Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
File: G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json)
Hash identifier: w3svsDcV4IE6bgrvHqW5FkW3j8hbapTX6WuejsUa6A8=
Subject key identifier: 33:7D:15:47:FC:2F:63:E0:90:3A:EF:1B:65:07:9C:62:BB:F1:19:01
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Certificate issuer: /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial: 0197B8FD85A321E3F4996D1848BB338C6FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
Manifest number: 0F31
Signing time: Sun 29 Jun 2025 00:01:51 +0000
Manifest this update: Sun 29 Jun 2025 00:01:51 +0000
Manifest next update: Mon 30 Jun 2025 00:01:51 +0000
Files and hashes: 1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: NV/lCEtT/Fob5bHdlgZfrgXncTCrt4NrdDjXqDIjmjc=)
2: hH7p55BYalQ3lSf5_ESdyJOLa1g.roa (hash: CwjN/ntMIQN6pGzj4DyEYFD1soFJfMvM2aBgkytuAgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:85:a3:21:e3:f4:99:6d:18:48:bb:33:8c:6f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Validity
Not Before: Jun 29 00:01:51 2025 GMT
Not After : Jun 30 00:01:51 2025 GMT
Subject: CN=337d1547fc2f63e0903aef1b65079c62bbf11901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:6b:8e:0f:0d:e4:05:d1:9d:13:2a:c6:28:
aa:8a:89:d7:3a:09:ed:96:c3:a1:cc:8a:fe:e6:dc:
cd:36:2b:46:cc:b8:e1:27:b7:f3:3a:ce:08:eb:49:
92:90:43:ac:83:38:f4:7f:f3:df:3c:7a:cd:d0:e5:
1c:6b:11:49:41:1c:54:95:db:4c:86:c8:db:09:fa:
2b:7a:9a:3f:87:26:ae:ca:8c:0e:6f:f6:e6:5e:92:
14:f1:12:f3:ce:c6:89:5d:8f:55:84:05:a2:99:fb:
20:f7:82:cf:96:fb:d8:16:2b:3a:6a:7f:ca:07:ba:
21:cc:95:db:43:55:e8:5d:7a:0f:df:43:53:d5:ce:
0e:58:63:00:d8:25:4e:f9:e8:a1:b2:dd:09:26:24:
d5:55:23:67:27:e7:9f:9e:4f:e6:52:04:c5:6f:4e:
86:ff:db:23:10:55:7c:e5:63:77:04:3f:72:50:63:
a0:3a:d8:13:0a:44:92:19:95:43:62:f9:5b:30:49:
5f:c8:04:b2:f4:95:70:6b:72:8c:35:fa:93:8a:91:
7e:6e:b0:82:d9:83:d8:3e:e0:13:5a:5a:49:e0:4d:
43:ad:6c:d3:30:c3:53:1a:48:5b:cf:d4:6a:2a:8c:
1d:34:d5:5b:a7:e1:e4:ca:f8:2e:7f:8d:94:53:94:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7D:15:47:FC:2F:63:E0:90:3A:EF:1B:65:07:9C:62:BB:F1:19:01
X509v3 Authority Key Identifier:
keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:86:60:8a:62:84:13:60:af:ff:b4:b7:b5:95:99:e7:e7:14:
b9:59:94:cd:f3:0b:ed:ac:87:7c:93:dd:e4:6f:7c:f1:29:1d:
7f:88:2a:97:2f:d5:9b:78:d4:6f:80:8e:8f:16:2c:e3:fd:c5:
95:b7:32:76:2f:69:a3:4a:21:12:99:7a:dc:9e:24:2a:f9:4d:
ee:dd:0e:6f:75:0c:91:77:32:1f:29:92:a4:d4:6c:32:e7:76:
97:8f:9a:e0:fa:47:6b:91:d5:12:81:bd:6a:85:f9:f7:23:35:
a8:67:f4:f7:d1:87:33:24:1e:88:8f:63:ae:ad:8e:7d:4c:2e:
b4:6b:12:24:4c:4c:c6:8e:f4:75:91:97:c4:fa:4d:ec:61:59:
c9:cd:0f:f7:5e:77:79:7b:ee:be:46:79:3f:ef:df:ad:c9:2a:
3a:52:c8:23:02:20:73:46:d6:ae:03:97:fd:28:1c:df:73:60:
ca:0d:cf:82:09:e5:12:e9:68:c8:ef:e3:4d:9b:fa:a2:17:b0:
1a:46:8d:6b:92:01:6c:6d:82:2d:d2:98:2b:3b:3d:5a:1a:13:
dd:56:e2:32:7f:da:d0:f1:c5:84:69:a8:49:73:c9:57:6e:07:
87:4a:68:e1:ae:c2:70:35:04:72:52:29:0d:f5:7f:37:cc:66:
41:d3:70:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:31:07 2025 by rpki-client