Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: 9ztuWfzbVsA6leobo2snt4EnjL91nFZvVc9pec+Xfvs=
Subject key identifier: 2F:41:95:CA:6E:2E:94:EF:8A:97:C2:13:CE:4C:CD:C0:FD:F5:23:1A
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 0197B6A1DF003B40C3F91E7F652B435F4AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0AC0
Signing time: Sat 28 Jun 2025 13:02:31 +0000
Manifest this update: Sat 28 Jun 2025 13:02:31 +0000
Manifest next update: Sun 29 Jun 2025 13:02:31 +0000
Files and hashes: 1: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: Uuw7l4gfF2VfHhRkEdqeb+nzPSQ5kAIKn068cEEQFZ0=)
2: TRfMCYgQom2qb1ltkPZ8pDFMPbw.roa (hash: B/bZzAE30Cbi1NKH6O3ZfRrv6UmAF6KTnp6VWp5movg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:df:00:3b:40:c3:f9:1e:7f:65:2b:43:5f:4a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Jun 28 13:02:31 2025 GMT
Not After : Jun 29 13:02:31 2025 GMT
Subject: CN=2f4195ca6e2e94ef8a97c213ce4ccdc0fdf5231a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:61:49:db:20:a9:29:e5:50:39:93:54:60:aa:
f3:a1:0b:83:9d:03:5e:52:9e:c4:bc:30:41:09:db:
74:b0:54:73:f1:51:40:c7:5a:8e:b9:3d:8a:8e:a4:
6a:35:64:af:5b:a4:5f:97:7e:43:ec:44:cc:ea:33:
d8:90:65:6d:30:7a:5e:59:3a:97:7c:f1:e8:00:9b:
9a:b4:37:68:5d:49:d7:da:10:13:9c:8d:7a:0c:93:
a8:4e:6e:bf:ba:0d:1e:3c:8e:1d:c0:0d:ed:f6:47:
8e:b7:3e:bf:e1:c6:77:03:9e:6e:9b:35:da:dc:78:
b7:17:1a:4e:0e:b1:67:40:ea:5e:c8:fe:05:99:c3:
bb:65:26:27:19:1e:40:b0:d7:4d:f5:4e:67:83:1c:
05:dd:33:bc:8a:91:49:07:d6:88:12:f9:24:cc:d8:
81:46:d7:88:e8:44:7d:34:4f:c9:71:14:01:1b:a9:
d1:6a:65:45:aa:cd:75:7a:5c:e9:26:65:46:35:45:
b7:aa:c5:9a:65:05:60:9f:a1:63:1f:06:68:ef:f7:
24:ff:25:f1:4d:20:b3:ed:67:ba:2e:e8:bd:be:17:
46:63:33:38:c0:d2:52:ce:e4:0e:52:59:b8:98:4c:
67:af:7d:8b:15:af:3f:37:e2:36:be:5e:a2:6c:9d:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:41:95:CA:6E:2E:94:EF:8A:97:C2:13:CE:4C:CD:C0:FD:F5:23:1A
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:50:64:75:39:52:23:d3:07:a7:79:43:ce:02:7f:6c:d8:28:
0f:80:39:ef:89:83:ea:4c:8f:74:bc:f3:40:2b:ed:18:ad:ee:
dd:ce:03:42:2c:52:b4:a0:52:4c:ab:94:db:63:5c:04:02:a9:
00:94:8e:81:df:cf:98:96:f8:99:30:4c:86:ff:f3:bd:15:a7:
74:11:08:6a:0e:81:09:f3:a4:f8:fa:29:19:b0:7c:3e:5f:b8:
72:51:dc:bc:af:ad:4c:8c:d2:d4:49:c6:c8:1d:9b:99:7b:91:
b4:fd:37:0e:51:e4:96:15:05:e0:4d:95:f9:d2:d0:55:55:75:
c6:37:c9:6c:d7:29:52:b4:e1:ac:5d:c5:fd:b3:bb:fc:10:63:
f9:82:aa:e2:8f:0c:c3:e6:2c:08:5e:41:12:ca:29:6f:e6:13:
09:9d:7d:a4:c2:1c:69:a7:e2:99:e8:c4:6e:0c:eb:e7:ce:a1:
62:89:27:14:94:a5:0e:43:39:10:7f:04:08:8c:a2:38:6b:09:
0c:be:b3:85:56:9b:08:99:55:88:ab:3a:78:95:f2:65:88:de:
1c:76:6a:9c:50:7c:66:a5:35:ab:a6:82:3a:d9:87:7a:4f:fc:
9d:5b:ce:1a:cf:9c:fb:ae:e5:4e:7b:c4:9e:1b:bc:3a:1b:2d:
06:c9:0d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:40 2025 by rpki-client