Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: 69JYUNH/KDVtSKTGPpIhbKActq2S+cGnClJLOnu4z10=
Subject key identifier: E4:40:76:89:6E:0E:B5:E9:68:6C:3F:B1:10:26:07:4A:D0:D1:D6:D4
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 0198D472E329D5D171A0FCA4E3C963E6B0BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:02:35 +0000
Manifest this update: Sat 23 Aug 2025 01:02:35 +0000
Manifest next update: Sun 24 Aug 2025 01:02:35 +0000
Files and hashes: 1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: eLhLaEZGJiWgwGIejNRL2VQz+FmyyvQIghFD3DwFn3A=)
3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e3:29:d5:d1:71:a0:fc:a4:e3:c9:63:e6:b0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Aug 23 01:02:35 2025 GMT
Not After : Aug 24 01:02:35 2025 GMT
Subject: CN=e44076896e0eb5e9686c3fb11026074ad0d1d6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:ed:8b:f8:58:b4:63:27:ab:d3:31:9f:e3:
63:2c:c3:1c:d6:93:b9:b7:76:c9:47:4e:f9:2e:a1:
9e:3e:fe:0a:20:9d:a9:b5:3c:21:ac:29:37:fa:9e:
4a:df:fd:a9:bf:61:89:53:38:9c:21:cd:c4:4b:22:
6c:da:6b:c5:3a:c7:92:15:ee:d9:60:9f:6b:7a:6e:
2f:29:0b:6b:3a:9a:af:46:98:af:8e:09:bd:df:60:
02:06:8d:16:d3:6a:70:f0:89:1d:5e:db:ba:04:62:
32:d5:4e:da:b2:f5:74:dd:60:ea:00:fe:ed:e3:de:
c3:d6:76:d4:1b:49:f5:06:d8:2e:ac:41:19:c1:12:
88:ea:2e:f5:34:1b:7f:95:48:94:61:5c:c1:e0:7c:
85:70:5b:aa:df:61:b5:22:9b:3c:f3:3c:15:08:fc:
60:88:da:6a:08:8e:af:1c:f4:ff:f4:1f:58:41:23:
ea:c8:d5:63:d9:b1:cb:cb:5a:6c:6a:c7:f6:b7:55:
41:79:18:e6:3e:db:b1:65:f1:3d:99:0d:f4:9f:77:
2a:62:96:0f:7c:30:b6:6b:8a:37:dd:be:f4:1d:64:
f4:8f:19:d3:c3:57:59:f3:7d:c1:94:9a:7a:db:89:
8e:6c:d5:ac:05:46:19:7b:67:47:a8:0d:19:c1:a9:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:40:76:89:6E:0E:B5:E9:68:6C:3F:B1:10:26:07:4A:D0:D1:D6:D4
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:43:07:36:e8:92:b7:d3:0c:5f:48:08:25:b9:22:5e:a2:46:
79:69:9c:4d:1b:9a:f2:49:d1:02:8d:74:12:fd:1b:51:82:83:
ee:97:52:01:b7:2b:28:74:24:b8:8f:6a:10:53:eb:94:c1:2b:
4e:b2:05:f5:ba:99:d6:5b:ac:73:61:84:e9:7b:3e:16:10:16:
24:da:2c:a1:ff:90:74:eb:6b:ba:f4:ce:86:79:8e:58:f9:d5:
57:a0:6e:2c:be:3f:be:20:46:f1:8e:aa:e2:c2:80:96:9f:3e:
30:cd:fc:9d:24:88:d0:1e:ef:f6:61:0c:09:f3:83:f8:61:f4:
b8:7b:0d:52:61:ae:14:53:61:dd:17:f6:e1:16:e8:88:e8:c0:
40:ca:44:11:b8:5c:ad:89:10:13:98:e4:ab:77:d9:c8:85:83:
4e:4f:72:22:5d:1d:dd:68:57:d9:e3:6b:3f:96:3f:dc:3e:b9:
e2:f5:e8:33:7c:3b:14:12:68:a8:65:1b:7c:c3:e7:e3:57:3e:
2b:f6:ec:bc:17:dc:f5:b4:e0:e9:c9:5e:b7:5e:99:2f:66:48:
d9:a9:a5:3e:f7:71:a2:27:4f:26:80:2b:ee:98:9b:0d:4e:43:
96:1e:7d:9f:c7:fc:3b:f8:3d:15:8c:e7:a8:28:8e:a8:83:88:
ac:8f:2f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:29 2025 by rpki-client