Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
File: G2t-l-0j1mqR-4qRv9nGdxEpsas.mft (raw, json)
Hash identifier: tHthvJh4Qof/SICEiXKc9uFUNQGp6V+/uqcvqrLjNwg=
Subject key identifier: 16:2B:41:77:43:D2:76:36:DB:AE:59:1C:59:84:37:A1:8D:F5:98:38
Authority key identifier: 1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB
Certificate issuer: /CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab
Certificate serial: 0197B70F2A00436954B98CEF07F7AC168E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
Manifest number: 0EAE
Signing time: Sat 28 Jun 2025 15:01:53 +0000
Manifest this update: Sat 28 Jun 2025 15:01:53 +0000
Manifest next update: Sun 29 Jun 2025 15:01:53 +0000
Files and hashes: 1: G2t-l-0j1mqR-4qRv9nGdxEpsas.crl (hash: jJIioAy0Eg2zSnCOvOQe+mUjaHdWkl3cAwVou1AvYmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2a:00:43:69:54:b9:8c:ef:07:f7:ac:16:8e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab
Validity
Not Before: Jun 28 15:01:53 2025 GMT
Not After : Jun 29 15:01:53 2025 GMT
Subject: CN=162b417743d27636dbae591c598437a18df59838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:9a:dc:14:9d:eb:20:f7:f6:ae:d9:ca:a4:
72:8b:14:ba:d2:8d:8a:7b:62:83:84:9a:bf:c0:41:
85:c4:b6:b0:3f:4c:f4:70:9b:d9:71:6f:c3:25:4d:
d7:cc:10:dd:37:87:85:ac:73:f4:27:f0:ec:e2:19:
29:94:a3:7a:5a:49:38:ff:76:ae:83:08:50:d9:4e:
03:2a:ed:a0:77:4b:f0:65:ec:66:24:ed:39:4c:db:
11:9c:28:32:e0:3b:6c:09:ee:7b:af:35:bd:e7:9f:
e6:b5:6e:86:0a:77:dd:ef:89:7b:ed:34:85:2f:74:
fd:e0:fd:6f:07:76:6f:9e:e9:4e:75:cc:d7:10:5b:
62:f2:96:20:35:7e:1a:41:7b:4e:5d:1c:b8:a8:4d:
88:16:88:fe:9a:20:b9:b2:62:0c:72:0f:2a:a6:07:
c7:f7:3a:f6:df:aa:2f:11:ad:13:73:94:0e:49:0a:
24:d6:f4:60:e6:4d:64:10:b2:89:e0:e9:f5:51:9f:
e9:da:12:01:fc:aa:08:76:9c:c8:f1:61:03:8c:1d:
d5:21:73:a2:1d:01:92:21:ab:66:5b:d4:be:11:36:
ae:d3:6e:eb:6b:bc:97:66:91:b8:42:89:a2:19:6e:
42:86:44:66:39:6c:57:be:24:1c:c8:6e:1c:4c:39:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2B:41:77:43:D2:76:36:DB:AE:59:1C:59:84:37:A1:8D:F5:98:38
X509v3 Authority Key Identifier:
keyid:1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7b:2b:1c:cf:b8:01:2a:96:f8:25:d6:1e:0d:0e:a3:1a:ef:
55:f6:07:e5:1d:88:1b:e3:d7:1a:9a:b4:53:da:77:b1:b7:46:
27:72:d1:9d:b9:51:af:c6:dc:19:0b:d7:cd:16:81:a5:b6:2c:
80:3f:1f:57:db:cc:de:2b:68:5d:1b:09:fd:0d:ec:45:b6:0a:
10:ad:29:d4:86:e3:39:0c:37:f8:02:14:bc:fd:60:34:fe:76:
51:29:40:ce:74:28:9a:e9:58:84:f1:24:c8:3e:ef:3a:c5:cd:
d1:a2:24:2d:db:f2:3f:7a:bd:8b:1f:a0:83:a0:08:65:44:7f:
68:6e:20:71:07:3b:9c:db:5e:47:c2:00:12:5b:50:f3:72:17:
3d:a1:3d:53:56:06:17:5d:2c:02:36:f8:4e:ad:60:a6:fb:d6:
d8:7a:b8:02:da:77:2c:77:ec:6c:7e:3b:64:b7:47:8f:4a:ab:
04:20:74:82:99:ad:7b:63:40:05:0f:55:a2:9e:7e:7e:48:53:
d3:19:29:4f:67:b7:dc:cc:f1:e1:02:ae:28:a7:f4:ad:14:ee:
02:57:64:bb:4c:02:80:49:5e:88:67:fe:20:31:ed:7d:a7:22:
b9:19:f4:15:17:42:10:d8:0b:a7:25:67:58:60:d9:7b:ce:d7:
7c:46:e7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:02 2025 by rpki-client