Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
File: G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json)
Hash identifier: OZ4+wfv6nPwZ3TBIYjsamnja8h9qoQ5Q5UhVt7zyDaE=
Subject key identifier: 0C:52:57:4A:02:08:0B:69:67:C2:F7:FD:E8:BE:30:B7:03:40:DA:E9
Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
Certificate issuer: /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Certificate serial: 0197B5FC0050848B5B87604FBD17F400B562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 10:01:20 +0000
Manifest this update: Sat 28 Jun 2025 10:01:20 +0000
Manifest next update: Sun 29 Jun 2025 10:01:20 +0000
Files and hashes: 1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: 0hhDPX7lwf4Hku7OjrK+tTiBFf0povCeqK3+DxuvU7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:00:50:84:8b:5b:87:60:4f:bd:17:f4:00:b5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Validity
Not Before: Jun 28 10:01:20 2025 GMT
Not After : Jun 29 10:01:20 2025 GMT
Subject: CN=0c52574a02080b6967c2f7fde8be30b70340dae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:2d:88:75:df:35:cb:c8:36:f1:4b:bd:ed:
7f:0c:2c:5c:e1:93:c4:94:a0:f6:85:98:fb:6c:5c:
4a:23:fe:da:bc:f6:95:9e:6a:43:87:de:0e:58:57:
16:9b:5d:79:ba:91:39:eb:d1:91:2c:85:6a:1a:0b:
97:21:e7:65:10:56:45:af:da:82:3f:e7:ea:d9:f8:
2a:6d:e8:d3:86:66:76:93:13:8a:ba:75:b0:67:63:
b4:ed:59:dd:27:ff:78:0d:5d:1d:65:e1:7a:55:44:
56:f5:89:c6:ce:a5:e2:99:eb:35:d4:b9:e4:0c:00:
1e:41:b6:5e:8b:59:bc:05:d3:17:16:84:a7:40:f4:
48:ae:76:a7:12:fe:27:96:fd:c0:9b:c6:39:31:9a:
60:72:ed:1c:1f:b2:27:d4:0a:b8:5d:aa:a1:ea:14:
9c:92:06:f6:ac:02:c9:de:0b:82:a7:d0:8a:eb:a2:
a2:65:34:63:67:20:02:f5:15:1f:12:9a:b3:44:dc:
4d:5c:68:13:70:eb:21:70:83:8d:dc:a5:c1:25:bc:
08:0e:5d:c9:36:5a:7f:51:ec:f9:9b:fa:0c:ac:fe:
b1:11:ae:7e:a8:3e:5c:28:23:d4:4f:d5:11:6b:45:
b5:93:ee:19:f2:b8:5a:38:08:32:c5:fd:e6:00:38:
ee:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:52:57:4A:02:08:0B:69:67:C2:F7:FD:E8:BE:30:B7:03:40:DA:E9
X509v3 Authority Key Identifier:
keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:55:d1:43:8e:88:63:ee:4f:24:33:17:25:87:cd:2c:1d:1d:
ab:fa:b3:9f:39:5a:95:fb:37:32:95:54:90:4a:d9:c3:a0:0f:
77:2e:75:85:1d:a2:c3:fd:0e:da:0f:76:80:c9:05:b5:0e:7d:
c2:bf:34:d7:6d:b6:8b:24:75:7c:88:26:e2:b4:93:cc:66:45:
c7:e6:9c:a9:9d:26:0b:2c:bc:bf:71:ef:93:f9:88:9b:54:3a:
56:df:6d:26:f0:b7:46:73:86:ad:f1:f7:7b:15:7d:79:96:4c:
da:80:35:e2:8a:b0:74:f8:05:50:a4:8d:e0:78:2e:be:09:08:
c7:01:bf:07:e8:9f:9a:23:88:bb:a1:74:85:4d:cb:7b:07:f9:
5a:46:02:2b:f0:5a:a4:36:88:33:1b:76:ea:07:51:a2:c6:03:
5a:2e:32:a6:9b:09:ba:4a:58:97:0a:36:2e:35:19:0b:e9:f2:
21:bf:67:fd:cf:45:01:60:8e:9e:0c:33:9c:84:d3:7b:07:3c:
70:0e:cb:ed:ad:7f:b1:fe:44:c8:e9:1e:67:47:9e:77:28:b3:
b1:59:8d:28:39:ec:a2:bf:94:fe:96:22:a4:ab:7d:c0:ca:60:
f2:46:03:8e:30:b9:95:25:03:d7:b1:62:d6:22:89:d0:ee:5d:
93:97:55:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:06 2025 by rpki-client