Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File: G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier: BTcTkcNy/rO6uWG5UXeeekGu/HypBQ0eqNcHqSkJc04=
Subject key identifier: 0B:DA:54:ED:41:96:D7:67:21:B6:86:3D:23:A4:9A:2C:47:8D:46:22
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer: /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial: 0197B77C660606E1F0B00C1C5A63C849DB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number: 02E5
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: ZkjvFso/Q+bYyTuzThlcIciMrnbMplBGOcUIDNxMipI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:66:06:06:e1:f0:b0:0c:1c:5a:63:c8:49:db:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=0bda54ed4196d76721b6863d23a49a2c478d4622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:69:61:67:34:21:0b:e2:01:1f:a9:8c:e3:e0:
5b:5d:ec:e6:c7:c6:4b:90:8c:a6:e2:12:af:d1:46:
ee:59:ad:85:92:c8:19:ae:0d:f0:be:48:c3:ed:bc:
40:57:56:bc:3c:73:a9:8b:b0:e2:c5:7a:c2:1e:38:
65:8e:fe:a1:ca:74:59:39:55:7b:15:c3:93:31:45:
a5:0d:67:67:5d:62:09:2c:8b:5f:3b:06:be:07:19:
34:43:68:f1:8a:56:8a:3e:96:72:41:6c:0b:cc:9a:
4a:a4:f7:65:78:88:84:89:e2:fd:94:81:de:fd:e6:
04:9e:df:b5:50:7c:36:3b:25:33:d0:f7:34:55:c0:
80:d8:4d:13:6b:c0:3f:81:de:30:38:67:ab:21:63:
e9:29:61:67:48:ac:50:d9:62:63:1f:a6:74:9c:9c:
0b:1b:2b:6c:53:45:c0:83:ce:86:54:06:d2:e6:7f:
44:70:6f:bb:4f:ed:5d:4e:2f:1c:27:63:51:5e:fb:
9f:3c:ac:53:3a:e3:1f:71:7b:d1:43:01:62:52:79:
70:b4:24:57:a4:4e:c2:ab:a7:2c:02:b3:ee:48:b7:
7e:08:6d:3b:2d:e2:65:1f:d6:80:8d:72:64:41:ed:
cb:76:c1:3d:40:61:28:bc:77:d4:6b:8d:94:f4:cf:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DA:54:ED:41:96:D7:67:21:B6:86:3D:23:A4:9A:2C:47:8D:46:22
X509v3 Authority Key Identifier:
keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f2:74:78:ac:7c:62:ca:b3:82:56:d1:c0:26:7e:a4:32:54:
75:61:51:10:f5:25:10:61:2a:1f:6a:dc:c9:ef:bf:e2:81:82:
22:53:4f:88:e6:d1:2a:43:41:28:70:3b:75:c9:20:19:d1:d6:
d0:47:8b:7a:a8:7a:e3:e1:10:6e:4e:d1:7c:39:58:ca:1d:7d:
3e:ca:10:4e:43:ef:bf:a0:d1:dc:6e:3b:8f:f9:cf:fa:e8:eb:
2d:14:0d:48:47:bc:79:98:8a:88:fe:78:12:5a:11:d6:c8:5a:
2c:30:a6:c7:c1:13:8c:bb:ca:50:ba:2a:4a:b7:cc:7a:03:a3:
f9:91:9e:6c:6f:6c:5f:31:97:16:38:00:6f:34:71:2c:d1:07:
b2:43:b9:f5:90:9a:ec:84:5f:a7:b1:80:53:a4:c6:34:c0:d1:
79:7e:5e:ca:63:cd:cf:82:51:56:80:bb:d7:2d:7f:54:5b:a6:
61:f5:fc:a5:a9:de:dd:97:66:e5:42:ea:30:c9:5a:ee:e1:75:
2f:ec:35:92:03:a1:84:22:06:c9:1b:1b:da:54:70:de:76:2f:
88:48:46:99:c4:8e:67:76:6b:a3:53:9a:82:fc:66:83:8f:b2:
7c:e5:c8:70:1d:69:24:af:8a:27:b3:34:2b:8a:1b:d1:2c:23:
a0:5c:79:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:20 2025 by rpki-client