Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: bJl1Eh5e70CAfejOrG7gNUDEbZJLMmVmfNBe/6kBQp8=
Subject key identifier: 75:F7:FE:4C:61:00:BE:27:3E:EB:A7:21:03:F7:FD:EB:ED:F9:D3:52
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 0197B6D73A3D6602A6D62749FED4D62B8469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 0DDC
Signing time: Sat 28 Jun 2025 14:00:47 +0000
Manifest this update: Sat 28 Jun 2025 14:00:47 +0000
Manifest next update: Sun 29 Jun 2025 14:00:47 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: BCvHudr4rIXxQI+2KnmTaeWU+q4vKSIrhbDOQjO8vvs=)
2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3a:3d:66:02:a6:d6:27:49:fe:d4:d6:2b:84:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Jun 28 14:00:47 2025 GMT
Not After : Jun 29 14:00:47 2025 GMT
Subject: CN=75f7fe4c6100be273eeba72103f7fdebedf9d352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c5:68:8a:e6:bd:ec:75:73:3a:f6:27:c0:51:
66:53:6c:84:ec:f7:62:a0:5a:74:48:ad:0d:2c:12:
ba:00:5b:e9:88:4b:f3:e7:f9:fa:34:8a:e5:17:13:
e9:48:00:a4:6a:b0:f4:c8:35:8b:a6:c4:70:fd:16:
ed:11:ca:42:2b:aa:99:d9:25:62:2e:22:18:50:da:
78:93:43:c6:63:42:8c:5a:9c:5c:92:02:a3:71:14:
33:0f:1c:1e:a9:74:4d:57:32:5c:b7:b3:39:bb:6e:
a6:b4:f7:5e:be:09:5a:39:39:58:41:32:ff:33:51:
cb:26:dc:20:50:58:0d:8b:3f:7f:90:4f:08:18:19:
e8:2a:99:70:e8:73:c4:e2:fd:42:5b:7e:b5:8c:7f:
93:69:d1:ab:1a:93:9c:ea:13:e4:44:d7:d6:10:85:
43:dc:70:a1:d9:45:0f:43:62:be:cd:cb:b0:3c:25:
9a:32:53:91:9e:d6:7f:f3:fe:e4:13:37:f6:93:d6:
4a:bb:f0:e1:24:74:eb:b7:6c:91:cd:b4:b7:67:32:
4c:4e:7c:ed:34:ee:69:25:eb:b0:8c:7a:ab:70:71:
87:f9:57:33:c5:25:b2:4c:d8:a2:a0:ee:bd:2d:cf:
da:f8:6d:b6:7d:2b:e8:0e:3e:01:60:ed:0b:a3:db:
e3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F7:FE:4C:61:00:BE:27:3E:EB:A7:21:03:F7:FD:EB:ED:F9:D3:52
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9a:95:bb:17:de:4c:2f:05:9f:cd:e7:9d:d6:75:2a:cb:51:
0c:a0:79:e9:2a:e8:a9:0f:64:f7:76:72:af:5e:c3:f4:74:a1:
13:d0:ee:ea:f1:a7:cb:4e:fd:15:f6:c4:5c:70:77:4f:2b:3c:
c4:59:62:e1:a8:7f:dd:88:8c:b3:0a:63:50:cb:eb:dd:c2:ab:
a7:d2:29:f3:07:f8:b6:1a:50:cc:e1:1a:3e:a1:8f:45:8d:f3:
3b:0d:25:fe:13:6f:6b:16:08:5b:d5:88:45:a0:e6:67:3c:53:
79:10:a4:ca:4b:51:be:d2:28:f2:4b:88:4a:93:18:cf:de:57:
eb:61:df:be:75:10:f9:de:72:8e:00:2d:3f:40:a4:20:c0:63:
e3:9e:e4:d7:38:19:94:d0:7b:0f:1d:97:30:46:1c:0d:f5:34:
c4:fb:6f:16:4b:cb:1f:5a:6c:5e:67:d4:ef:66:76:33:43:36:
d5:cd:53:9a:5f:d5:a6:43:45:d6:16:46:80:ea:97:97:44:75:
6f:b5:f6:99:ca:bb:3b:97:70:e4:6f:74:8a:c5:a5:03:a0:8e:
0e:c2:ae:af:37:9a:c7:8b:48:be:7f:1c:e3:53:8a:55:90:2e:
fb:76:83:c3:e2:83:1a:12:7e:55:6b:c5:a4:ec:dd:68:e8:ba:
8c:e4:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:50 2025 by rpki-client