Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier: DuucWNXtqhFbN3ZLA/0WYNLdBJS4lKD4QRqbNnUQ6ds=
Subject key identifier: B1:5B:EC:B9:5B:65:12:A3:DB:6D:93:CA:9B:96:85:5D:39:C5:77:17
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 0197B6A1D01C7E86E6A955904118BFD73F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:27 +0000
Manifest this update: Sat 28 Jun 2025 13:02:27 +0000
Manifest next update: Sun 29 Jun 2025 13:02:27 +0000
Files and hashes: 1: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: RJvYQRj/BVmLB4e+U7sNDbP4ieuq47a9FGvh9/6gJr0=)
2: YJHXZeNag-cu70_fJht-ZOpxnGk.roa (hash: 2m1tn0x6o3pfXUEVzS2q6AJtU601h1r6TeqXWLsErHU=)
3: lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa (hash: jZwRIN2ogKpi/MzaP8NmIeUVW4yffrhHB5Fsd5XJEE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d0:1c:7e:86:e6:a9:55:90:41:18:bf:d7:3f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Jun 28 13:02:27 2025 GMT
Not After : Jun 29 13:02:27 2025 GMT
Subject: CN=b15becb95b6512a3db6d93ca9b96855d39c57717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:b7:2b:bf:24:93:6b:ec:d5:7c:da:6a:e3:
b1:90:da:fc:d2:c6:6d:85:13:fb:f3:3b:ed:bc:9e:
b2:63:5d:66:5d:d5:04:02:de:b6:64:a5:9c:df:4b:
f4:70:73:2d:8b:cb:f1:b0:18:8e:a8:db:ee:44:fa:
ba:07:23:5f:ec:19:03:4d:52:01:2f:49:d6:da:bd:
16:2c:57:11:60:78:0c:04:93:02:0c:76:0f:dd:50:
64:25:f8:69:2c:3d:4e:26:d1:cb:0c:25:e3:55:7e:
ac:8a:a8:d5:70:9c:ad:f5:83:82:34:45:5c:b4:ee:
d8:8e:76:82:9a:82:a1:b7:dc:a1:01:f5:66:88:c0:
b2:3b:e8:96:11:c6:0a:df:33:fa:91:d9:86:9d:78:
49:9a:7a:96:52:22:a4:df:b8:fb:d6:b3:82:99:37:
d6:9d:8f:95:37:f2:d7:e3:c8:d8:a3:7a:83:4a:62:
19:93:b8:de:55:7a:18:d4:ac:85:0f:5d:5e:56:15:
29:3b:f6:49:12:d9:85:a7:eb:52:78:88:82:80:12:
00:10:02:67:d9:e3:64:41:da:64:18:9a:4d:9e:c5:
fa:bd:47:15:5b:29:39:b1:cc:cf:7b:d8:c7:f2:c8:
ac:6e:a7:2d:e7:f2:90:ae:20:a2:98:4e:90:7d:01:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5B:EC:B9:5B:65:12:A3:DB:6D:93:CA:9B:96:85:5D:39:C5:77:17
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:93:ba:61:75:45:f7:34:d8:03:9f:7a:5d:16:0d:70:1f:22:
ca:f2:ba:df:a9:67:a8:76:1f:8e:48:c9:1d:d1:51:d1:19:46:
f5:5c:d3:9c:85:0a:64:72:cd:b4:d6:1a:0c:9a:a1:61:bd:08:
cd:97:72:36:c1:dd:39:ce:cd:ca:93:3c:f2:67:62:f9:01:b5:
04:c8:f5:50:6e:32:bc:81:2b:ff:8d:8c:66:92:43:39:4c:49:
c2:60:7e:5a:e3:4c:88:45:94:d9:89:4d:6e:26:cc:d2:40:6e:
19:f3:f3:68:53:af:77:25:a9:5e:14:8c:f8:a9:ad:7b:f3:d5:
70:7e:b6:4b:5d:61:55:7f:a1:80:57:b1:3a:5b:fc:e0:be:24:
f4:79:a2:0c:cc:c6:2b:ca:6f:15:6e:b6:8e:d7:8d:6d:c6:f5:
4e:35:ac:98:1c:ec:cf:44:57:34:a2:c8:dd:12:a5:e8:df:05:
0f:3b:e8:1f:68:d2:7f:f9:75:e4:77:fa:35:16:fd:1d:f3:8c:
a3:b9:ac:d8:3b:8b:b1:4a:d9:35:de:a3:c2:a3:75:b7:8f:e6:
c6:35:9a:07:e3:c2:37:8c:2b:5c:88:95:a5:28:1f:3f:0d:7d:
1b:6d:c3:06:6b:11:9d:6b:e1:2f:dd:86:f3:49:0b:0b:99:86:
b2:1b:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:50 2025 by rpki-client