Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
File: G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json)
Hash identifier: B8dRJ4d7N7+ih57ASyDZ2er7LIwzuXqYEDZ1PlN9Wk8=
Subject key identifier: 93:48:01:7E:06:78:D4:B0:42:02:03:10:53:A0:F2:0B:FC:7C:09:64
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial: 0198D7E0F979D7AF80A557A447E7500C1685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 17:01:41 +0000
Manifest this update: Sat 23 Aug 2025 17:01:41 +0000
Manifest next update: Sun 24 Aug 2025 17:01:41 +0000
Files and hashes: 1: 2iBSszmMQqmiQ3uytPa6Rj5usVw.roa (hash: uKmKRGw9bMp+kTA7Ddvynf7WAl8sh27c2GAtM3UsdJQ=)
2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: 8lf+Had20kSbBZCkbOOMp00/2ttwHptAvuDAoteWGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e0:f9:79:d7:af:80:a5:57:a4:47:e7:50:0c:16:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
Validity
Not Before: Aug 23 17:01:41 2025 GMT
Not After : Aug 24 17:01:41 2025 GMT
Subject: CN=9348017e0678d4b04202031053a0f20bfc7c0964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:3e:f2:78:a5:c6:51:79:10:23:72:01:db:
11:64:03:16:3a:8b:4d:61:12:db:89:09:f3:e9:24:
41:2d:c1:31:d6:b8:9b:0f:10:e4:b9:0f:ca:4b:c2:
65:68:14:58:ed:5e:f0:7d:5f:66:3f:49:5f:5d:f0:
45:08:d3:9f:0f:60:44:f4:98:07:d5:7c:ef:1e:d4:
b9:7c:eb:82:99:5b:94:d1:b6:c0:ac:53:0f:a3:3e:
75:53:4b:8c:6c:f3:c8:0d:c7:d3:6e:42:c9:96:d5:
aa:ca:30:ee:84:6e:fc:1e:6a:6b:59:85:39:74:23:
3b:a0:25:3e:70:33:8a:f7:20:0f:72:94:3c:fd:5b:
a1:ac:1f:62:8e:8a:d1:84:25:f2:e1:35:0a:44:d3:
c5:25:54:02:6f:74:b1:8d:07:5c:7c:b5:2e:13:b3:
ba:d7:8b:89:4b:d0:9b:bf:f6:d4:40:74:f7:ed:6d:
c9:bd:bd:2e:36:19:10:79:6f:d5:6a:8a:a1:c6:1c:
00:c3:af:65:3d:1d:bc:7b:86:de:ac:da:dc:36:d8:
3b:af:8d:eb:9b:32:fd:34:8c:e6:73:eb:27:bf:4c:
46:ea:93:bc:dd:df:9e:bd:80:5a:bb:25:4f:f3:18:
64:b1:1a:0a:4a:06:c7:d5:9a:93:22:4f:2b:b2:88:
d6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:48:01:7E:06:78:D4:B0:42:02:03:10:53:A0:F2:0B:FC:7C:09:64
X509v3 Authority Key Identifier:
keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f0:a9:e9:b4:9f:58:e2:09:6f:e7:d7:26:0c:ad:96:c9:8d:
61:cf:70:a2:01:d0:f1:e4:38:c8:a4:9f:45:d3:1b:d2:d8:32:
78:88:ba:b2:8d:42:12:47:ab:62:bf:11:40:11:99:e2:08:d7:
1c:13:84:8a:11:23:68:fd:44:b5:f2:eb:a1:a7:a5:c3:c6:7f:
b0:48:e5:09:19:eb:44:a9:7a:35:28:01:0b:29:67:84:1c:70:
6a:ce:c2:cc:7e:ba:d4:fc:b0:23:86:ac:dd:3a:c0:0c:c1:eb:
2b:74:8d:22:67:61:78:4b:33:83:16:53:82:23:a6:a6:df:b3:
dc:06:5b:d2:f6:c1:66:35:85:08:c4:66:89:27:11:bb:e1:0b:
ee:2d:3f:56:14:f8:a7:28:4b:d8:90:79:d1:50:c8:a8:93:f6:
8c:bf:18:d1:ed:fd:5c:c0:4e:d2:50:fc:8b:18:e4:44:2f:2d:
f5:1a:f6:40:0d:8b:76:62:e0:25:12:54:ee:16:b1:71:06:2e:
f4:3d:a0:69:69:f2:57:a1:e4:56:c1:9e:a9:02:d2:62:4e:34:
4c:69:df:52:0d:ff:bf:ce:40:bb:d4:2a:34:06:0a:80:6d:4c:
9e:99:3b:c7:10:29:07:47:2f:3e:14:51:22:35:74:71:eb:da:
01:9b:be:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:06:42 2025 by rpki-client