10:23:02:4A:2D
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:31:4a:51:67:14:4e:a3:e2:b5:e4:15:34:37:d3:e6:ed:12:
8b:3c:af:24:e0:5b:a5:cf:4e:e3:bf:c6:41:c7:a6:e9:25:50:
92:bd:9e:8c:fe:b3:33:99:c8:70:94:cb:c3:d0:84:e8:b2:b8:
c9:94:0a:a4:29:45:66:95:08:c3:04:15:e1:4f:a7:e7:f8:29:
e7:76:2c:ce:3b:5a:df:66:20:f1:3c:67:3d:15:32:2b:7b:af:
06:aa:38:c1:15:55:51:29:c6:60:bc:86:5a:39:69:93:1a:00:
80:0a:11:50:e0:36:cc:85:6c:48:36:cb:49:6a:a1:2b:77:6a:
5c:15:4e:4d:5d:f7:e2:ea:cb:2b:8f:11:ba:9e:26:ed:30:2b:
db:48:c0:76:88:1f:38:1b:60:47:af:40:a0:c8:51:b0:53:9e:
21:3c:61:db:4f:93:b1:fa:85:52:4d:a9:3b:b7:6e:6d:2a:d6:
37:22:10:2d:b4:28:ef:e6:46:ab:a4:e7:a2:aa:96:e6:af:d8:
59:3a:01:08:b5:bf:19:f4:0f:f6:59:c4:ba:56:54:14:15:af:
0d:ae:20:ec:2e:11:88:03:09:24:9c:df:a4:75:db:48:49:c6:
9f:77:8c:8f:46:b1:13:1a:89:37:3e:f6:f8:de:53:e0:fe:ed:
2b:82:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:39 2025 by rpki-client