Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: 6BPtcj7/1ra+UI7iQmDZ2yw6BhfU876MKrSgHDyk+sU=
Subject key identifier: FD:82:1D:9E:86:AA:7F:B5:FA:12:64:17:6B:D7:63:12:E9:5A:CF:72
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 0198D4A78D45947F0DD8D826FFD9FBB0BB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:07 +0000
Manifest this update: Sat 23 Aug 2025 02:00:07 +0000
Manifest next update: Sun 24 Aug 2025 02:00:07 +0000
Files and hashes: 1: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: /gDDKzKhKnuY90JtLq23PtL0OBuOTTo7wlG0eZ0IuO4=)
2: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (hash: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=)
3: Y2jaKnMLOg7L7yt3a5FoJKVZD9M.roa (hash: E77+sc63md8h3e/NARC1FrCtInem3ClY6WQ72Z8aT70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:8d:45:94:7f:0d:d8:d8:26:ff:d9:fb:b0:bb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Aug 23 02:00:07 2025 GMT
Not After : Aug 24 02:00:07 2025 GMT
Subject: CN=fd821d9e86aa7fb5fa1264176bd76312e95acf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:52:ee:87:a3:86:2d:a2:00:2e:01:ed:9c:d0:
00:94:6a:b6:9c:17:d4:4e:7b:5e:1a:fd:45:39:24:
2e:13:2d:56:7e:9a:11:f0:34:2f:7a:39:f9:b5:f2:
71:9d:c4:a3:7e:c3:6f:3d:c9:fd:16:b8:87:8d:83:
61:09:c9:3f:db:41:db:d8:48:0a:4d:d8:31:38:83:
9e:e3:e3:1a:4a:1e:55:e6:d9:ac:d4:94:42:70:89:
1c:2b:86:94:b4:41:b9:14:c9:94:dd:3e:3c:d4:3c:
2a:09:88:9e:c2:cb:70:61:3c:f2:b5:83:3f:a4:52:
e8:1a:d0:72:4b:9b:2d:16:44:57:f4:4f:c6:3d:a4:
83:0e:7a:83:57:48:61:20:8c:ce:ae:18:dc:d4:06:
e5:c5:f2:29:42:05:17:0d:69:87:5c:5b:44:bf:b5:
62:60:28:f5:a8:2f:59:8c:16:9c:1d:a8:c1:1c:43:
26:80:71:96:0b:03:91:8d:a4:9d:ba:9a:08:82:70:
19:6a:16:eb:19:9e:6a:fa:3f:d2:31:33:ba:5b:55:
67:2f:43:53:d1:42:35:d6:cd:a8:ed:de:2f:f7:e0:
a7:a8:e5:42:7a:6f:34:3f:81:0a:08:26:78:73:e9:
08:72:9b:fd:62:17:79:bf:59:32:0d:54:95:79:e5:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:82:1D:9E:86:AA:7F:B5:FA:12:64:17:6B:D7:63:12:E9:5A:CF:72
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ed:a1:c7:ad:de:b3:f7:ed:7e:63:ad:18:92:61:be:2d:5e:
10:e7:08:9c:e6:af:ec:ac:8f:f7:c3:ee:08:f6:d1:b8:1f:aa:
56:de:31:3a:57:c6:36:ef:24:2a:5a:c4:61:b2:d9:07:0b:18:
ae:bb:d7:39:c2:df:79:32:12:6e:5e:7c:66:d5:4b:66:44:bb:
50:f4:bb:4c:6e:eb:8c:3a:ec:ca:fc:34:10:21:9d:38:2c:9b:
ec:16:16:58:6c:90:37:37:74:a7:f2:87:8c:54:a4:f8:a3:2e:
7e:f7:a7:e0:e2:62:83:8d:14:a7:8a:ad:39:2f:28:f8:f9:62:
27:0c:d5:45:cd:0b:25:5f:37:af:5d:38:6d:d1:4b:20:db:76:
e3:73:f0:43:c7:07:bd:c1:39:47:23:88:64:ac:11:92:78:74:
97:ff:aa:29:b0:0a:ef:4a:fa:bf:1f:26:e7:c4:54:9b:1c:9e:
8b:4c:5f:9c:0a:6c:61:95:f6:df:21:fc:09:84:ed:fb:40:4c:
4c:35:2c:a0:cd:e9:df:f5:c2:bf:75:df:90:08:b1:aa:63:96:
ae:82:24:76:cf:0d:7b:88:7e:0e:5c:e3:33:9f:a7:20:b1:3a:
7e:66:0d:9f:05:13:96:99:5e:42:e8:e5:8f:9c:17:8c:0f:c0:
98:49:88:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:00 2025 by rpki-client