Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: DzX9UCb7vigeZ6YICTMI7s2ZcEriK0Dh0+32v2h3Qsc=
Subject key identifier: 3B:4F:BC:FA:28:5F:57:09:BB:D4:FA:A5:1A:37:B2:49:4E:95:DC:4A
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 019A4E4FA6653C7BFDC3A8369EB913700FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 1425
Signing time: Tue 04 Nov 2025 10:00:33 +0000
Manifest this update: Tue 04 Nov 2025 10:00:33 +0000
Manifest next update: Wed 05 Nov 2025 10:00:33 +0000
Files and hashes: 1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: O8SKfnDRNMEx10w/oq4G7UrwjeqqI8EeJbxxsu5vdcQ=)
3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a6:65:3c:7b:fd:c3:a8:36:9e:b9:13:70:0f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Nov 4 10:00:33 2025 GMT
Not After : Nov 5 10:00:33 2025 GMT
Subject: CN=3b4fbcfa285f5709bbd4faa51a37b2494e95dc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:d4:5f:2d:20:56:34:d5:0c:ff:fa:0d:c9:
d3:8c:50:02:c5:bd:0d:76:50:06:26:8d:bd:64:1a:
60:55:3b:50:de:95:7a:10:0b:37:5f:99:64:e6:0a:
77:64:2e:85:77:4a:c2:51:db:f8:4c:06:b0:81:ae:
55:21:f6:ec:88:43:1e:42:71:6e:0d:8b:de:6a:e8:
92:65:92:70:d0:d7:f8:73:8d:a5:3d:ae:0a:09:46:
f3:ba:d7:13:09:56:f5:36:0c:31:17:d9:c6:dc:59:
ce:4b:32:07:a7:48:83:de:39:2c:fe:71:59:a9:9a:
04:f7:33:03:79:88:cc:e5:5c:03:cb:d3:0e:4b:52:
7b:9a:00:ee:45:d3:53:fb:9d:bd:20:b0:d7:ae:0a:
62:28:22:6e:28:6b:1c:60:60:f3:46:2b:d8:ce:1f:
99:d1:bc:e1:35:53:92:80:9a:11:c5:0d:89:70:1e:
fd:08:a9:da:b0:7f:83:28:34:90:c4:91:84:e8:96:
d2:c0:c0:00:84:ea:bf:06:ff:bc:29:ed:9b:d8:0a:
e4:8c:d0:3a:23:37:f6:2d:ed:9c:fc:9b:e0:76:ee:
4d:9c:a0:00:21:b8:ab:16:a4:04:2b:2f:6e:e7:31:
7e:b0:21:5a:4c:30:0f:38:91:a8:f8:65:a3:bb:72:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4F:BC:FA:28:5F:57:09:BB:D4:FA:A5:1A:37:B2:49:4E:95:DC:4A
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:bf:b3:d4:ff:68:7b:b3:ce:ce:10:ce:06:89:1c:be:f1:f1:
2c:86:fc:71:bb:86:a5:a4:48:fc:c6:ca:5b:b4:d2:f8:00:7a:
64:19:d1:77:9e:33:ec:5f:40:60:a1:87:17:f8:d1:3e:2e:09:
f4:67:9d:bc:6e:a0:81:18:a9:2d:3a:96:aa:43:19:03:a1:29:
bf:53:7b:e1:47:71:60:6b:32:84:98:76:a4:70:d3:c7:5b:67:
b4:9b:6d:c2:c4:45:09:31:13:c7:36:05:40:8e:22:65:f7:bb:
c3:72:ad:eb:34:8f:3e:ab:ea:79:c1:89:c8:2c:81:f9:70:94:
dc:fa:7c:99:fe:33:5f:9a:7a:5b:cd:8a:94:78:09:77:a0:67:
12:2e:19:30:00:c0:2a:04:46:77:2a:38:c4:65:73:4c:5a:cf:
63:60:c8:e6:d8:5e:cb:b5:c6:4a:68:7f:54:99:3e:2b:d2:41:
8c:e9:e9:23:c1:5a:2b:e2:d8:a5:0f:ca:49:09:12:30:25:ea:
c1:99:00:30:3c:f0:6a:54:7f:20:3d:a9:0b:60:63:e6:a8:86:
a2:5c:1d:cb:1b:3e:75:57:31:4a:17:1a:27:eb:c3:cb:d9:b2:
44:01:56:23:1b:f5:a8:47:1a:b1:be:19:90:7b:14:ab:10:4a:
ba:41:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:36 2025 by rpki-client