Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File: G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier: 9QHYKYAzb/UuKxNUgLU+Um05BMiHnvllEnPOavp1l+I=
Subject key identifier: B6:55:77:C8:B7:99:20:B3:4C:7A:00:DE:8E:23:8F:86:81:1C:6B:9D
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer: /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial: 0198D54E22D8B549786B92A35AEEFCB29A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number: 0379
Signing time: Sat 23 Aug 2025 05:02:04 +0000
Manifest this update: Sat 23 Aug 2025 05:02:04 +0000
Manifest next update: Sun 24 Aug 2025 05:02:04 +0000
Files and hashes: 1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: NQc9B8UKAP6hc3d/Ekg9YBiM0Q/c3Jmy8buKTtKC6u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:22:d8:b5:49:78:6b:92:a3:5a:ee:fc:b2:9a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Validity
Not Before: Aug 23 05:02:04 2025 GMT
Not After : Aug 24 05:02:04 2025 GMT
Subject: CN=b65577c8b79920b34c7a00de8e238f86811c6b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8f:0e:ac:41:3e:ed:67:74:54:b9:a5:d4:b8:
5c:16:49:8f:f0:58:b2:f2:19:7e:e0:f4:e4:b8:7b:
44:d7:87:c3:0e:68:be:f3:64:3e:2d:fc:d9:e9:37:
75:bf:dc:99:da:9d:a7:35:d3:3b:c5:54:24:77:58:
25:51:2f:81:a9:c6:af:79:25:a7:b1:c8:25:ad:da:
65:66:8b:b1:28:27:47:d8:45:4b:fe:73:f5:dc:86:
1a:8e:62:90:29:14:e0:0d:0c:80:06:f8:1d:3a:33:
a6:cc:f4:a2:96:0b:0e:f9:2e:5b:95:8c:7b:25:da:
b3:a8:ef:9e:f6:4c:4f:e6:8c:17:69:dd:2f:23:94:
41:ee:a9:05:9f:22:23:98:9f:11:d0:11:3f:23:1b:
29:a0:11:b1:d3:57:bc:7b:13:3e:aa:5f:bf:60:0d:
2a:02:31:0f:26:f0:41:f7:9a:36:20:3c:70:62:cf:
74:09:08:6a:67:0c:8d:ab:16:d9:df:52:c7:d7:11:
1a:75:62:7c:f4:a7:21:b2:3c:3a:74:90:12:9a:c9:
99:24:4a:55:3a:eb:18:c9:19:1e:bf:7f:55:7b:4c:
53:d5:f0:72:59:da:35:46:f4:5c:32:d8:df:cf:33:
d2:54:13:79:d6:77:d7:41:82:f1:7e:ea:85:cc:27:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:55:77:C8:B7:99:20:B3:4C:7A:00:DE:8E:23:8F:86:81:1C:6B:9D
X509v3 Authority Key Identifier:
keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b9:6e:ed:bd:60:e9:c4:0e:c1:8e:c8:e5:25:77:45:7e:3e:
49:f2:7b:a0:85:77:88:31:5a:1c:90:14:5f:b3:1a:39:d8:6c:
0b:7d:6d:35:f1:8f:2e:a4:7b:d2:db:65:89:a5:32:bc:03:4f:
ae:bb:00:2b:69:84:0b:3d:93:14:55:89:71:4f:ad:e8:2a:60:
ac:4d:62:fc:c8:ad:3d:8a:0a:e0:42:14:4d:a7:81:92:16:7f:
8d:aa:f3:a6:9f:92:ad:8f:68:9f:4d:2b:d1:4b:0b:3d:9d:38:
2a:5e:e3:67:98:e6:f9:2e:52:f1:e9:5c:f6:49:d1:6b:9a:38:
ce:13:f7:55:ff:cb:3d:74:46:22:c4:ca:25:e9:78:d3:d6:1e:
49:57:2c:19:9b:10:02:93:19:d0:24:7f:3c:a8:6c:67:65:3f:
24:78:0c:27:97:0a:da:78:d4:a5:fe:de:5f:c8:64:1a:22:a0:
11:b4:f0:c3:ec:6b:e6:23:c2:d8:ed:2b:0c:f3:00:5e:87:be:
83:d1:52:d3:c6:44:9e:4d:7a:c9:87:6a:cb:b9:e4:a7:76:76:
92:2e:e2:ec:51:60:b5:f5:c6:a5:0c:cf:33:c8:78:a5:ff:af:
ae:01:36:1c:db:2d:05:b5:ce:3a:65:59:96:73:01:2d:24:b4:
cf:23:12:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:02 2025 by rpki-client