Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: dr3Il1kaGi+PYImAUcZHh8zEVjYpzgUaq8mJNjutVao=
Subject key identifier: 42:D1:3B:0F:5C:F9:FC:6A:2B:A8:8B:7C:FF:BA:28:06:96:19:C2:69
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 0197B6D7635F837A111F7CD3DA11D606C927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 07B7
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: b/4omeBfsINqmZeq/n2VvJ/B+hSUGdpjD/95rW9AYVo=)
2: j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa (hash: qcMICYRSrbrQRjk9ZR+9VL6T/3wI6mHE1uL2fvOP8p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:63:5f:83:7a:11:1f:7c:d3:da:11:d6:06:c9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=42d13b0f5cf9fc6a2ba88b7cffba28069619c269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:88:bd:5d:2f:6a:76:a9:5e:f5:e6:7c:1a:
ef:96:a4:96:b0:d3:d8:9e:3c:3c:eb:2e:eb:97:1b:
7a:63:cf:fa:c6:32:05:17:fc:8f:34:f8:5c:c6:b8:
29:d5:6e:53:36:1f:46:5f:89:a4:28:3f:55:d3:9b:
b0:57:53:3e:aa:cc:36:77:85:94:a6:95:a1:49:4d:
33:fc:ab:1f:7b:9c:6b:05:30:fd:04:83:a0:23:28:
70:e6:2c:24:81:d7:4d:59:bf:c9:95:6e:b4:e7:2e:
7b:56:9e:a0:48:3e:99:5b:f6:33:a1:71:d5:ed:85:
77:81:56:de:80:4d:29:8e:f6:6c:37:9c:02:e7:c6:
68:eb:74:26:0f:7b:63:c2:3e:79:69:67:34:d4:af:
5e:35:9f:c5:88:3e:fd:65:b8:44:f8:b8:d3:15:de:
c9:a7:72:d0:99:8a:eb:ba:ac:b1:e1:8d:99:cc:60:
8a:71:65:78:c2:97:10:61:11:6f:fb:83:35:f4:ca:
f2:3e:b8:4f:bb:3a:56:fe:bf:5b:a3:5c:0d:1b:8c:
0c:d7:e3:17:e7:27:4d:de:53:6c:e0:92:aa:b3:7e:
7c:ec:8e:e4:d0:7a:82:72:fb:ff:4b:76:f5:41:a8:
89:37:6d:4f:64:ff:53:86:0d:be:31:aa:0c:ba:f6:
f5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D1:3B:0F:5C:F9:FC:6A:2B:A8:8B:7C:FF:BA:28:06:96:19:C2:69
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:78:73:1d:c1:39:7e:0f:fd:8c:0b:ca:c7:c1:e8:e5:32:a6:
36:bd:c9:99:ea:50:96:8c:eb:3b:0e:26:73:fe:74:9e:8f:c8:
d9:a5:4d:77:10:3b:d1:9d:db:a3:0e:06:c0:37:86:11:e2:18:
74:5c:96:28:65:31:45:69:25:91:41:47:15:6c:f8:b5:31:1c:
2f:fb:78:d6:13:c7:c4:fb:2f:31:25:76:d0:3c:00:8b:54:06:
d3:e5:69:54:ce:02:84:89:dc:11:d0:34:0f:20:6e:20:52:31:
9b:5b:ca:eb:3f:4c:61:01:a0:be:6d:4e:c4:68:65:52:25:a3:
5b:cb:86:d7:ff:b7:6f:72:da:6d:20:bc:a1:6a:bd:46:f5:75:
c6:6c:d6:61:57:83:5f:81:04:52:77:d2:e2:46:eb:aa:89:cd:
82:9c:9a:ca:31:b5:45:5f:ec:02:e3:a2:92:4d:67:83:2e:ae:
92:b1:5b:6d:a7:37:9d:93:64:49:5a:38:5d:4c:df:d7:9e:2b:
91:51:60:4f:db:5a:3d:31:fd:43:f3:55:35:e5:d9:92:14:50:
b3:03:37:a1:de:c0:3d:fd:d8:ed:19:f5:d5:c5:eb:8b:42:78:
31:d3:91:56:78:2f:d0:1f:e1:7d:2b:9c:cf:08:85:fd:ac:1a:
ac:3a:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:26 2025 by rpki-client