Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
File: G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft (raw, json)
Hash identifier: WmITEFC0PZsIgx4vwnGS1NDtitLlXWsPr5HJhtXqVkA=
Subject key identifier: 52:7A:10:2A:7F:DF:51:09:6B:94:10:4D:D2:1E:36:F4:3D:CD:D5:5F
Authority key identifier: 1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
Certificate issuer: /CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Certificate serial: 019A4EF48B70ACEFEE0B166E2C9B42452480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 13:00:40 +0000
Manifest this update: Tue 04 Nov 2025 13:00:40 +0000
Manifest next update: Wed 05 Nov 2025 13:00:40 +0000
Files and hashes: 1: G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl (hash: /vRcyug3XT8Y4197q6GM+NoY+F51xxGxWLxBT6mNd30=)
2: h-vjilG4zsTOTFr8jyiuNr7YOYQ.roa (hash: J1qho6qvh9PzDmhMh26kyKPFY1m2ydeARTE83gY+gJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:8b:70:ac:ef:ee:0b:16:6e:2c:9b:42:45:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Validity
Not Before: Nov 4 13:00:40 2025 GMT
Not After : Nov 5 13:00:40 2025 GMT
Subject: CN=527a102a7fdf51096b94104dd21e36f43dcdd55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:20:1c:d9:2d:13:62:b2:06:3d:b1:ef:cb:
d2:e4:34:4e:d6:a4:42:8c:e2:ae:f8:94:91:e1:5d:
50:de:94:14:24:be:04:a6:54:c0:f2:a7:0e:c7:4b:
05:5d:33:00:13:02:44:94:53:fd:11:4f:e2:46:a9:
1a:1c:5c:60:eb:f7:bc:2d:37:03:70:08:37:a7:f0:
70:56:96:6d:2e:6d:17:ef:9e:80:e9:14:e2:40:e3:
15:9d:fa:f3:a8:1d:02:a8:64:6b:b4:57:19:5c:5c:
2a:7d:40:bb:16:b8:2a:4d:85:75:96:05:bb:21:78:
cc:4d:cd:ca:e9:f4:59:02:34:59:9c:b2:fb:a4:6b:
48:15:5b:b7:3f:d8:cf:f8:7a:63:1e:d2:2c:21:d5:
31:68:33:3e:c3:ad:c4:27:33:91:2a:cb:56:de:92:
38:30:f7:30:0c:55:f3:87:f8:b5:5e:ac:8e:29:c3:
d5:90:74:8d:72:4c:f4:f5:6e:fc:02:67:e4:ff:0c:
fd:03:f2:7f:dc:2b:84:8b:59:cd:09:98:43:cd:ed:
9e:89:40:11:19:f2:d7:4e:a8:3e:75:f0:4f:ed:a9:
d6:36:64:03:b3:c2:b7:a4:06:bf:03:cb:4a:e4:11:
9a:af:be:06:52:bc:6f:73:9a:10:93:80:1c:de:d8:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7A:10:2A:7F:DF:51:09:6B:94:10:4D:D2:1E:36:F4:3D:CD:D5:5F
X509v3 Authority Key Identifier:
keyid:1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:04:6c:59:c3:a0:09:3e:2b:c9:7a:0d:47:81:aa:1e:b0:1f:
2e:49:5a:b8:c9:02:c7:1e:63:f7:c1:41:ee:f5:00:69:bc:e6:
73:53:cf:42:09:47:c5:e9:43:d3:51:dd:84:de:56:5c:b6:50:
01:d7:49:7b:14:75:ae:5b:c4:b3:de:46:32:29:52:30:71:cb:
f7:bc:3b:ca:3c:88:dd:51:5d:c5:1e:db:36:cb:7d:44:c9:4f:
fb:24:ab:f2:66:8b:a4:08:9d:53:77:dc:d4:76:be:b6:dd:d6:
e1:eb:52:d9:66:84:af:a7:31:fe:40:72:cf:6f:d3:a1:83:cd:
88:95:ce:66:bd:ff:b4:e0:a6:cf:dc:3d:83:58:00:b7:93:73:
6c:01:41:85:0d:9c:08:96:ac:63:af:3e:f0:b9:fe:77:e3:31:
ae:c0:45:d8:01:c3:4d:56:de:c1:8d:92:20:b5:7b:48:df:c6:
17:40:f0:80:8f:51:69:f4:9e:6d:d2:99:73:28:df:b2:87:2a:
58:29:b6:0e:10:69:59:48:46:a5:59:d8:09:ad:a2:0c:f8:89:
b3:9c:b8:a5:c6:a4:ba:92:1c:22:a3:91:bc:e6:c3:13:84:51:
82:6a:b7:6e:ee:80:8d:ba:3b:4a:3f:82:88:78:cc:62:13:06:
bf:16:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:13 2025 by rpki-client