Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
File: G8qoP8mkEL2z4P0thIcgE0dxvs8.mft (raw, json)
Hash identifier: fJgcS9HrIKfVjKzjiQWvniNkcGJLFM01kkd/yCTEV9E=
Subject key identifier: 0B:1C:17:2E:C9:8B:28:0C:29:C3:67:5A:15:7A:D9:19:36:3D:91:73
Authority key identifier: 1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
Certificate issuer: /CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Certificate serial: 0198D92B140BA746F1071D87444802E59C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 23:02:15 +0000
Manifest this update: Sat 23 Aug 2025 23:02:15 +0000
Manifest next update: Sun 24 Aug 2025 23:02:15 +0000
Files and hashes: 1: G8qoP8mkEL2z4P0thIcgE0dxvs8.crl (hash: FSvH1+VKKopj7ee3HV6PIfrrqruz+SbNbaRduWQE1Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:14:0b:a7:46:f1:07:1d:87:44:48:02:e5:9c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Validity
Not Before: Aug 23 23:02:15 2025 GMT
Not After : Aug 24 23:02:15 2025 GMT
Subject: CN=0b1c172ec98b280c29c3675a157ad919363d9173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:d3:ee:6a:6c:aa:31:e0:5f:6e:03:5f:b6:
4b:df:66:35:f4:9f:d5:dd:fc:a3:f6:eb:78:36:7d:
df:aa:d4:b3:d7:94:1e:80:a7:b9:20:cb:b6:97:86:
1c:59:87:c3:01:68:5a:77:56:a6:07:27:2a:58:9f:
09:c0:47:41:7e:4f:0c:da:43:1c:cb:ab:cd:2a:ee:
6e:af:cc:08:23:c1:70:58:97:15:29:9d:0c:d5:50:
7e:5c:08:38:d4:ac:9c:b4:21:45:bd:f8:cf:87:ee:
fb:9e:c6:3e:a3:7e:ec:23:bd:8c:0b:a0:fd:79:30:
46:03:ef:eb:85:a2:13:f5:ed:85:30:d5:51:27:fb:
2a:5c:42:aa:77:46:4a:eb:e0:41:c1:3a:34:b5:16:
98:95:73:4d:22:fe:a6:78:80:97:9d:27:62:25:64:
17:64:a5:af:57:c9:2e:8c:90:55:14:2f:7a:42:1e:
6f:ec:57:78:d7:cc:8f:76:d5:41:80:8b:56:e5:a1:
b3:39:02:11:80:b9:8d:7a:c0:54:1a:62:06:fa:af:
7b:f6:c3:4e:b3:e2:73:f9:ce:20:b2:4f:a3:f1:70:
a4:2c:31:a2:54:28:fe:71:b4:5e:63:d7:82:8a:2e:
5b:1a:67:53:18:5a:49:5e:4f:5f:56:41:a6:dc:92:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1C:17:2E:C9:8B:28:0C:29:C3:67:5A:15:7A:D9:19:36:3D:91:73
X509v3 Authority Key Identifier:
keyid:1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bb:f0:17:b3:92:be:c8:ec:97:2f:94:2a:fe:bc:b8:3b:49:
59:36:d9:3c:20:22:e2:4f:69:29:ea:7b:4e:f0:14:bf:4f:8c:
19:ec:fe:47:f6:53:71:82:20:60:e0:35:ad:a0:a3:9f:07:fc:
ca:80:11:94:06:dd:fd:27:55:f7:6d:b6:e6:3c:44:4f:ae:8e:
7b:bc:7f:cd:55:98:20:87:8d:68:22:90:5d:72:f0:ba:81:82:
7f:65:6a:4b:31:36:da:6f:b3:82:0c:e4:07:27:60:f2:9a:75:
85:2c:a8:fd:81:24:9e:6c:ec:72:f3:43:27:80:ba:b5:11:64:
36:2d:0d:e4:b9:dd:72:b4:b9:b0:0a:1e:8e:29:90:3f:8c:56:
d4:4c:2a:1f:1b:75:99:c0:b6:a3:dd:71:d5:9b:3f:1b:c0:bb:
a2:85:03:74:2d:20:f7:0d:e8:05:27:51:57:10:cc:6a:8c:c2:
14:5a:60:6c:3a:eb:ca:5b:c3:9d:37:c4:d5:0e:f8:58:ff:66:
0a:5d:d1:b4:7a:76:01:10:cb:06:75:a0:33:83:41:a4:0a:51:
2f:0b:7e:a4:7f:bd:e7:78:53:5e:7f:14:93:f3:0d:75:d8:0d:
6b:52:50:94:64:f2:31:f4:b9:a2:ef:aa:52:b2:a5:c1:6c:ab:
ca:e3:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:10:15 2025 by rpki-client