Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: y3MfIRFr8BM7Pm2/HUM7KvGv2e9FmEiqI5r+0EcG0WM=
Subject key identifier: 78:8F:EA:43:14:36:6D:82:AB:79:06:80:A7:93:C7:BE:FF:77:5E:C9
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 0197B6A08ECECE82DB6457B34FCC92D026D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:01:04 +0000
Manifest this update: Sat 28 Jun 2025 13:01:04 +0000
Manifest next update: Sun 29 Jun 2025 13:01:04 +0000
Files and hashes: 1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: aN7OvR0ZYWz6MADZJNdTQ90qJgza+X7bID22og+rmn8=)
3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8e:ce:ce:82:db:64:57:b3:4f:cc:92:d0:26:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Jun 28 13:01:04 2025 GMT
Not After : Jun 29 13:01:04 2025 GMT
Subject: CN=788fea4314366d82ab790680a793c7beff775ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:55:6c:f4:65:7e:56:cb:f5:66:2c:99:b5:
6d:0c:02:84:42:9e:00:c8:48:46:b0:d1:e9:91:2a:
21:69:bb:f3:63:22:2e:73:0a:7d:51:b4:a2:a6:95:
24:c4:6d:cb:fb:72:8a:1f:e1:fb:2e:0d:c3:68:2e:
fb:ea:34:f0:6b:ff:8b:39:c3:ef:8f:79:e9:80:bd:
6e:60:39:ee:53:49:b1:c0:ef:d4:70:e7:f3:8c:ac:
d2:c3:66:a7:10:25:fd:1c:1b:41:45:99:09:37:35:
e4:30:2b:cd:f5:a7:f8:56:2d:7d:29:6e:a6:e3:98:
51:70:f7:c1:c5:c8:68:62:75:9f:c6:50:65:6f:d4:
95:ff:56:01:cd:c6:5c:e9:76:3d:86:7e:b3:3e:a2:
b6:64:4c:c7:18:ee:b0:51:07:7d:62:68:af:bf:c2:
7e:10:a5:93:8c:91:d0:ff:2b:6f:cb:5e:52:fb:11:
91:84:98:0f:d9:07:9e:83:11:4c:63:02:c0:d6:6e:
61:17:9e:36:ec:d7:85:a6:ba:c9:06:4b:ec:91:d3:
e8:73:bf:c2:65:37:23:92:4c:e3:82:20:f8:7a:99:
81:3d:e7:7a:87:20:04:ac:85:b7:37:42:a3:3a:13:
fd:f2:bf:4e:11:f1:69:98:3f:e9:ff:b8:63:c2:e0:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8F:EA:43:14:36:6D:82:AB:79:06:80:A7:93:C7:BE:FF:77:5E:C9
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:03:de:93:7f:38:e6:80:e6:ff:69:c2:62:ae:4d:ff:7a:6e:
2f:3d:26:8e:f1:e6:18:a3:65:b0:e1:00:3a:9a:d8:e4:bd:af:
df:4a:cb:2d:9d:f2:98:24:29:8f:23:f1:03:f9:c0:1a:c7:00:
5e:8e:49:91:09:4a:43:9b:05:1a:62:f4:86:07:f9:40:1f:04:
0f:86:9e:8f:0a:00:76:f2:62:00:0e:e3:1d:ff:d4:7a:57:50:
a2:2a:9b:bb:d2:6b:29:98:72:56:1e:e9:fa:fa:fc:da:84:c4:
89:fa:cf:2b:b9:2c:40:18:c2:02:4a:b0:61:94:90:22:f8:2c:
02:b9:be:e7:be:3c:18:42:ba:a6:fe:6f:5f:35:67:42:f0:a0:
30:a8:ba:d0:85:60:ca:a5:ec:d9:f8:ba:f0:8d:30:78:86:8d:
b1:44:a4:56:64:9d:bd:50:6e:78:ad:58:c9:92:38:c4:76:e9:
e5:fa:2d:26:3d:73:98:ca:68:12:e6:50:97:78:75:68:3b:37:
de:b4:cc:3a:14:76:64:45:cd:82:1c:33:38:7c:d6:ca:58:46:
e7:c6:51:87:8d:c3:bd:ea:d9:3d:37:f5:6c:8a:6f:47:c6:57:
3a:bc:94:a0:5e:d0:d6:a5:1e:3e:51:2e:3c:62:38:02:6d:90:
19:6c:29:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:26 2025 by rpki-client