Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
File: G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json)
Hash identifier: Hlf4WbvgzVaB/XUeroYWp06JqKpNB/b0LCqAVJ7NI9Q=
Subject key identifier: 21:24:F3:C3:83:35:D9:50:CF:58:B7:FB:B4:21:E1:14:6C:37:75:4A
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Certificate issuer: /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial: 0198D4DFD0A18940FE2FAD448E535017A062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
Manifest number: 0FC4
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: lVUXaW0ms+z4Omu1nldIseslm/9dUYG8aYbW7caltxc=)
2: hH7p55BYalQ3lSf5_ESdyJOLa1g.roa (hash: CwjN/ntMIQN6pGzj4DyEYFD1soFJfMvM2aBgkytuAgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d0:a1:89:40:fe:2f:ad:44:8e:53:50:17:a0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=2124f3c38335d950cf58b7fbb421e1146c37754a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:03:92:f6:3d:37:da:69:9f:89:0e:4f:f3:
48:c4:a0:be:73:f6:65:3a:3f:4f:ed:8e:19:84:95:
37:45:7e:31:03:a3:06:a3:92:3a:0e:75:fc:86:62:
a6:15:62:96:1d:63:d6:dc:e5:53:97:73:25:f3:4f:
1a:2b:8f:66:c5:f0:d8:95:d8:95:43:1a:81:e5:d2:
75:df:dc:d7:63:41:64:ed:52:89:57:05:8f:2e:1a:
48:d4:f0:05:21:45:3a:e3:05:e6:e6:9f:99:e7:ed:
86:d7:3b:c7:f6:d4:d0:83:9d:5a:f0:3c:85:a4:78:
a9:83:23:cb:d0:0f:c4:37:09:7a:f3:57:dc:54:e0:
e4:be:96:c7:57:0b:55:bc:1f:8d:91:1b:91:62:88:
8e:bc:5d:b0:7c:7c:fa:dd:26:a1:89:12:10:5c:b8:
ab:8d:b1:d9:2c:ba:4a:a2:9e:de:8d:4d:1d:97:b3:
ba:3f:5c:a7:75:4d:9d:08:d9:a9:7e:0f:ec:d3:5f:
a7:ac:d6:91:f3:2a:65:8a:bd:83:8d:24:a6:4c:3d:
42:35:a5:1e:2a:49:03:df:56:07:5f:9b:21:d1:ed:
b1:ae:c5:85:41:5a:7c:99:30:cc:be:81:e0:89:ce:
26:c6:96:46:f8:dd:e6:fb:2d:ab:cf:71:3d:ae:df:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:24:F3:C3:83:35:D9:50:CF:58:B7:FB:B4:21:E1:14:6C:37:75:4A
X509v3 Authority Key Identifier:
keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4b:57:8b:33:6d:18:74:b9:15:27:eb:63:12:a0:30:18:a9:
56:f5:32:0a:a2:93:42:2c:7f:55:ae:09:c7:72:01:9a:8e:cd:
3f:76:14:92:ca:56:b4:50:64:4d:15:2d:0f:fb:cb:01:77:fb:
de:42:1f:29:e5:94:28:d2:3b:63:da:a5:60:03:b3:0d:84:ad:
29:39:31:3a:85:98:6c:7c:1b:5b:9f:ea:0e:7f:01:3c:41:2e:
00:0b:58:41:24:32:f1:f4:a7:f7:39:45:16:1a:b2:2b:a8:8c:
52:1b:1f:4d:4b:33:b4:92:48:99:98:e2:d1:d4:c5:79:9f:25:
e1:45:68:c0:e3:23:af:ba:7a:99:70:d7:0d:4d:c2:4c:ef:49:
5f:e6:ea:8e:d1:ca:67:5e:7b:e8:44:ea:87:d8:46:80:9e:61:
f8:df:7d:95:b1:7f:f8:f5:66:ea:75:65:17:a0:0f:24:bb:de:
ae:38:fa:05:08:a0:47:bb:5a:71:d0:83:fa:68:95:48:dd:86:
ea:fa:61:f3:c7:59:9d:21:3a:28:fc:ec:99:71:50:9d:87:1b:
9a:84:3e:95:2c:88:cf:0a:b4:35:0a:0c:0c:4a:7b:0d:5d:79:
c9:1c:6e:25:af:5d:6d:94:0e:c2:e9:de:07:36:46:5a:5a:a0:
4c:af:4a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:19 2025 by rpki-client