Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: TBAJKEPopOYkUSHBf3jRLaJgNWJ8IcaMh9JyWnVp0Ys=
Subject key identifier: D2:F1:10:BD:7B:94:AB:02:1A:B6:31:40:47:59:F1:2A:AB:3E:27:A9
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 0198D6980F90665F5B2974041D95F2DCE66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 0E71
Signing time: Sat 23 Aug 2025 11:02:26 +0000
Manifest this update: Sat 23 Aug 2025 11:02:26 +0000
Manifest next update: Sun 24 Aug 2025 11:02:26 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: lvKcRSr/9ho2RGBU9ddAtaZzT6BTmH3WqAa0pn4OCfI=)
2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:0f:90:66:5f:5b:29:74:04:1d:95:f2:dc:e6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Aug 23 11:02:26 2025 GMT
Not After : Aug 24 11:02:26 2025 GMT
Subject: CN=d2f110bd7b94ab021ab631404759f12aab3e27a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:6b:9a:39:ab:b3:7f:21:05:d0:da:06:63:
eb:02:ad:48:c9:92:30:b1:3d:b4:47:9e:74:f9:89:
f1:37:58:b1:17:bd:0d:28:ea:87:a5:8d:61:75:15:
9b:b1:2b:d1:9f:d4:58:5f:29:ae:23:c7:94:99:c4:
d4:1a:a4:4b:fd:de:73:e6:8d:d6:37:68:1a:c5:3f:
b0:71:50:3c:5b:5d:15:0b:91:a7:31:7d:b8:b2:ca:
f5:15:9d:17:bf:58:0a:4a:06:a5:50:45:e9:37:b6:
96:f9:f2:15:c7:9c:52:11:1a:90:f8:cc:1a:6b:36:
98:18:ed:aa:79:99:75:6e:a0:13:78:bf:e5:42:ff:
60:81:65:e4:a1:a8:7e:1b:5b:4e:ca:f6:53:bc:51:
db:52:cb:7e:97:9d:0a:64:b5:c2:2f:69:cc:ad:2b:
3d:9f:74:3a:78:97:a3:f3:b8:dd:5d:0c:d3:56:f4:
0d:51:ed:98:16:b7:80:6e:73:56:61:7b:42:c8:93:
de:30:82:4e:d2:93:80:19:36:f1:0c:69:15:d9:bc:
0a:ca:bf:40:90:0f:5e:f3:6c:36:c7:72:56:0f:46:
98:5d:0b:e4:b9:45:c4:fd:91:d9:d1:5d:96:e2:b0:
76:e8:6f:e6:d4:46:b0:a1:3b:3f:2f:ed:7a:7a:0a:
4e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F1:10:BD:7B:94:AB:02:1A:B6:31:40:47:59:F1:2A:AB:3E:27:A9
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:92:e0:60:6b:d7:cc:b6:bf:dd:93:50:03:86:0e:52:f3:88:
04:b2:44:c3:7b:aa:b4:1a:52:81:49:3d:0e:4d:b5:06:8d:fd:
5b:c8:8c:7f:b5:12:a8:1a:e0:af:e2:5b:e9:87:08:77:66:64:
29:30:91:57:fe:04:cc:b5:d8:91:1f:90:6e:b0:80:bb:a2:fe:
95:3a:08:1a:e1:7b:ac:75:f7:e5:dd:b9:93:df:74:45:18:11:
4c:f8:23:4e:ac:20:15:29:29:6a:8a:e1:82:b7:9e:25:ef:c4:
a6:d2:e5:3c:99:6b:5c:e9:04:ed:46:1b:61:80:f0:5f:92:d0:
b3:b1:a1:08:2c:c4:1d:35:e8:5b:de:50:71:1d:cf:35:da:44:
91:84:35:d3:bf:25:af:f7:9c:a6:cd:09:6f:1e:2c:61:aa:5f:
d0:6e:db:5e:6d:b5:24:33:b8:bb:a8:b6:29:0d:27:52:ce:ba:
bd:cd:5e:27:8a:da:d3:8c:c0:44:8c:58:af:d4:71:34:5c:4c:
16:00:b8:8f:a7:58:0b:34:50:7a:68:0e:b7:83:a7:06:57:72:
d7:0b:dc:4c:87:34:a3:f0:9c:64:23:2a:86:2f:d8:60:e1:47:
68:ef:12:22:3c:96:ef:60:57:f0:c1:c9:2d:11:39:db:92:c1:
4f:23:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:10 2025 by rpki-client