Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
File: G2t-l-0j1mqR-4qRv9nGdxEpsas.mft (raw, json)
Hash identifier: f46482xuOSuxQTstMJb1jPKY3j53WDdrrpaYXNdC/p4=
Subject key identifier: 80:F3:97:F9:4E:19:EA:A6:68:41:49:9A:47:81:89:42:DC:BF:6E:86
Authority key identifier: 1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB
Certificate issuer: /CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab
Certificate serial: 0198D4E0B9483B9114FE93C7BA6FCD759AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
Manifest number: 0F42
Signing time: Sat 23 Aug 2025 03:02:33 +0000
Manifest this update: Sat 23 Aug 2025 03:02:33 +0000
Manifest next update: Sun 24 Aug 2025 03:02:33 +0000
Files and hashes: 1: G2t-l-0j1mqR-4qRv9nGdxEpsas.crl (hash: 3nRNwgUnLpNSw6b3uA8z4Nay2m7cQ4+HkS6tU2PTsBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b9:48:3b:91:14:fe:93:c7:ba:6f:cd:75:9a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab
Validity
Not Before: Aug 23 03:02:33 2025 GMT
Not After : Aug 24 03:02:33 2025 GMT
Subject: CN=80f397f94e19eaa66841499a47818942dcbf6e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:2f:37:c7:31:a1:0c:d3:23:d5:e3:8b:d9:
ec:68:b7:ba:fe:b3:b0:45:62:56:99:e7:a1:53:23:
00:9d:63:e8:12:39:ec:98:38:87:5d:36:69:03:52:
0d:54:f6:37:5c:f8:e7:b1:6f:dc:d8:b7:e7:f6:4b:
f5:ef:b8:07:77:4b:de:e2:4c:8d:be:92:42:1e:ea:
3f:3b:38:52:b9:ce:50:48:d8:62:f4:8d:7c:03:34:
42:04:70:24:c7:e7:79:6c:cd:00:42:4c:c5:d5:79:
65:6b:80:75:ce:94:c0:40:d7:1b:7a:f5:5e:8f:1b:
72:64:14:88:49:cd:50:b2:9e:22:47:c9:80:73:4f:
bc:37:cd:8d:1d:63:24:1b:e4:3a:e2:f0:7b:e4:f9:
23:2a:1d:bb:2e:c8:86:73:b7:db:41:be:f4:10:2e:
9f:bc:ea:e7:37:67:9e:50:31:1d:c2:44:22:d4:99:
9d:66:77:4b:df:76:1c:7f:32:b6:8e:84:24:9c:bb:
65:dd:45:9b:77:e4:57:85:7b:c1:e7:42:e6:27:02:
ca:1a:7e:85:be:8a:e4:c5:69:2b:7d:98:b4:c7:61:
05:15:db:28:ea:87:18:93:ac:d0:65:af:2c:46:3c:
a3:ca:8f:b0:df:da:df:c0:8a:31:58:31:4b:c9:08:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F3:97:F9:4E:19:EA:A6:68:41:49:9A:47:81:89:42:DC:BF:6E:86
X509v3 Authority Key Identifier:
keyid:1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e0:3c:71:48:68:12:45:9c:a6:d0:e5:78:6e:e6:c7:3c:b6:
f1:98:5b:ac:af:da:b2:9b:9d:09:f4:03:41:f0:3b:b5:a1:a2:
45:b8:f1:85:8e:b9:fa:d5:41:2e:d8:6b:d9:54:38:3a:88:b9:
7e:16:9c:77:a5:9e:80:87:6e:f0:64:51:a1:14:ec:aa:c4:52:
1b:49:13:83:37:c2:e0:dc:5d:54:c3:14:39:60:7a:9d:de:e3:
b9:64:c7:d7:b1:5e:45:b5:40:b4:f7:61:e7:c0:14:51:9e:a0:
78:d0:fd:b4:0d:d8:a1:42:e1:d5:50:65:5a:3d:20:01:a9:6e:
34:1a:81:fa:53:5c:3a:95:bb:58:29:a3:6d:2b:3a:1a:18:15:
e1:18:c1:41:e4:b5:2c:8e:23:1e:3d:0a:89:42:cb:fe:96:68:
f5:d4:01:56:b0:af:34:8b:f1:1a:e0:f9:99:f3:30:ed:7a:fd:
c6:24:7b:66:e6:ab:5e:76:1e:9c:a5:a7:09:0c:db:f3:c3:0c:
12:74:84:1a:34:27:58:b7:8e:57:98:e2:bb:76:18:46:bc:bf:
fc:b0:55:c9:33:eb:8d:3c:69:7b:4b:ee:9c:2a:5b:33:b4:28:
d4:3a:63:bd:b1:40:c8:14:9f:3b:a6:17:e8:5f:f0:73:9b:82:
a7:59:b8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:23 2025 by rpki-client