Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: cHOB7Cw0gaG2zVx/sJpY5x3hhD5C5Pu07AAhWlzIMVg=
Subject key identifier: 97:BF:8D:85:C3:CE:4D:1C:9B:02:D4:57:7B:62:67:B4:B4:5B:9E:81
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 0198D4A7B5ABDBE97E0B6CD569AC68E3C1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 084B
Signing time: Sat 23 Aug 2025 02:00:17 +0000
Manifest this update: Sat 23 Aug 2025 02:00:17 +0000
Manifest next update: Sun 24 Aug 2025 02:00:17 +0000
Files and hashes: 1: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: RRxGN29hK9PEm9xESBon+vxvff8Tfj+MbtnL/udVL6I=)
2: j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa (hash: qcMICYRSrbrQRjk9ZR+9VL6T/3wI6mHE1uL2fvOP8p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b5:ab:db:e9:7e:0b:6c:d5:69:ac:68:e3:c1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: Aug 23 02:00:17 2025 GMT
Not After : Aug 24 02:00:17 2025 GMT
Subject: CN=97bf8d85c3ce4d1c9b02d4577b6267b4b45b9e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:fa:ae:92:8a:aa:0c:90:73:c7:02:57:36:
00:c1:2b:8e:bb:40:33:7b:15:b1:2b:e7:b4:2b:c3:
cb:e7:52:92:07:b3:7f:97:b0:b1:c9:3f:ac:95:f2:
cf:d2:76:9c:cc:94:cf:f3:29:36:9c:de:51:97:f6:
f1:4a:e8:bd:ff:05:d2:b7:44:f8:ed:9f:f5:db:16:
1f:80:4a:b8:e9:47:4f:d2:78:23:d8:23:8c:2c:e0:
30:4c:08:f7:08:10:6e:9f:a7:f7:33:94:a9:eb:12:
21:01:cd:3b:bc:d0:09:96:7e:c0:f5:c4:30:f1:58:
df:65:e1:20:fb:14:c4:2b:d7:64:39:13:e2:41:18:
44:2f:ed:3a:db:a3:e6:c0:49:e0:d1:73:d9:1b:b6:
9b:38:2f:47:78:9a:60:50:0b:51:ea:ac:34:69:25:
4c:4b:f1:f2:fe:ec:3d:ab:f4:22:23:cb:c6:e2:85:
d3:2b:5a:8f:23:e7:65:f7:60:fc:03:2b:0d:2c:92:
3d:fd:ec:01:c8:3c:dc:e5:21:40:88:99:af:46:2c:
83:46:8b:98:8a:ef:e6:33:8a:73:ae:89:32:1a:2f:
b6:43:83:93:da:9f:d1:68:33:ff:3d:d8:3b:05:2a:
e4:e6:56:8d:a3:d6:17:92:a0:9d:d6:27:55:4d:ec:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BF:8D:85:C3:CE:4D:1C:9B:02:D4:57:7B:62:67:B4:B4:5B:9E:81
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:48:b3:1a:15:48:99:5d:e2:c4:9f:12:38:1d:1b:a6:46:92:
0b:52:fb:68:81:89:eb:da:89:2d:da:61:cc:14:2c:a7:5e:5f:
61:c4:1f:14:0e:6d:b9:5b:db:e1:aa:e6:44:46:3a:42:05:a1:
4d:ab:16:d8:d9:3e:5c:d8:e6:a4:46:ab:de:8d:70:95:ab:63:
a6:f8:42:64:df:33:ea:f5:7c:6a:83:5e:db:70:9b:0d:7d:18:
c7:ab:5e:c5:36:15:15:08:06:de:73:d7:b4:99:e9:3d:46:da:
ac:4b:ac:c4:e8:0d:e4:81:ac:26:33:fd:50:0d:69:42:1f:65:
f6:7b:d5:d1:fb:38:84:02:d2:d3:bf:0c:b4:e6:1d:52:cb:16:
ac:5d:8c:dd:0c:36:04:51:7c:3c:92:3c:ed:65:99:0d:d9:7d:
10:b4:3f:76:d8:8c:c4:66:7f:d2:15:0a:8c:ab:67:ff:c4:f6:
36:f0:73:48:09:5a:ef:d4:75:88:4a:2d:5e:ff:74:68:b7:b8:
9b:da:a9:d8:fe:82:e7:ab:6b:e8:52:16:c9:4b:db:fe:36:ea:
d9:19:8d:6c:8f:03:07:52:64:e6:31:57:9d:f6:2d:d4:87:47:
05:18:29:87:e4:49:ba:84:28:42:4d:7e:7f:22:c1:52:1c:2c:
0b:bd:74:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:08 2025 by rpki-client