Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File: G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier: pDgGucgDFBFuxnmLgLgTj77tJTXs5P2j0wL4zruUjJY=
Subject key identifier: EC:35:53:80:13:65:66:67:36:51:E1:8A:18:02:50:9C:40:76:6D:10
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer: /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial: 0198D515D6F28E30422C5D6BE871A9E27182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number: 10E9
Signing time: Sat 23 Aug 2025 04:00:34 +0000
Manifest this update: Sat 23 Aug 2025 04:00:34 +0000
Manifest next update: Sun 24 Aug 2025 04:00:34 +0000
Files and hashes: 1: BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (hash: /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=)
2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: 7c6WFKrNxjhh3AcywlEvrRpe5N5muCgDBmeLX5hk1tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d6:f2:8e:30:42:2c:5d:6b:e8:71:a9:e2:71:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Validity
Not Before: Aug 23 04:00:34 2025 GMT
Not After : Aug 24 04:00:34 2025 GMT
Subject: CN=ec355380136566673651e18a1802509c40766d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:d2:93:9c:9d:72:78:2d:b8:50:ab:e5:01:
81:29:e1:20:c0:9e:58:e2:ca:39:d2:97:2c:1f:e9:
1f:59:5c:34:6d:84:8d:d1:cf:5c:7d:cd:7f:69:92:
66:d8:29:b2:73:fe:9d:26:e8:36:b7:5c:e6:95:5e:
c5:86:6a:b3:b8:59:2b:fb:87:73:30:25:dc:64:ac:
2d:2a:43:83:b3:ee:43:bd:a2:03:22:71:92:2f:8a:
31:dd:f9:ef:04:8c:bb:81:76:b3:69:60:38:6c:af:
73:24:43:62:55:cc:ba:46:e3:d2:7a:ad:3e:c8:c1:
63:aa:24:fa:38:8b:31:23:2d:80:84:d6:8c:62:2a:
6a:75:ad:e9:e1:8f:5b:99:25:4c:ca:3d:ec:c2:6a:
ee:a9:66:27:f6:57:d2:21:3f:cf:e0:66:80:8c:1a:
cb:27:81:c3:f6:a5:c3:4d:60:33:e6:d1:9b:61:c6:
ba:fd:95:df:6c:22:f0:88:1d:5d:d1:79:23:63:3e:
3a:c7:7e:40:c1:78:22:d2:f7:51:6c:33:5e:76:85:
50:7c:ac:bc:69:38:b7:44:fc:e1:cb:65:63:66:6f:
29:bf:8b:dc:80:8c:a6:3a:c2:5a:9f:39:df:d5:35:
23:f3:18:35:68:03:9d:1b:a6:fa:02:6f:83:e8:c0:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:35:53:80:13:65:66:67:36:51:E1:8A:18:02:50:9C:40:76:6D:10
X509v3 Authority Key Identifier:
keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:53:68:ec:42:c8:67:cb:00:1b:77:17:e4:d0:4a:4c:29:6d:
0a:e6:80:86:22:d1:8c:97:f0:5b:37:21:ca:8a:cf:50:49:52:
bf:99:32:4c:19:b7:64:0b:d0:53:00:15:fd:1e:b8:83:66:67:
f1:dc:c7:90:af:03:89:2b:6a:07:9d:10:1f:70:36:7e:2b:5b:
cc:42:f6:78:17:8c:e1:18:58:27:45:4c:a1:39:75:24:57:c7:
ef:52:4a:6c:9e:ed:8b:29:47:d0:2e:e2:54:88:8d:39:87:bb:
00:9c:cc:a7:af:5d:6d:6c:81:66:ae:c7:3a:14:47:fa:85:c5:
74:22:04:d7:07:8b:e2:ee:db:b2:e7:9f:2f:1b:87:67:aa:93:
b8:25:37:08:56:9a:99:19:45:21:cf:5b:45:33:b3:d0:bd:2a:
8d:51:73:e2:d8:55:c6:01:54:8d:75:03:aa:56:88:82:f2:e1:
62:8f:a5:27:7e:5b:38:f4:ee:fa:d3:79:cb:8b:e6:15:c9:75:
bc:ca:68:96:ef:d7:f6:15:31:fd:c3:b8:92:d7:e7:63:0d:0d:
f8:c1:68:be:b7:d2:9a:0a:72:bc:75:3e:3c:0f:8b:e3:6b:2d:
ee:8c:10:5e:31:c3:dc:7a:ed:fb:c1:d9:1f:eb:59:61:66:21:
27:d0:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:49 2025 by rpki-client