Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
File: G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft (raw, json)
Hash identifier: 3fHZcnhUCo/qrUBoy5fBLh4DhpUxyJcM2QCu3IEvSkY=
Subject key identifier: A5:AB:5F:63:C7:F0:D6:58:80:0C:AD:EF:A3:42:E0:8D:B0:51:51:EB
Authority key identifier: 1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
Certificate issuer: /CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Certificate serial: 0198D7A913AF7BA41D2D82A05EF29A01D3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
Manifest number: 0F81
Signing time: Sat 23 Aug 2025 16:00:38 +0000
Manifest this update: Sat 23 Aug 2025 16:00:38 +0000
Manifest next update: Sun 24 Aug 2025 16:00:38 +0000
Files and hashes: 1: G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl (hash: /P3I/sLjFvZnfvRYD3GkwJMdEPqGCuJAz8J4ULXUyRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:13:af:7b:a4:1d:2d:82:a0:5e:f2:9a:01:d3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Validity
Not Before: Aug 23 16:00:38 2025 GMT
Not After : Aug 24 16:00:38 2025 GMT
Subject: CN=a5ab5f63c7f0d658800cadefa342e08db05151eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:b9:82:94:92:56:b7:9b:fc:62:23:5e:fb:
bc:84:ae:fe:65:1c:84:bf:87:e4:5a:34:f6:fd:95:
97:9d:de:4d:90:60:04:42:44:72:ad:f6:5b:27:83:
e6:6b:db:2c:25:0c:bb:3c:e9:0d:73:f1:9a:fb:5b:
47:b2:7a:48:ab:0b:01:05:9f:b7:2e:2d:57:f8:1a:
c2:ba:b9:c3:51:1b:a2:2f:38:82:d5:be:57:fb:95:
23:de:81:55:d0:c2:a6:04:33:2f:d8:da:ec:1b:6c:
39:2f:f2:0b:03:37:68:45:92:36:b1:d8:87:b9:02:
13:00:27:ea:11:22:ab:fa:ef:9c:38:06:c6:6e:9b:
4d:4e:03:76:d4:cf:b6:a8:2f:fe:d4:cc:95:5d:db:
d1:2a:69:17:7c:3b:2b:55:af:c3:fb:9f:e2:12:98:
68:77:63:ce:9b:89:e0:42:35:4d:93:fc:4c:3a:3f:
d5:55:56:63:69:c4:6c:6d:99:c6:54:ed:31:2a:8c:
f8:1d:1a:0a:3b:2c:af:0f:24:7c:76:1a:35:f5:c2:
11:b1:9c:df:d1:ea:ce:50:12:ab:38:21:48:7a:8f:
9e:5d:1c:93:7c:a2:66:4f:2a:35:d3:60:26:17:77:
db:e6:6c:ec:01:e6:0a:50:15:eb:08:e2:13:8f:e4:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:5F:63:C7:F0:D6:58:80:0C:AD:EF:A3:42:E0:8D:B0:51:51:EB
X509v3 Authority Key Identifier:
keyid:1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ec:37:f1:1b:87:2b:df:d8:22:1b:89:0d:15:90:f1:d8:48:
c7:41:ef:99:2d:53:8a:e3:c4:86:50:10:a3:a1:53:85:07:c5:
6c:90:a7:25:46:14:22:57:c5:7b:55:d9:05:cb:40:cf:ae:ea:
51:5f:37:0f:69:64:03:0d:13:cb:34:d1:5a:5e:d3:e9:c6:44:
3e:02:db:04:6b:0d:fb:20:53:8b:fd:90:c8:97:9e:24:c0:ea:
cf:1f:ce:c3:5b:5d:c6:e0:89:30:07:d5:13:ea:1b:b2:63:8b:
19:fb:c4:ac:c4:f4:27:28:d5:9c:a6:5f:7a:cc:19:97:57:5d:
8f:be:39:cb:eb:6b:b5:7d:4d:e1:8d:24:c3:00:e9:7e:9d:76:
fb:32:91:53:3b:13:14:4e:24:da:ae:77:fc:94:a6:95:50:7b:
28:12:ba:70:27:30:71:a0:38:e0:ca:09:76:b9:c3:75:10:4f:
c4:f3:a5:5b:16:8b:1a:13:22:26:88:14:b3:fc:5e:09:5a:ce:
17:83:e6:49:f8:1e:01:6f:a0:a7:58:ea:06:c5:15:39:66:2d:
04:0e:6f:a2:89:0f:f5:59:53:4c:e1:9e:ea:7c:63:32:01:36:
f6:0e:33:12:50:db:f1:ca:25:55:ac:8f:c6:18:11:c5:9c:25:
2f:5a:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:32:52 2025 by rpki-client