Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
File: G57Ppx7--bsb_nsuQCFc2lsjHl0.mft (raw, json)
Hash identifier: GhiQDXvuDS1sGBuZ+i+W7DQGdEamvo+KWlG8bG+tEgA=
Subject key identifier: 1E:EE:5B:E6:E0:FB:2F:C9:69:E2:EE:8A:39:14:3F:3C:44:08:FB:DC
Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
Certificate issuer: /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Certificate serial: 0198D4046D7BC58791601201D8F9B138C1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
Manifest number: 1649
Signing time: Fri 22 Aug 2025 23:01:56 +0000
Manifest this update: Fri 22 Aug 2025 23:01:56 +0000
Manifest next update: Sat 23 Aug 2025 23:01:56 +0000
Files and hashes: 1: G57Ppx7--bsb_nsuQCFc2lsjHl0.crl (hash: LhU+k1Kwn6vra9QKoS4DuYVpco92sbJZo2UzBF9+5Po=)
2: lxlrJ6zUgWTjPJVPagQ8_bikf3Y.roa (hash: ohk+IdQW1buST7Ifi9lGkmLrZs39V2tT52pS0ULxhf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:6d:7b:c5:87:91:60:12:01:d8:f9:b1:38:c1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Validity
Not Before: Aug 22 23:01:56 2025 GMT
Not After : Aug 23 23:01:56 2025 GMT
Subject: CN=1eee5be6e0fb2fc969e2ee8a39143f3c4408fbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:63:34:60:70:8f:0b:ca:9c:25:d5:6c:4a:
30:ad:3b:19:4e:96:ca:24:db:c3:70:35:69:2a:d4:
50:63:b6:23:43:9b:e8:82:81:8b:7c:95:85:6c:6a:
50:fb:25:e7:77:ef:03:79:69:83:1f:f2:e1:f4:5e:
c8:96:44:24:8b:df:42:cf:07:bf:83:ad:50:dd:aa:
c3:70:58:9d:46:a3:e9:48:bb:54:47:11:45:56:b1:
59:02:35:47:e7:e7:0f:e6:82:60:5c:b1:f0:a6:fb:
e3:d9:93:a6:2b:1e:bc:1c:49:32:37:0b:24:53:81:
a4:e0:21:9a:b5:26:05:bc:01:1c:b3:0c:47:fd:fb:
35:e0:56:16:ad:a9:a1:a6:1a:7e:80:0c:67:e5:f4:
9d:3f:c6:f5:06:bd:b5:6b:20:57:8f:de:06:49:80:
67:e7:b7:cc:95:e6:e1:24:cf:43:6e:17:35:1b:1a:
f8:ef:62:c6:f7:ee:6f:07:35:01:e2:d1:bb:1d:cc:
f8:ac:ea:01:38:2b:82:c0:86:0b:0c:6d:55:b1:88:
01:9a:9d:a8:d1:c9:bf:09:8a:0b:e7:4f:22:c3:2b:
47:74:ab:ae:cd:58:12:68:fa:e3:61:5f:90:52:a9:
75:f1:9b:5c:a5:39:07:3d:a1:77:2a:bd:d7:2f:5e:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EE:5B:E6:E0:FB:2F:C9:69:E2:EE:8A:39:14:3F:3C:44:08:FB:DC
X509v3 Authority Key Identifier:
keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:10:d2:20:82:3b:59:a4:e0:44:64:fe:33:ba:22:5b:fc:34:
b1:d8:88:70:df:9e:d7:0d:b9:39:d6:8a:0f:33:32:6b:c3:77:
81:80:85:f3:84:fe:d9:90:2d:43:81:45:bc:84:aa:06:f3:03:
f2:c0:36:2e:b1:9b:51:8e:ea:0d:47:15:55:d8:b7:d3:9f:25:
0f:af:c1:6c:80:f3:89:97:af:0a:68:5d:43:2a:10:16:3f:37:
73:37:2a:5e:17:26:58:11:09:71:ec:3a:fc:f0:f6:e1:a1:af:
b2:14:5a:46:83:a6:6c:97:0a:72:e7:48:da:c5:c1:ed:38:25:
b3:ad:38:06:41:7d:49:70:80:34:33:d1:71:f5:e2:95:07:94:
93:f4:52:d7:ac:5a:7d:47:8b:3d:40:15:ec:8e:32:7c:54:d5:
59:f3:bb:5b:c5:69:01:d8:00:cb:b2:b1:2d:24:2b:a5:eb:7a:
73:71:61:b0:2c:62:81:b2:c0:18:60:ea:24:03:e2:48:b1:c8:
8a:38:4a:81:bf:87:dc:9c:83:ad:8c:ac:65:e0:c7:dc:1f:3e:
47:d7:90:b2:7c:84:32:e0:b2:c4:16:a0:c4:d5:83:ef:97:20:
49:6f:a8:f6:60:51:ad:9c:e9:1f:dc:35:5e:7b:a6:88:e9:1e:
e7:16:b3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:14 2025 by rpki-client