Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: qCWaO1bKvDC+HvYghrGdhciy+wjEdK7x13SqYiw7HEE=
Subject key identifier: AB:03:97:7B:EE:A1:8B:BD:7B:3C:F6:15:5D:7A:B8:B1:E3:B1:9A:8D
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 0197B7457EEBCE854E7A88EE1B7A036153F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 08AD
Signing time: Sat 28 Jun 2025 16:01:14 +0000
Manifest this update: Sat 28 Jun 2025 16:01:14 +0000
Manifest next update: Sun 29 Jun 2025 16:01:14 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: dTx8X94HWjw4PviuLoU3t6kXMbsy+VFUtUSDnM6Hysw=)
2: zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa (hash: haMcqGD9VuWSxs2wPMo5yLhdGqSHCO1AnFtOfllpTYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7e:eb:ce:85:4e:7a:88:ee:1b:7a:03:61:53:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Jun 28 16:01:14 2025 GMT
Not After : Jun 29 16:01:14 2025 GMT
Subject: CN=ab03977beea18bbd7b3cf6155d7ab8b1e3b19a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:91:2d:41:6e:8b:73:64:a5:50:d2:90:57:
09:98:a5:57:04:34:19:07:b0:3d:24:a0:c7:46:5a:
1c:b1:bc:50:c7:b5:e6:a2:8d:2b:f3:2a:2b:fc:5f:
09:c1:ef:76:18:02:d8:85:f8:23:73:b4:77:f1:6d:
67:eb:fc:57:81:22:4f:18:9f:1d:63:df:bd:42:8b:
8c:35:8a:9a:78:13:41:40:21:cf:a9:4d:06:54:b1:
24:4e:6a:29:46:2d:f2:39:ab:06:56:36:d3:ff:1e:
37:cd:58:c3:6c:80:7b:a1:d8:42:e8:86:72:ee:ac:
c9:f5:fe:2b:b6:6e:3d:07:92:f3:a4:6c:d1:ab:1c:
4f:bf:2a:6a:51:58:91:b5:3d:b4:03:a0:08:c6:68:
ce:1d:84:08:3e:a5:a2:98:c6:fb:cb:99:56:88:ed:
7f:f2:ce:3e:ad:d8:dc:00:e7:62:b3:c7:04:de:15:
a0:8a:d4:0a:0b:c2:1e:f6:a7:c1:f3:bc:61:8d:46:
74:e3:20:e2:f4:1a:67:e2:04:6e:70:9f:8f:83:ca:
a7:11:aa:50:b4:ca:15:f3:d0:e7:90:30:5f:9d:6d:
2c:6e:00:d9:5f:e8:68:70:62:56:6a:4e:4e:4a:89:
f9:6f:35:2f:72:5a:22:7a:5c:8e:9a:0a:75:44:00:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:03:97:7B:EE:A1:8B:BD:7B:3C:F6:15:5D:7A:B8:B1:E3:B1:9A:8D
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7c:4b:60:f9:f7:7f:ea:ad:1c:91:41:7e:d9:a6:35:30:aa:
80:5e:df:af:ab:0a:91:cb:c1:e0:29:42:65:d2:f2:0f:2d:60:
52:86:a7:ba:fa:a0:1f:c6:da:b7:af:1e:e2:52:34:b4:d1:2d:
e1:4f:6a:33:c5:19:0c:af:fe:51:1d:b9:2b:5d:59:56:37:f9:
53:1d:48:25:05:37:f4:35:e9:6d:de:f9:86:9a:08:6c:50:f1:
41:7e:7a:61:3e:f9:d2:0f:52:d7:fd:c6:90:22:a9:e3:b0:39:
e7:94:3a:66:82:47:8e:3b:67:fd:00:ec:33:33:7b:99:f6:fb:
64:ae:c8:21:af:4f:e9:8a:cc:94:25:a3:5b:a8:21:cf:9e:75:
6f:1f:b6:93:c2:e6:79:16:fb:67:f6:50:cc:a3:43:2d:8a:53:
e9:0a:3d:df:33:d1:10:19:cb:b8:99:13:77:52:13:1d:45:49:
da:3d:1e:b2:da:49:03:bf:dc:e4:1d:41:11:35:e4:9e:44:43:
85:94:c5:ba:53:9f:89:35:03:a4:ee:88:f9:62:df:32:86:5c:
ab:80:59:c1:93:94:8f:1f:dc:96:a6:27:4d:df:82:c6:31:b4:
a8:a9:bf:d6:7e:74:03:04:58:0a:64:2c:12:dc:48:c4:25:33:
ae:3a:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:46 2025 by rpki-client