Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
File: G_GA7KTkQF6Heotjkjp1iNd-OdI.mft (raw, json)
Hash identifier: URfcaal4KgObTlWyipvJJsBfF9jyTeYP3DR8TrdEevY=
Subject key identifier: DC:4C:4D:BE:C5:F0:0D:96:27:18:B3:AA:9B:01:2C:D3:61:B1:B1:2C
Authority key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
Certificate issuer: /CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Certificate serial: 0198D515E1AD84AA1AF225FC8012265AFD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
Manifest number: 05A0
Signing time: Sat 23 Aug 2025 04:00:37 +0000
Manifest this update: Sat 23 Aug 2025 04:00:37 +0000
Manifest next update: Sun 24 Aug 2025 04:00:37 +0000
Files and hashes: 1: G_GA7KTkQF6Heotjkjp1iNd-OdI.crl (hash: heuvsCheWfnJYsJ6QgTeE060ySmHkkQmdO1BgSeWiQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e1:ad:84:aa:1a:f2:25:fc:80:12:26:5a:fd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Validity
Not Before: Aug 23 04:00:37 2025 GMT
Not After : Aug 24 04:00:37 2025 GMT
Subject: CN=dc4c4dbec5f00d962718b3aa9b012cd361b1b12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:68:73:ef:2e:b3:5d:0f:95:cb:75:95:a7:ed:
aa:25:bc:21:97:51:bc:f9:f9:0e:1d:ce:63:c9:d7:
5c:f9:51:74:02:e4:a5:2b:09:37:f4:b5:97:ad:12:
2b:f5:e6:c6:0c:14:02:50:9c:6e:f1:62:92:ec:d0:
e4:b0:f2:19:fc:b0:0d:b6:0e:c3:97:f6:70:01:88:
8d:2e:50:31:ea:d8:34:80:35:41:f4:fb:44:49:19:
b0:1d:96:c6:b7:fd:c3:f0:95:f2:b5:3d:c6:1d:6a:
61:32:ed:e7:38:3b:c8:d5:b8:1c:f5:a2:3a:00:b1:
94:27:8e:ab:67:c0:0f:07:42:27:fb:b8:fa:18:f8:
4d:69:1a:0c:97:55:73:95:da:41:9b:2e:35:00:7b:
2e:d5:b5:bc:f1:9e:4d:e0:f4:e0:d5:4c:09:d1:21:
75:61:69:1b:ea:0f:47:12:70:fd:7a:3c:7d:0c:4a:
5e:44:26:4b:82:92:a3:97:c6:71:3e:fd:98:70:f5:
29:77:52:3a:38:a8:43:1a:10:c1:7d:cd:8f:24:b7:
89:06:2b:65:33:0d:ff:dc:1d:3e:5b:45:33:60:12:
d9:be:34:e4:29:a6:a0:06:2e:65:1d:f6:28:82:ea:
7b:7e:38:22:f9:be:8d:41:6a:fc:a4:a4:aa:83:78:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4C:4D:BE:C5:F0:0D:96:27:18:B3:AA:9B:01:2C:D3:61:B1:B1:2C
X509v3 Authority Key Identifier:
keyid:1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:a6:37:55:cb:6a:2c:f2:e4:ab:23:4e:35:1e:f2:51:88:
84:35:cb:dc:3e:66:a0:05:92:5b:8a:34:32:2e:b3:53:86:67:
c9:4a:98:70:e9:07:30:9b:5d:48:f9:73:d2:ec:be:cf:f2:19:
61:32:44:73:c8:f8:3c:38:6b:a5:12:cd:ef:98:57:20:78:cd:
0c:81:85:47:8f:10:ac:dc:cd:1f:f2:7f:18:4a:61:7d:27:b9:
8d:62:e7:5b:af:06:3d:1c:2c:f4:c3:8b:5f:f6:2f:95:6e:0c:
39:56:45:d8:24:5a:de:47:45:53:b0:fc:a9:01:95:85:3e:79:
d2:cd:29:42:1d:d4:74:cf:5c:c6:ac:68:41:88:38:13:15:c4:
96:76:5f:82:8e:23:45:fb:94:44:d5:5b:7b:7b:21:4d:ad:51:
1a:d7:0f:85:8c:d0:3b:15:fc:1e:91:ac:da:ed:86:31:60:82:
b9:af:38:e8:5a:dc:fe:9e:98:26:fd:47:69:5d:84:73:6a:1c:
8e:b7:91:51:32:c7:86:c7:86:45:e7:1c:61:b9:d9:d3:cd:b7:
cd:33:45:6a:d7:52:28:79:71:02:58:7f:72:6e:80:84:9d:50:
b1:16:9e:ed:ce:1d:57:c9:32:a2:9f:a7:1a:dc:16:ca:70:b3:
b3:a5:a1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:50 2025 by rpki-client