Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
File: G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft (raw, json)
Hash identifier: nMrgK23WLgDd2YRdzsLDyW+fSIu6wTrE+9QLbCjwRh4=
Subject key identifier: 60:18:51:96:12:28:13:25:9A:BD:FB:F8:41:51:28:78:62:A1:C8:0C
Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
Certificate issuer: /CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Certificate serial: 0198D54E1CBFBE9C19BF886721072AD561FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
Manifest number: 0CDE
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl (hash: 5OXHoGkYunVJEUFmNZU40TKUBKuUJ7rAJ0MxCWiI9Yg=)
2: j_n9Kg39TCshbmu8W1dk2NVjcFI.roa (hash: 56S9svTLKP+1FymtE0skXNThCYHX7pM3o2tRL4nBuW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1c:bf:be:9c:19:bf:88:67:21:07:2a:d5:61:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=60185196122813259abdfbf84151287862a1c80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:f5:ad:a8:c8:34:be:68:60:1f:91:67:fe:
72:40:e1:cb:ef:6d:45:cc:a0:42:0b:4f:e9:66:0a:
4d:e5:fc:33:02:95:aa:04:50:a3:c4:c9:04:af:13:
8c:67:51:ce:59:02:d2:fd:2e:df:eb:12:1d:d9:21:
78:7f:42:41:54:18:26:6e:da:93:8f:66:42:25:58:
5d:62:34:d5:84:6e:bf:b4:2d:4d:76:9a:a0:08:fc:
8d:6c:d4:04:2a:e4:66:14:fc:e2:35:a5:4d:e3:58:
b7:15:e9:e9:29:04:9b:51:37:25:46:5f:13:ab:11:
bb:fd:18:d5:77:95:b1:cf:3f:87:fe:2d:4e:bc:17:
9d:a1:8c:49:ce:2f:51:39:a5:51:27:6b:c8:68:23:
6a:0f:28:35:96:7c:bc:cf:b6:69:3a:74:86:2f:97:
de:a3:40:4c:d9:20:a4:bf:4d:4d:fc:52:c8:27:7e:
ce:4e:d8:52:10:56:98:f6:6c:01:45:06:c2:2e:34:
35:fd:be:c7:2f:0d:eb:7d:04:eb:40:93:32:c4:1b:
91:a1:af:d9:55:12:95:ef:9f:7b:46:9c:2a:c1:26:
a3:de:f2:ed:ac:05:23:d8:43:e9:62:62:6c:be:21:
d0:c2:d4:38:c3:86:0c:47:34:f0:c0:12:e1:4d:10:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:18:51:96:12:28:13:25:9A:BD:FB:F8:41:51:28:78:62:A1:C8:0C
X509v3 Authority Key Identifier:
keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fb:37:97:36:50:09:78:db:b9:1d:f5:bf:8f:5e:48:c3:b7:
bd:2e:c9:da:55:39:11:31:fa:de:97:5f:60:8d:27:86:5e:e4:
bc:37:3b:68:67:e7:66:22:e4:1b:79:7d:63:6d:32:38:6d:ea:
7a:91:66:16:d0:9a:eb:35:e3:f5:48:5c:81:92:e5:28:d3:26:
1d:e5:5a:65:de:d1:b4:5b:b2:96:75:d0:bf:4f:15:5f:6f:d9:
de:12:c0:f2:12:dd:20:b0:f8:7f:2d:31:4a:ff:1a:50:40:27:
96:79:40:3a:17:8d:71:a7:b4:24:bd:07:77:44:5e:56:59:88:
c1:1e:7d:b2:02:3c:0f:af:33:f8:7a:3d:92:6a:57:68:00:5c:
fa:3f:66:d8:a0:04:91:68:22:bf:93:07:51:a1:9b:f7:3a:fb:
15:00:0e:8e:32:e0:df:25:98:19:f2:48:57:f3:28:ca:38:40:
eb:9d:4e:12:1f:bf:37:73:71:9d:ba:0d:81:fc:5e:18:41:7b:
b1:4a:2d:3a:1d:89:87:ce:d5:b0:09:4b:4e:6d:bc:0d:e2:56:
ab:b4:e3:6c:dc:69:b8:4e:d7:a1:94:8a:02:73:46:de:12:42:
a5:1e:89:2e:38:2a:e1:04:f2:95:cf:6a:b3:28:fd:da:4a:a0:
a0:85:30:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:18:19 2025 by rpki-client