Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier: xomtM46JuihZe5DUJcNMr9v/LVYIiTtDBnjL29jg53g=
Subject key identifier: B3:38:CD:80:C8:56:25:1C:32:3C:DA:B6:4B:62:1C:32:D0:34:BD:B3
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 0197B6A13FC6507AC280C8F53DDB06CC336A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:01:50 +0000
Manifest this update: Sat 28 Jun 2025 13:01:50 +0000
Manifest next update: Sun 29 Jun 2025 13:01:50 +0000
Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: 5TKRQ74lwsKSig1fe9u+RKaf3gShmRUbl6FNRAzOTLc=)
2: xIsbgd-1jNIqLfaxvWsXTolM4hw.roa (hash: IbSWm3FdPDBzLYRsZr3IBY9SNHNxrtPl7LMS9I121XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3f:c6:50:7a:c2:80:c8:f5:3d:db:06:cc:33:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Jun 28 13:01:50 2025 GMT
Not After : Jun 29 13:01:50 2025 GMT
Subject: CN=b338cd80c856251c323cdab64b621c32d034bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:59:18:3c:28:25:1b:69:33:56:48:8c:78:
17:e9:77:a5:59:9e:da:55:e4:8b:07:c0:c6:b0:0b:
ff:c9:2c:b6:84:a4:6b:83:d2:4e:af:61:5b:2d:5a:
41:ba:9d:d3:ec:ac:b3:24:40:a3:ae:20:a2:2b:2b:
16:bc:07:0c:48:a9:62:c8:a6:87:75:8c:c8:0b:f6:
a4:b5:3c:aa:4e:28:01:e6:4c:dc:bd:0e:be:ad:94:
01:eb:28:67:8d:c0:50:cf:56:03:de:d8:66:f4:b8:
2b:4e:e9:08:28:a3:11:01:ce:8b:37:76:eb:86:92:
f0:cc:9d:d5:bd:bd:84:ac:6f:21:4d:e9:72:25:61:
79:29:84:97:f2:4d:a8:79:09:68:b8:2a:86:f9:53:
87:07:6d:f5:4d:db:53:17:d9:5f:00:30:8b:8f:6c:
8d:74:d5:82:b3:5c:39:6e:24:87:62:f9:ab:a3:f6:
73:e0:15:fd:7c:64:93:a2:6b:ad:2b:db:42:89:f7:
7d:7a:41:19:4a:cb:24:e4:99:bf:de:96:b7:48:10:
e3:b7:8f:5f:85:ee:3b:2f:d0:0b:31:32:11:1a:9b:
80:8a:94:3e:39:a6:26:96:0d:59:30:a6:ad:e9:76:
0e:e7:96:76:78:17:24:94:c1:95:4c:31:20:ed:3a:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:38:CD:80:C8:56:25:1C:32:3C:DA:B6:4B:62:1C:32:D0:34:BD:B3
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3c:ef:ed:36:94:ed:c0:26:36:98:5d:ad:cb:26:7e:28:fc:
5a:0b:f2:40:a2:b7:59:74:ba:c0:bd:d5:2e:82:39:47:5e:b2:
b4:bc:ba:fd:de:91:03:51:5b:ed:ed:32:14:ae:7f:b6:89:f9:
f3:b5:71:cf:21:f4:24:ea:89:59:1d:1b:3a:62:b3:ac:6d:6e:
27:75:99:22:83:ea:e4:9b:b8:cb:a9:fc:b3:3e:7d:73:36:76:
95:f0:3e:64:ad:f5:20:71:2c:8c:db:56:00:e2:75:5e:ed:b7:
f3:35:a1:20:31:d5:86:af:a6:8c:db:c3:c9:bd:23:db:75:b3:
b9:ab:d5:12:fb:b0:28:09:35:58:de:a7:01:f6:65:77:eb:9a:
35:a9:a4:5d:65:e7:0d:94:11:f4:a5:98:f2:93:d5:9e:68:4e:
28:f8:e0:33:9a:15:ab:bc:09:c7:b1:19:70:15:8f:88:79:34:
a8:23:10:e7:d1:a9:84:35:d5:63:69:49:a2:0e:30:45:8b:0b:
32:98:7a:79:25:59:53:98:f4:67:37:d1:9d:35:1e:56:ca:75:
7e:b7:9c:a2:93:a5:fc:40:99:f4:d8:e3:67:6c:58:7d:df:84:
d4:39:b6:73:1b:a8:57:61:a8:f9:37:95:72:1f:3f:5c:28:7d:
67:74:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:37 2025 by rpki-client