Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier: 0I7yauwxENrM9DBsUUrWcEICNraY0jm5FuaZfSdRDPo=
Subject key identifier: 79:CA:E9:9F:99:8E:5D:37:27:D1:15:74:E0:E0:AE:71:B5:B3:DD:06
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 0198D515CFEE4BC7FC3417F52A8D766D5A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number: 12EE
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: 1ISrUMvXtY8idtkbmSmcNCBmXOs.roa (hash: JdzcjRC1qPASLJAyKXCJZ2jvTuTxM21yeidKZ9A5IsQ=)
2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: qVT7v3ous1iBJFF5LnGiaHJ9LRLJDivjcJsJpXcA/9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:cf:ee:4b:c7:fc:34:17:f5:2a:8d:76:6d:5a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=79cae99f998e5d3727d11574e0e0ae71b5b3dd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:53:67:ad:6b:d1:0b:1c:c7:c2:e6:14:10:
e0:3e:ce:cb:82:38:a4:7d:42:39:5f:95:e8:0b:4f:
d1:3a:1f:9c:9b:bd:be:0b:3c:63:20:21:38:66:14:
d3:7e:17:b0:a2:2e:30:0c:43:f7:ea:0f:30:ca:cc:
2f:c5:d2:31:1f:a4:11:92:47:24:c7:51:09:02:4c:
64:1d:f4:54:ec:4c:db:ac:a4:e1:cf:e9:5c:03:44:
a8:2e:60:14:f7:18:67:02:d7:df:e1:36:8a:4e:4a:
a2:26:48:3f:0f:b4:35:d9:c8:6c:ea:03:af:49:98:
b4:b1:2d:cf:21:ba:12:1c:de:50:a7:83:2b:4e:9e:
f9:a7:5e:40:44:2f:69:9a:63:aa:7a:eb:34:66:81:
d3:f3:57:37:83:d2:81:60:d9:2c:1f:12:3e:73:6e:
88:fc:f8:f9:9e:e9:a1:f3:ac:e0:97:b5:7b:67:f7:
3a:5a:c6:c1:6a:66:cf:ac:80:d1:2f:51:56:1c:be:
09:96:61:5a:57:5c:78:e2:dc:83:ba:e6:64:6e:67:
6f:43:47:88:5a:3a:87:d4:20:41:c0:56:c4:48:6d:
99:18:9d:d1:8f:5b:17:0f:0f:c2:5d:c2:83:35:7e:
7d:db:12:45:4d:0e:26:04:9d:8e:fa:97:cf:7f:72:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CA:E9:9F:99:8E:5D:37:27:D1:15:74:E0:E0:AE:71:B5:B3:DD:06
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:df:42:80:4d:b8:b2:a3:8b:4c:8d:63:b0:76:51:5a:be:d2:
eb:af:5a:75:44:61:6e:e3:4f:2f:c3:07:c7:fa:81:60:19:85:
bc:e8:0d:85:44:ea:5a:e9:c6:2d:33:d2:a2:5b:23:41:5a:62:
37:c0:74:c2:6c:11:a0:d6:f5:37:8b:af:ae:10:44:8a:18:e6:
49:08:c5:ed:8d:56:27:61:67:30:f8:18:ee:14:35:b4:d6:33:
27:a9:f9:23:0e:b0:c7:96:c6:0d:47:f1:d6:c7:5a:00:a4:48:
13:02:13:cd:22:5e:be:99:9b:a4:7d:a2:58:20:91:48:ca:e7:
d3:19:a4:18:69:f1:93:1c:5a:69:d3:f2:cf:87:c4:7b:e3:1d:
bc:0f:9b:d2:00:dd:36:0a:1d:5f:47:bf:d2:99:e1:08:68:0a:
c2:31:8c:5e:33:57:49:d0:2d:35:53:d2:83:6c:4d:d2:22:f1:
d0:5b:ee:28:f4:17:cf:96:1f:9d:4f:ab:19:5d:f3:3b:61:1d:
1e:02:db:ab:b6:6e:6e:a8:90:75:b2:e5:0a:31:5f:d5:a4:45:
32:5f:35:1a:b2:9e:ea:18:93:71:6a:28:1c:62:79:f8:d8:e2:
07:68:4c:ca:45:cd:2f:fa:d9:a1:29:51:da:e3:ea:0c:a0:17:
1c:54:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:11 2025 by rpki-client