Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
File: G6b10yR0vob2MFiURTdik0TU8Bo.mft (raw, json)
Hash identifier: LF1avv3hoDpBXFfjlFWBCzztokuBS3paP+vFN7pf4rs=
Subject key identifier: 62:C4:AB:9F:58:2F:EC:DE:2B:BF:8A:1D:CF:BF:08:36:DB:A7:22:81
Authority key identifier: 1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
Certificate issuer: /CN=1ba6f5d32474be86f63058944537629344d4f01a
Certificate serial: 019A4E4F8E431CC87B9D76B59B1CED86170A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
Manifest number: 04F0
Signing time: Tue 04 Nov 2025 10:00:27 +0000
Manifest this update: Tue 04 Nov 2025 10:00:27 +0000
Manifest next update: Wed 05 Nov 2025 10:00:27 +0000
Files and hashes: 1: G6b10yR0vob2MFiURTdik0TU8Bo.crl (hash: YcDgtCl4eUyqre0+hXuYjZ/cGgQpDzNSnKd4MMhy1wI=)
2: mToK7O7t52pvY5jAx8Z0JoUDFIM.roa (hash: Xs8G0qX2ZJs522/1L68wTzEgBOm79/mlDz8OPsPAHlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:8e:43:1c:c8:7b:9d:76:b5:9b:1c:ed:86:17:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba6f5d32474be86f63058944537629344d4f01a
Validity
Not Before: Nov 4 10:00:27 2025 GMT
Not After : Nov 5 10:00:27 2025 GMT
Subject: CN=62c4ab9f582fecde2bbf8a1dcfbf0836dba72281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:27:6a:a1:77:f1:43:9a:bd:27:ea:96:70:
eb:14:59:f5:b8:13:ef:b4:39:97:b3:00:55:e2:39:
f6:4a:5a:7e:3c:09:5b:8a:02:64:f3:31:16:e1:27:
dc:68:57:47:46:6d:91:b5:fc:61:45:1a:51:a6:70:
6b:3c:2f:54:0b:3d:11:b2:ba:4c:9a:a5:26:5d:cd:
88:7c:5a:e1:b9:5f:04:cd:e4:ed:c5:7a:82:fb:2a:
67:9f:ec:8f:04:45:f0:f6:8c:ee:71:f0:8c:d1:01:
13:00:0f:2e:e5:d6:83:af:e2:5d:fe:55:13:e2:f9:
2a:55:ca:d7:45:d6:28:cc:55:a8:79:b1:09:c8:64:
20:10:b6:f9:bb:b1:ac:b3:6f:35:05:7c:24:95:d4:
45:dd:b1:6d:e7:0b:d3:2e:44:f8:b5:87:1d:bb:81:
28:4b:ca:d2:0e:f7:ae:f2:c4:d4:32:a9:a0:5e:db:
bd:eb:94:30:26:e1:a2:2b:be:9f:91:1c:d6:c4:7a:
37:a6:76:f4:2a:3f:63:2f:83:d0:51:a6:8d:8d:d8:
8c:30:f8:fa:32:49:9d:59:4e:6f:4c:a3:5c:3a:07:
74:01:6e:c6:73:43:29:c5:44:1e:26:51:c2:34:31:
9a:4d:85:a8:5c:ce:89:4d:54:b5:74:8b:7f:1d:61:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C4:AB:9F:58:2F:EC:DE:2B:BF:8A:1D:CF:BF:08:36:DB:A7:22:81
X509v3 Authority Key Identifier:
keyid:1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:83:ad:f6:4a:2c:26:ef:d6:ae:7b:e2:ea:2d:82:a0:b0:ff:
8d:b2:7b:d9:10:32:37:22:dd:c1:10:1c:cd:04:2a:7f:25:64:
70:4f:e9:46:86:43:77:d7:a2:1c:9b:3b:63:8e:4f:f0:c3:85:
7d:03:16:54:e4:a6:e1:7c:09:a3:cc:b4:4a:22:9d:96:a2:db:
30:67:be:7c:fb:ac:0d:c8:c4:67:d5:bd:62:b5:cd:a3:55:b9:
67:c6:e1:11:8f:3d:68:ed:28:e2:3c:b0:84:f7:f8:ea:e5:fe:
da:7f:6b:3b:4b:61:9f:02:48:41:f6:af:59:e7:f6:60:7b:4f:
19:20:d9:6a:5b:dd:39:21:e9:4a:63:b5:7b:33:18:70:60:27:
9f:4c:99:3d:70:0d:be:18:e1:2e:74:78:9d:ee:57:b1:55:6b:
0f:52:49:e4:30:7d:95:83:30:13:95:65:a2:89:04:58:c5:d2:
1f:f1:d5:d6:2f:e0:a3:2f:4b:ab:39:9e:94:8f:a9:26:4e:de:
c6:8c:5f:b3:ec:21:80:50:82:31:f8:05:2e:99:71:a8:5f:a7:
e3:3a:82:6a:96:0c:c9:b5:a0:cd:cc:2d:ce:dd:a2:c8:73:1b:
dc:d9:d7:55:f9:47:e7:a0:e4:d2:83:39:1e:8a:fd:7d:74:65:
5e:6f:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:34 2025 by rpki-client