Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: 03OLI3M35/F5/pSardXOIwk71cK58jcFmmKbwY6sQF4=
Subject key identifier: A2:75:EE:D4:7D:5B:6D:F5:8C:82:AD:BC:03:78:08:DB:E9:4E:29:F3
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 0199FE47330331A569D628FA5F57105793E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 1367
Signing time: Sun 19 Oct 2025 21:01:42 +0000
Manifest this update: Sun 19 Oct 2025 21:01:42 +0000
Manifest next update: Mon 20 Oct 2025 21:01:42 +0000
Files and hashes: 1: FpKpXAvwQ5eTmnpDjAybF20U0r8.roa (hash: rDfC3vqrlhOzRgHniKHIntRfI5mc/vDS+DS8eZGWJuQ=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: MsypjtTtjUNJpjmnpk87F6byrAuMLINcWI1mlkilohU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:33:03:31:a5:69:d6:28:fa:5f:57:10:57:93:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Oct 19 21:01:42 2025 GMT
Not After : Oct 20 21:01:42 2025 GMT
Subject: CN=a275eed47d5b6df58c82adbc037808dbe94e29f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:27:c8:93:66:35:89:b4:6c:7e:16:8b:f6:
56:85:04:e2:43:b1:97:ec:cb:8c:d9:c1:08:e4:b6:
4d:db:59:bb:74:39:e2:10:44:b4:eb:a0:27:3b:c3:
67:e7:3b:a3:9a:8d:cb:e3:cf:76:d0:0b:c9:37:8d:
e8:b3:79:3e:fa:00:0b:c2:57:07:dd:4f:74:c5:84:
02:26:c0:63:7e:b3:a3:b9:13:2c:1d:a7:eb:c4:00:
f2:ca:d7:ad:1e:08:68:19:23:6e:ff:89:0b:c1:41:
52:53:b7:46:40:57:b9:22:41:a8:ee:2e:c7:ee:94:
25:e9:11:2d:2e:f3:ae:4a:67:69:f4:7d:aa:14:42:
33:dc:e9:04:08:f7:ae:aa:7e:bc:b4:67:b8:3f:64:
39:49:fc:44:6e:81:85:2f:b5:bd:33:d4:67:65:13:
ca:7c:c1:69:c9:bb:20:70:e1:10:cc:eb:4a:4d:5b:
c2:db:fc:fa:d1:b7:be:9f:02:f2:a0:34:83:89:c8:
ba:ac:81:33:6c:5e:ac:bf:87:ab:11:88:44:e2:7d:
dc:55:7f:09:91:50:e5:6a:a1:32:dd:b3:59:c7:99:
a3:15:76:42:62:91:98:51:11:23:08:22:ab:c9:a5:
f4:4a:be:0f:eb:f0:7e:a8:4b:7b:37:20:4c:dd:e9:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:EE:D4:7D:5B:6D:F5:8C:82:AD:BC:03:78:08:DB:E9:4E:29:F3
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:21:5b:82:9e:a3:f7:c7:6f:94:da:8b:22:f9:db:60:04:43:
bf:b0:54:fa:48:1f:00:08:a6:f1:d1:58:d4:af:c9:40:c8:a6:
f7:73:01:87:41:b5:c3:13:97:b0:28:58:1a:24:79:b3:35:9f:
5d:93:63:2b:ab:90:a1:d0:c1:79:d7:1c:e0:66:58:b0:10:62:
40:08:14:ba:ca:15:ea:fc:b8:e6:d8:b8:14:7a:f5:3c:6d:36:
ce:f5:08:08:be:8e:5b:a1:1f:a8:d6:ba:1e:96:5e:17:e1:e5:
f2:5a:92:a2:84:01:ac:b4:52:3a:66:c7:68:d6:f8:95:64:58:
3b:a7:8f:e5:a5:a4:8f:a3:6e:d8:bd:35:96:86:6c:5e:44:40:
b7:ee:7d:b4:f1:7d:a2:af:08:c7:41:c1:73:73:96:36:d6:ce:
d0:ef:d9:62:42:41:eb:44:93:c4:60:72:0d:43:6b:16:ac:2b:
56:32:73:e1:33:d6:e9:d7:e0:5c:13:2c:ff:b1:d2:72:db:68:
a1:7c:10:49:77:45:f7:70:78:ac:8f:a5:ce:d6:28:88:f4:40:
f9:d2:90:6b:e2:94:de:c3:58:1d:92:07:65:2e:6b:79:ef:e0:
e1:e2:1f:de:5f:f4:14:89:2a:1f:ca:b3:2b:b8:51:f3:e9:e2:
d3:75:ac:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:53 2025 by rpki-client