Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
File: G7Qd9-pn1O3-D60S99XOzYPhjZo.mft (raw, json)
Hash identifier: y1SPLyab1jeWdAlOtOzYuuPr9G5cHtHyDxc/AFIuQBc=
Subject key identifier: 2A:12:6E:BD:4D:A1:C8:79:BE:CE:49:F1:5F:64:64:78:22:16:27:6A
Authority key identifier: 1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A
Certificate issuer: /CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a
Certificate serial: 019A4F2B11041740851E51E9172ABBDBBC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
Manifest number: 04EA
Signing time: Tue 04 Nov 2025 14:00:13 +0000
Manifest this update: Tue 04 Nov 2025 14:00:13 +0000
Manifest next update: Wed 05 Nov 2025 14:00:13 +0000
Files and hashes: 1: G7Qd9-pn1O3-D60S99XOzYPhjZo.crl (hash: 0xYJG34uUGShK6ArIthy2r7Hb6cUkDl7GLW0/yv/Om0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:11:04:17:40:85:1e:51:e9:17:2a:bb:db:bc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a
Validity
Not Before: Nov 4 14:00:13 2025 GMT
Not After : Nov 5 14:00:13 2025 GMT
Subject: CN=2a126ebd4da1c879bece49f15f6464782216276a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:b8:2c:93:5d:9d:00:8b:d7:90:d4:ce:12:
bb:d8:3e:de:2b:fd:bf:a0:17:02:51:b2:35:39:96:
a2:f6:75:e6:31:e2:22:ff:40:25:d7:9f:fc:00:63:
a8:ca:58:e1:06:09:c5:f2:a3:99:7c:2d:df:43:d9:
5b:c3:bf:24:ff:99:68:aa:d5:2b:c1:56:ef:d9:4c:
55:63:a7:29:e6:a5:05:22:85:d0:fa:4a:11:3a:8b:
df:c9:de:63:27:da:8b:25:3e:8b:a9:b2:f1:a4:64:
a4:82:f3:1e:11:d6:b9:f7:d4:c3:51:ea:62:02:fe:
45:63:51:7c:61:44:cb:31:da:78:36:1c:95:46:39:
3c:7c:75:eb:16:0c:cf:b6:c1:30:bb:03:73:7b:3e:
9e:e2:e8:1d:f1:9e:93:68:0a:2c:5f:ea:12:b8:d1:
ec:36:3f:cf:b5:b9:62:69:75:e1:69:7c:91:8f:d4:
76:cc:04:1c:2c:ae:76:3d:dc:4c:5a:81:6e:16:6a:
e4:56:91:45:20:11:8b:57:da:ce:cc:5d:14:d2:ae:
29:35:f1:91:db:18:53:43:73:35:58:d0:f5:87:af:
3f:72:d0:80:e9:6d:89:45:60:91:56:8f:e7:40:e9:
be:31:f4:06:25:79:c3:9d:08:8b:04:ad:17:0a:58:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:12:6E:BD:4D:A1:C8:79:BE:CE:49:F1:5F:64:64:78:22:16:27:6A
X509v3 Authority Key Identifier:
keyid:1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:57:c3:82:d7:7b:96:bb:53:d9:49:e7:18:38:68:cb:93:79:
d5:dd:47:08:53:63:3b:62:d4:0b:6d:42:dd:cb:b2:05:ce:46:
40:24:e3:fe:18:ef:17:02:7d:ca:0c:34:9d:95:0f:d2:5e:d5:
5d:d4:34:ee:3f:a1:e5:39:85:e3:f3:57:b4:c3:01:03:af:6b:
86:43:20:96:56:27:41:b6:07:69:a8:43:69:c8:31:41:39:75:
e7:2b:8c:e9:38:b8:0e:5d:dc:6b:b6:2c:52:d9:c0:b2:d8:bd:
6e:fe:84:e8:b0:ee:43:c6:14:07:f8:a8:59:65:cb:b9:81:36:
57:82:84:97:e3:eb:b0:7f:46:6b:ab:6b:b0:e5:0a:d4:e8:a2:
22:f9:38:63:bc:f7:de:17:fc:97:5b:bc:2c:bc:ea:21:0d:62:
b9:18:47:cf:4e:21:82:7f:11:5d:ee:5e:15:5f:a0:6f:f8:f6:
65:64:dc:29:6d:ba:11:49:7d:01:52:62:80:e6:e0:4c:e7:a3:
23:2e:8d:84:e8:5f:56:c1:08:c0:32:9c:ab:0f:61:01:f6:6c:
e4:70:2e:4d:31:20:1b:37:bb:9a:2f:42:8c:2c:f0:ba:41:66:
63:5c:77:c0:fd:77:2a:dd:03:43:ac:65:41:71:d2:f6:00:d5:
e2:1e:01:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:16 2025 by rpki-client