Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
File: G5gPIqWVKk75pOxKng0MNR_slFQ.mft (raw, json)
Hash identifier: 09cJsP333MrUpAz+B3N04TyYfS8sE5j0cpqYDdVe4jw=
Subject key identifier: 8C:BD:75:82:F0:45:67:34:46:27:F8:FE:BE:49:66:62:07:E7:F4:8B
Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
Certificate issuer: /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Certificate serial: 0198D5BC02A0B40D888401D28CB8BD560EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:05 +0000
Manifest this update: Sat 23 Aug 2025 07:02:05 +0000
Manifest next update: Sun 24 Aug 2025 07:02:05 +0000
Files and hashes: 1: G5gPIqWVKk75pOxKng0MNR_slFQ.crl (hash: tzuIhHl0IJf7aLQdzzwrnWCHu5d8opokqSiqa/S4+38=)
2: jFeXSLOcmKjdy19dvekbxvl1dmc.roa (hash: 52Ov8zQceO7HlblWWc/Kf8ebS6bj291XEV6Vi2okLGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:02:a0:b4:0d:88:84:01:d2:8c:b8:bd:56:0e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Validity
Not Before: Aug 23 07:02:05 2025 GMT
Not After : Aug 24 07:02:05 2025 GMT
Subject: CN=8cbd7582f04567344627f8febe49666207e7f48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:c3:c7:bf:48:af:18:dc:b6:1f:a1:3d:8b:
99:04:2c:67:f2:54:15:4c:4b:53:7d:46:13:d8:0a:
00:b8:4c:99:4e:cf:ef:fb:2f:70:8b:6d:79:60:d9:
5c:2e:2e:17:94:a9:e0:2a:fe:4e:1d:fc:04:1f:81:
8d:59:c3:3d:42:a5:b9:03:03:7e:06:2f:23:ee:c8:
6f:bf:02:d7:61:27:47:fc:c8:57:9f:c9:c1:fd:86:
ec:6b:96:db:fe:ed:4a:8f:bb:6f:1b:32:61:63:72:
f0:e6:cf:bc:48:f3:f7:84:0a:68:71:0f:7c:b6:c5:
9e:e6:d7:62:c8:ec:bc:54:ba:76:86:69:e0:f9:1e:
71:9a:10:83:de:d5:eb:1a:0c:17:46:59:d5:6a:28:
28:34:91:22:e3:f1:a1:cc:a5:d6:f0:da:f6:a9:8d:
97:a5:b8:64:db:ac:45:bb:5a:14:cc:ea:60:a8:51:
5d:c3:91:b3:66:c3:9f:20:21:b1:07:4a:ed:64:e0:
59:77:b8:bc:b6:29:cc:9f:2e:36:32:12:18:e8:97:
d4:a3:61:2b:f2:71:72:00:60:be:0f:61:2c:83:f0:
d5:0c:09:01:d8:87:d3:7b:06:79:52:e7:80:99:0c:
d3:18:74:b8:27:22:c3:c7:08:1a:85:12:3d:b7:ea:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BD:75:82:F0:45:67:34:46:27:F8:FE:BE:49:66:62:07:E7:F4:8B
X509v3 Authority Key Identifier:
keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:39:4f:df:9c:0e:28:37:69:50:9e:d7:64:e7:b5:14:8b:2c:
b1:77:ad:af:62:e8:bf:da:f1:10:df:d6:9e:fe:88:3b:e4:83:
73:b8:33:f4:7a:05:78:3a:90:bc:f8:bd:73:47:1e:37:1f:4f:
1a:07:95:67:0a:94:2f:04:eb:d9:0c:d7:46:7c:ad:14:b4:82:
09:f3:18:6b:56:fe:86:a2:aa:f7:58:b3:93:02:f9:9b:1b:88:
b3:05:32:64:fe:c8:85:6d:b3:a7:51:3c:6e:63:ba:07:b9:12:
03:fe:f3:3a:76:7d:9e:7b:6c:4a:f0:6e:55:7b:3c:44:e3:dc:
c1:96:f9:35:a0:b2:0b:e4:24:04:5c:6d:11:4d:40:11:8a:bd:
fb:3c:53:42:b3:70:0a:b5:91:19:7f:fd:60:23:f8:a1:0e:31:
60:fd:08:2c:f1:27:f4:ea:d9:f6:65:15:f8:39:78:81:08:5f:
a7:23:04:55:74:d6:49:d5:be:1a:f7:c1:32:01:a9:90:e2:aa:
0c:d5:b4:75:4f:f5:aa:b2:71:c9:df:b9:ed:86:55:0b:b1:85:
7e:84:8f:04:9b:62:ec:35:3f:23:d2:bd:02:a8:e5:3f:31:36:
db:07:47:43:ea:7a:a3:44:30:f7:e5:59:1a:42:ea:d2:33:46:
47:d2:f0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:43 2025 by rpki-client