Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: Bxk1zgBXn9IADwc/xu8n/fCqvxsDI1YN7M/HnbcGK2Y=
Subject key identifier: E6:C9:C8:D6:FF:D8:3D:44:DF:9A:F5:B9:29:AE:43:E9:F8:2C:38:11
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 0198D4E0C4DDDA4D0EF54426EE7F00054398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 12CD
Signing time: Sat 23 Aug 2025 03:02:36 +0000
Manifest this update: Sat 23 Aug 2025 03:02:36 +0000
Manifest next update: Sun 24 Aug 2025 03:02:36 +0000
Files and hashes: 1: FpKpXAvwQ5eTmnpDjAybF20U0r8.roa (hash: rDfC3vqrlhOzRgHniKHIntRfI5mc/vDS+DS8eZGWJuQ=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: WRLQpensxwLPN6W8O2D7yQ918XL997+8h3/IwTAhCfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c4:dd:da:4d:0e:f5:44:26:ee:7f:00:05:43:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Aug 23 03:02:36 2025 GMT
Not After : Aug 24 03:02:36 2025 GMT
Subject: CN=e6c9c8d6ffd83d44df9af5b929ae43e9f82c3811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:40:cd:0e:bb:24:8f:aa:02:00:76:4f:58:
02:89:07:d7:c3:b6:a9:52:f9:1d:a9:89:97:93:7a:
6a:bb:a8:c7:76:90:a9:b5:25:3e:82:21:39:ee:8c:
b4:bb:d4:c2:0c:1a:94:7c:73:60:86:4b:8b:a7:61:
56:51:ca:72:1b:6e:2c:78:a6:3d:34:b9:fb:4f:6c:
0f:b0:9a:94:20:14:04:b7:42:c8:d2:a2:65:61:4f:
c9:47:e3:a1:4b:74:49:f3:6e:27:75:d2:9c:4f:d8:
2e:16:8b:41:2b:c2:66:be:f0:fd:08:ed:d3:67:9f:
d4:2a:e0:ef:66:ab:28:15:d2:64:75:64:da:c7:e1:
08:8d:0d:73:e3:1c:3a:1e:0a:45:00:8e:50:38:34:
d9:be:38:ed:43:ee:e0:33:e4:f6:d9:7a:89:f5:ab:
49:e7:d4:4d:58:dc:80:77:d2:17:d8:e1:3c:29:58:
06:95:43:de:90:e3:07:96:4a:af:72:69:85:da:be:
b2:1a:8c:06:84:af:ff:94:dc:1c:87:98:73:e9:27:
bf:4d:c3:3c:a6:ba:83:f6:1a:25:f1:74:b0:a1:09:
d3:7e:7e:39:94:fc:fd:33:71:d9:a3:f8:aa:70:a8:
3d:81:fc:2d:ae:8d:04:0a:c9:1c:83:8a:c7:8d:1c:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C9:C8:D6:FF:D8:3D:44:DF:9A:F5:B9:29:AE:43:E9:F8:2C:38:11
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ae:a5:5b:16:52:08:dc:df:a6:38:81:a6:32:44:96:16:93:
8a:22:85:47:ff:b0:8c:b8:e0:d8:f1:0e:0b:d0:c4:96:cc:25:
98:29:6c:94:3b:6d:51:57:12:ae:5b:3a:b6:51:1d:9c:41:ea:
28:90:7f:6d:73:67:de:ab:c9:2f:35:1a:d5:cf:7d:41:55:e9:
e2:a5:81:38:ef:32:b3:fd:55:8e:f3:84:14:02:06:d2:25:10:
57:ab:d4:1c:99:aa:3b:c2:2c:27:f6:1d:0d:19:c2:b0:36:ae:
ff:01:91:b5:da:b4:1b:9f:01:85:e3:03:ed:9d:5b:be:2d:80:
db:75:14:6f:6f:93:25:cd:1a:9f:e3:0d:a3:d9:af:6a:50:63:
e3:93:71:14:80:ed:b4:ce:7b:79:a2:68:17:82:78:02:e6:c0:
94:13:2b:0e:a9:70:90:2f:61:96:e5:15:9c:4a:1e:62:f9:7b:
6a:6a:98:19:3e:72:87:59:19:4f:8c:27:cf:db:ba:fd:b8:15:
86:b3:2e:f7:5c:7e:82:75:17:cb:59:7e:49:d2:b0:0d:40:10:
1f:c8:d8:c2:60:81:e5:e1:90:21:16:f6:82:35:3a:da:fa:21:
c7:53:cb:61:fb:33:c6:dc:bc:fa:f8:f8:ed:b7:20:20:40:e6:
2d:6e:d1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:22 2025 by rpki-client