Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
File: G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json)
Hash identifier: jIRmaalKar28oQ2Ue4P7FtsW2op30MxaOsKNzbIuaME=
Subject key identifier: BD:D2:6C:55:CC:E2:D4:35:F1:4E:7E:4E:4B:18:71:71:72:8F:DA:E3
Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Certificate issuer: /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Certificate serial: 019A4F6242250BB6AEC1DA71BA05BB2CBFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 15:00:30 +0000
Manifest this update: Tue 04 Nov 2025 15:00:30 +0000
Manifest next update: Wed 05 Nov 2025 15:00:30 +0000
Files and hashes: 1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: 6Rrv7rlVFervmcNI5EAwSHw4rn+Gh0rQ6NU1ALtiqxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:42:25:0b:b6:ae:c1:da:71:ba:05:bb:2c:bf:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Validity
Not Before: Nov 4 15:00:30 2025 GMT
Not After : Nov 5 15:00:30 2025 GMT
Subject: CN=bdd26c55cce2d435f14e7e4e4b187171728fdae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:f1:e4:29:e2:73:66:d0:1b:94:1a:13:6e:
3a:9f:6c:75:4d:49:3f:67:84:7d:1c:77:42:56:3e:
be:1f:fb:15:16:d1:01:43:d6:b2:ca:5e:9a:98:98:
64:51:5e:c9:31:c6:95:64:3f:01:b8:89:9b:74:e7:
70:33:8d:4f:8f:29:d7:7a:1c:6e:1f:a9:9a:6d:10:
57:69:42:3a:15:5c:dd:2c:2c:37:62:bc:ec:62:1a:
32:52:8a:1a:1a:fe:d0:19:c3:0e:b9:c6:7e:d9:36:
0e:4f:8c:fa:9d:dc:37:16:5f:a9:0d:05:fc:79:4c:
93:b1:47:45:93:38:43:7c:d6:19:d3:94:3e:58:e1:
9f:8f:03:38:38:27:9c:d0:12:76:90:79:1e:8d:57:
20:1d:2f:b8:ad:c6:51:27:32:7d:da:cb:08:db:35:
f8:85:fc:a8:33:e7:08:db:b5:5c:d1:57:fd:19:7e:
ca:5c:0b:fc:0a:8a:d8:68:1e:ba:a9:74:be:60:98:
3b:c1:62:2c:06:47:b8:2a:02:91:6e:46:85:2a:04:
1e:ef:7d:ae:9e:69:89:5d:96:3a:97:95:e3:cc:98:
9c:92:c2:17:b1:b7:1d:2f:5c:78:a4:11:b8:ba:29:
66:38:8b:6d:9b:64:44:7a:dd:15:23:ac:df:1f:07:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D2:6C:55:CC:E2:D4:35:F1:4E:7E:4E:4B:18:71:71:72:8F:DA:E3
X509v3 Authority Key Identifier:
keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0a:58:a5:18:6e:0a:0d:98:15:3f:9e:ef:72:56:59:d1:e4:
4e:27:52:66:6d:a7:ca:b5:fd:24:f6:0e:38:15:6c:e0:e5:67:
ea:d5:84:f3:b4:b5:67:fe:29:78:ad:da:da:65:93:78:f4:65:
9c:a9:66:fa:cf:4e:42:ee:7d:bc:88:b8:07:95:2a:6f:61:9a:
05:fb:1d:42:e7:61:a0:85:da:8b:17:45:07:a4:23:90:eb:04:
23:74:02:91:87:99:57:db:50:d2:07:15:9f:d5:2b:32:47:e8:
75:7c:1b:29:57:9d:2a:bd:09:ed:68:c1:b3:18:ed:9a:e1:00:
06:d4:9c:fa:04:aa:a6:de:79:d9:2a:a7:62:e0:73:34:36:0a:
de:09:37:f8:4f:db:41:01:13:63:25:4c:83:cc:5b:01:a2:fc:
6e:24:8d:56:f1:a5:c7:fd:83:20:29:14:6c:a9:42:4f:46:12:
49:b6:76:6c:86:5d:9d:88:af:13:c3:e4:c8:4b:a8:5e:f1:12:
a4:d5:71:a9:f8:20:8c:ef:d2:59:0b:9f:01:e5:d4:7d:1f:5d:
68:1b:bd:ce:32:bf:37:2e:2d:15:c3:c2:9b:52:99:aa:06:c8:
62:20:55:07:ff:24:b8:70:3d:d8:2e:2f:6b:9b:c4:ba:6d:b6:
19:83:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:26 2025 by rpki-client