Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: lUHIgdMsEA3SvZAFx5WjS2LuZPZ8LWv3NSi/pNETyG8=
Subject key identifier: 4A:A0:69:24:93:0E:83:A9:49:87:A3:47:AD:01:E1:AA:3A:7C:85:81
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 0197B89000B207F77077608BDAE89E4B9290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 0D3A
Signing time: Sat 28 Jun 2025 22:02:14 +0000
Manifest this update: Sat 28 Jun 2025 22:02:14 +0000
Manifest next update: Sun 29 Jun 2025 22:02:14 +0000
Files and hashes: 1: 1-6tgApGzi84jUfnnO4hR3VcZnhw.roa (hash: HVjUDSjbZacQo7V9+9zKGEkK9aQQLCss0l6qBdFGXKw=)
2: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: lPbP8mve+uV+6gqytqJm/R1E22TinEEhttRQnGFfPe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:00:b2:07:f7:70:77:60:8b:da:e8:9e:4b:92:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Jun 28 22:02:14 2025 GMT
Not After : Jun 29 22:02:14 2025 GMT
Subject: CN=4aa06924930e83a94987a347ad01e1aa3a7c8581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:bc:ce:a1:b3:83:eb:15:47:e9:46:77:2d:
29:22:dd:a7:ad:93:f9:57:65:d1:96:3c:da:a1:07:
69:a5:3f:31:28:36:35:f9:fb:95:f5:9b:6d:ff:c2:
4d:a5:de:e3:d2:36:96:e5:15:24:89:76:15:9e:73:
ac:86:95:39:df:4e:1f:93:8f:e7:f3:ff:ba:2f:03:
17:a7:c3:49:74:c6:e7:18:c2:11:4c:17:1f:8e:92:
98:74:8e:23:0f:ca:32:7c:e0:88:29:3f:bc:81:e1:
15:4c:76:93:26:c9:81:22:94:f3:c6:ab:d2:65:4c:
2b:2b:38:92:16:2e:2c:62:ac:d4:26:7c:48:4d:4d:
b0:16:1d:24:24:f5:06:2c:d7:92:7e:f1:9f:89:96:
00:36:f4:36:91:1c:1a:37:f3:43:dc:67:01:7f:8e:
2b:ba:93:c8:f8:57:91:2f:73:d6:7c:4a:5b:84:4b:
63:f0:4b:02:83:07:18:4b:be:96:9d:17:15:ef:a0:
33:26:f6:28:35:b7:f9:03:cd:db:08:ee:00:36:08:
87:8a:4d:9d:ff:67:b0:4f:51:8e:ce:4a:b1:79:62:
0a:8d:a0:3a:98:39:c5:24:b4:3c:c5:aa:64:41:81:
2d:4a:c7:e5:b2:55:fb:cc:83:8b:71:2b:ca:56:11:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A0:69:24:93:0E:83:A9:49:87:A3:47:AD:01:E1:AA:3A:7C:85:81
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e3:fe:40:9c:a0:26:92:72:bc:6c:73:8e:cd:20:ce:0b:8e:
a9:8b:ff:ce:d9:5d:ab:f9:d4:9b:e5:b7:2e:99:c8:bf:89:3a:
28:b8:33:82:ab:e4:15:81:16:aa:11:9d:18:1d:b2:44:c9:7e:
17:97:cf:f9:2c:4a:5f:51:a3:14:b9:88:dc:2b:02:04:7e:de:
cf:d4:89:52:6e:b6:59:d3:8d:03:24:fa:72:a6:0b:dd:3d:30:
37:6a:46:6d:46:0c:99:2c:b9:8f:8e:53:a6:5e:cd:c6:c2:2f:
1a:7e:a9:71:ad:19:2b:11:c6:d5:4f:0d:15:71:f5:63:65:a1:
39:80:43:0a:86:6f:27:a5:bc:05:df:0e:8e:b9:65:d2:ec:c8:
76:e7:58:a9:6f:b3:36:45:27:7b:ed:b7:ba:3e:a1:47:81:a8:
63:aa:78:a2:d8:c2:31:17:07:c1:30:27:38:e0:69:67:dc:75:
b5:a2:f3:34:da:48:17:19:97:61:51:4d:56:c3:63:94:9c:43:
a8:b7:5f:27:03:ed:2f:18:51:5f:cc:ba:f1:fa:e8:7b:ea:1c:
ff:ff:e8:93:3f:08:c7:0b:ea:e8:28:1d:b3:5b:8b:13:da:f3:
03:d2:f1:13:b1:9f:dc:c6:1b:08:53:f3:22:9b:66:8c:77:94:
95:70:75:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:50 2025 by rpki-client