Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: eF4eTAuQnya5MRjEsbXrT6/+aI+habxoNVheDB3mp4Y=
Subject key identifier: 74:91:FD:A0:A7:5A:B5:D3:7D:5B:C4:19:AB:24:13:6C:58:D0:CA:84
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 0198D705D6151B6805DDCCA1243AF5039282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0942
Signing time: Sat 23 Aug 2025 13:02:20 +0000
Manifest this update: Sat 23 Aug 2025 13:02:20 +0000
Manifest next update: Sun 24 Aug 2025 13:02:20 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: CAjOfEWvuozT3/SVg+zNZqFikOQQrwMn6iDmz57Q++8=)
2: zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa (hash: haMcqGD9VuWSxs2wPMo5yLhdGqSHCO1AnFtOfllpTYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:d6:15:1b:68:05:dd:cc:a1:24:3a:f5:03:92:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Aug 23 13:02:20 2025 GMT
Not After : Aug 24 13:02:20 2025 GMT
Subject: CN=7491fda0a75ab5d37d5bc419ab24136c58d0ca84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:ea:ce:52:d8:fe:31:1c:14:19:70:25:ad:
10:72:87:12:4c:ed:79:f9:b0:34:96:24:8d:7c:b9:
d4:df:4a:24:0f:59:8a:ee:c7:c2:90:78:e5:b6:ef:
58:b0:94:78:f0:61:03:50:7f:4c:94:14:92:f2:4e:
30:2e:2c:26:69:e6:32:c6:cc:29:bd:51:3a:6a:84:
e2:08:72:51:77:3b:23:90:c9:fd:cd:08:eb:fb:14:
01:fd:db:40:d3:83:83:e5:bf:0b:d4:5a:c4:2a:40:
6a:fd:0e:6e:b3:f2:66:79:85:e5:01:31:9a:f7:8e:
97:cf:da:6b:a0:91:ac:af:27:7a:5e:6d:7e:8a:d6:
2b:89:c4:da:89:1d:6c:2a:38:77:e5:97:e3:4b:d1:
16:f4:92:10:22:1a:f2:24:56:03:fa:a3:27:fe:26:
fe:2a:57:f1:b7:da:d8:10:69:dd:2e:cb:02:7a:ab:
df:d8:5e:ee:af:5c:ce:d9:42:c8:29:16:05:e8:15:
a2:16:fe:4a:fd:54:3f:31:04:15:0e:ba:1f:13:74:
ca:c8:5e:e3:2a:f2:dc:d6:38:31:fe:df:b7:e8:24:
73:21:ad:d6:22:58:31:0a:b5:d1:8e:0f:1b:19:c5:
19:db:2f:22:a4:bd:da:34:06:7d:f0:09:94:f9:75:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:91:FD:A0:A7:5A:B5:D3:7D:5B:C4:19:AB:24:13:6C:58:D0:CA:84
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:96:dd:c0:27:e3:5d:15:3a:2a:01:df:82:6d:11:1d:cd:91:
47:1b:f9:c6:4c:84:35:73:d7:e7:c5:0b:d9:a0:71:2b:ff:7c:
e8:ef:52:e2:e2:40:a7:55:63:3f:24:d4:c1:7e:9a:93:ce:b2:
e3:36:09:9d:58:73:f6:a7:ca:70:3b:ba:6b:62:c9:89:01:fa:
c4:71:91:9d:d8:8b:5f:9c:b8:aa:07:8a:5f:ee:ea:5b:0a:de:
6c:ff:bc:78:41:fc:59:14:d1:91:83:cb:96:c7:41:1f:16:65:
c0:12:e3:aa:7b:75:88:9a:0a:1f:73:31:3b:cf:a8:e8:6c:60:
a8:e3:73:41:cf:78:f5:d5:27:b9:ae:61:c8:ed:0b:46:b7:de:
2a:be:0f:87:dd:cd:35:4f:53:66:3d:fa:4d:0e:ac:5a:59:f7:
f8:fe:c2:06:ef:b0:23:e9:43:8f:ca:09:f4:1b:13:37:c1:3d:
b2:33:2a:d4:38:75:b8:f9:8a:bc:9c:24:c9:0d:23:db:4e:17:
1e:e7:65:4f:bc:ed:c2:a1:a6:b1:b3:e9:48:5b:d5:2b:85:f5:
5a:45:7e:7d:f0:2f:4b:04:d4:7b:e1:c8:14:ab:dc:c3:45:8a:
2c:59:46:72:13:22:7c:81:c8:99:49:e3:f2:dd:5a:a7:e6:b1:
57:9a:5a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:10 2025 by rpki-client