Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
File: g_65rfwvZVEiBb1IETJMnX9qAiI.mft (raw, json)
Hash identifier: d6XZeS5qUuO+WRRiYI2BwxE6k6D93hLy14GmdgXUDgc=
Subject key identifier: 32:97:ED:16:B2:78:8A:C2:F8:08:63:4F:D2:22:A5:B8:55:F6:F3:84
Authority key identifier: 83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
Certificate issuer: /CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Certificate serial: 019A4EF4F2A5E2AB24E579FF5D6E72ED0E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
Manifest number: 0506
Signing time: Tue 04 Nov 2025 13:01:06 +0000
Manifest this update: Tue 04 Nov 2025 13:01:06 +0000
Manifest next update: Wed 05 Nov 2025 13:01:06 +0000
Files and hashes: 1: g_65rfwvZVEiBb1IETJMnX9qAiI.crl (hash: fWZ9IURc7Fqr3QCqslYkT2lvBdJ7TUBcCL8zaC82KnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f2:a5:e2:ab:24:e5:79:ff:5d:6e:72:ed:0e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Validity
Not Before: Nov 4 13:01:06 2025 GMT
Not After : Nov 5 13:01:06 2025 GMT
Subject: CN=3297ed16b2788ac2f808634fd222a5b855f6f384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:1b:17:f3:34:2a:99:d4:87:3c:d2:97:f0:
65:bf:81:9c:9d:22:f9:3e:0a:14:e6:4f:b4:1c:b3:
ca:9b:86:04:36:d7:0d:45:42:c7:60:9c:dd:8b:96:
ee:41:fb:d1:14:15:29:82:2b:86:f2:1c:7e:5e:42:
02:fe:f5:b8:12:97:de:1c:5b:c6:f8:a1:56:d5:e5:
78:fa:e0:08:2a:c0:86:3e:be:53:e8:40:c6:8d:5d:
6a:82:4c:3d:71:89:9d:59:a1:6e:d6:0d:14:c1:ff:
6c:33:ca:92:22:21:c9:0a:f2:5b:3e:8e:5f:9d:87:
6d:36:66:e4:3c:fc:a5:e3:e3:5c:51:62:9f:df:78:
1e:56:4d:e8:bb:da:6c:85:4f:38:90:94:83:cd:0b:
f1:ba:9b:57:a4:d4:f1:21:9e:57:d6:9a:58:c0:54:
98:43:11:cb:e6:85:ce:46:9a:20:00:44:be:5c:af:
64:a2:ff:d6:d9:69:1d:4b:03:35:1e:41:8a:fa:de:
a1:d7:90:8d:f2:22:c6:2c:a3:ff:82:85:62:79:6e:
6e:a6:89:d1:42:0d:8a:b5:39:68:75:4b:44:0c:f4:
58:dc:95:30:06:a3:d1:b5:59:54:67:62:96:0d:fd:
41:fa:f6:86:44:24:98:88:4a:19:31:7d:fd:82:56:
35:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:97:ED:16:B2:78:8A:C2:F8:08:63:4F:D2:22:A5:B8:55:F6:F3:84
X509v3 Authority Key Identifier:
keyid:83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ca:2a:54:b6:80:f8:24:77:3a:93:b0:ef:9d:e9:ab:79:5f:
e6:84:2f:e1:13:c2:f2:dd:26:76:d7:49:23:2d:d4:7f:f6:ce:
70:62:6a:1b:94:d6:ce:92:1b:83:20:7a:49:7f:9f:46:c5:42:
df:81:b7:4a:e8:3e:d6:34:70:fb:48:be:87:96:4d:24:45:35:
15:74:d1:66:52:df:3d:e2:1e:ad:19:61:c4:80:76:cd:37:10:
94:87:37:45:eb:03:87:e3:4d:b3:49:02:a0:05:6c:1f:95:57:
ae:9c:63:4c:0b:21:3b:61:f2:8b:74:55:0b:d3:ea:9a:bf:1e:
70:5c:27:85:93:61:57:22:11:33:25:32:a6:82:5b:e8:bd:e9:
e1:93:f4:ad:c5:f5:c0:b5:74:83:3d:52:17:89:94:5e:cd:7e:
d7:ec:d6:8a:6c:86:23:e1:26:02:72:39:50:0b:d3:b3:22:d9:
54:08:a3:e9:bd:ff:87:a9:c9:dd:ec:6e:36:fa:15:b0:b1:1f:
63:7e:28:43:06:1b:b7:b9:db:f6:24:e3:0b:1c:29:4e:7a:5d:
c5:ef:cb:d3:0a:e3:82:c1:82:98:b8:f2:92:c0:67:b1:9e:d7:
4f:9d:ee:37:51:1f:0b:16:c0:fd:34:a7:2a:46:43:99:69:83:
f0:c5:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:17 2025 by rpki-client