Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier: sZMnYxSC6NmHDX0WLidjjhHLX8MyoTttyeSMED0b/VY=
Subject key identifier: 17:26:CF:3E:0A:B5:71:0C:92:79:75:1F:2F:25:37:21:75:F1:A0:91
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 0198D4736A18A2E1AF94A8F520489672000D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:10 +0000
Manifest this update: Sat 23 Aug 2025 01:03:10 +0000
Manifest next update: Sun 24 Aug 2025 01:03:10 +0000
Files and hashes: 1: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: /JSSF6Zs0ng8i2y7+IUnj1iF3y9XEuvWon2AWkB6ni4=)
2: YJHXZeNag-cu70_fJht-ZOpxnGk.roa (hash: 2m1tn0x6o3pfXUEVzS2q6AJtU601h1r6TeqXWLsErHU=)
3: lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa (hash: jZwRIN2ogKpi/MzaP8NmIeUVW4yffrhHB5Fsd5XJEE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:6a:18:a2:e1:af:94:a8:f5:20:48:96:72:00:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Aug 23 01:03:10 2025 GMT
Not After : Aug 24 01:03:10 2025 GMT
Subject: CN=1726cf3e0ab5710c9279751f2f25372175f1a091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:1d:ae:a9:f1:4d:49:86:25:7f:a7:f7:b2:
12:0f:63:fe:c1:21:59:3a:ca:7c:f0:08:34:c6:dc:
f6:90:bc:2d:bf:2a:ea:45:92:db:91:f9:a0:86:5b:
3b:a7:0a:ae:25:1c:47:9d:b1:bc:68:16:95:82:4b:
f0:e3:5e:b9:09:47:79:35:94:14:4c:26:d8:64:03:
ef:d7:d9:af:f5:14:2c:fa:ec:0b:ec:b4:59:1b:c3:
b0:34:67:be:38:88:54:e9:53:ef:0b:09:cb:e1:2d:
df:29:47:89:24:63:a0:79:b6:c2:81:50:0f:e8:49:
51:3b:a1:fc:41:c9:d1:14:66:be:d0:32:dc:68:3a:
10:cb:5e:75:72:e2:ef:2b:ef:46:4a:03:51:97:1d:
8b:cd:85:b6:4b:79:81:69:41:a6:64:bc:5e:c3:da:
e0:8d:6b:bd:bd:92:43:46:1b:d9:07:79:6e:fc:eb:
bf:40:9d:cd:ee:66:00:d1:93:36:96:7b:3c:f3:c1:
84:c6:27:0e:0d:55:d0:00:90:39:66:1b:60:30:6f:
3c:35:c8:ca:ab:9a:d5:ff:98:ec:98:af:12:b3:00:
29:17:4f:0d:a4:68:d2:07:59:63:07:75:f3:40:22:
6c:50:e4:be:e5:e3:d5:6e:a2:6f:2c:50:04:e2:25:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:CF:3E:0A:B5:71:0C:92:79:75:1F:2F:25:37:21:75:F1:A0:91
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a2:3d:1c:c4:c7:86:14:99:c5:33:3e:70:6c:14:ae:0b:d7:
8c:30:21:3b:cf:bc:6b:b4:d5:b4:b2:59:a9:4e:42:a1:4b:85:
d9:76:6d:a4:bc:e6:c9:71:16:62:b2:83:20:67:80:34:69:a4:
6f:6e:fb:51:f8:1d:ae:bc:4c:4a:41:25:7c:18:d8:11:2d:7a:
d7:73:88:c6:3c:60:fb:89:7d:4e:f8:00:ef:7c:cd:27:15:7e:
23:d8:1d:83:7f:b5:2e:7a:1a:d8:0f:f1:80:c9:e4:aa:bd:62:
5f:5e:e2:79:e8:33:45:1b:cd:3f:36:0b:f3:8b:53:ca:f4:76:
cd:5b:18:91:c4:85:ac:18:8a:55:a2:c9:fb:88:34:74:8a:29:
42:7f:d2:49:fd:e9:1a:44:b6:f4:50:7c:5d:d2:35:e5:7e:bc:
ef:2e:d7:ed:5b:4a:18:9e:cc:8e:7f:77:1b:2f:07:f8:67:f6:
06:9b:9c:cc:21:7d:a2:03:65:ee:c9:ad:8f:a6:55:f1:82:04:
e0:c0:b0:ff:16:8c:0d:d2:e1:d8:1c:d2:c1:f3:6e:98:75:60:
22:79:b9:d9:2e:e8:ab:42:b2:53:3b:de:dc:f0:64:a1:10:3c:
ca:70:38:b3:8e:46:c4:2a:53:16:4a:ad:26:58:4e:4b:a0:55:
72:22:3b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:13 2025 by rpki-client