Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File: G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier: fxqvnRtfYUVcrZ1di571mieNMBmGkYNJwiLc8IqAc/8=
Subject key identifier: 7E:42:45:13:87:69:2F:3B:5C:46:47:03:24:C4:C4:C1:DA:68:96:B7
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer: /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial: 019A4E4F820E8B6A2E1D2C7E9101A4D2C765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number: 0654
Signing time: Tue 04 Nov 2025 10:00:24 +0000
Manifest this update: Tue 04 Nov 2025 10:00:24 +0000
Manifest next update: Wed 05 Nov 2025 10:00:24 +0000
Files and hashes: 1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: p+TvAGPt6gMzWRvSm+PK5ycm4CaWuOIRFmuM3lcUlYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:82:0e:8b:6a:2e:1d:2c:7e:91:01:a4:d2:c7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Validity
Not Before: Nov 4 10:00:24 2025 GMT
Not After : Nov 5 10:00:24 2025 GMT
Subject: CN=7e42451387692f3b5c46470324c4c4c1da6896b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:dc:f3:98:f6:bd:f9:ce:2d:7a:e1:39:31:
59:20:a4:80:33:0f:14:bd:69:e8:22:ba:60:de:96:
d3:ce:0a:58:81:e9:7e:98:76:70:25:f4:15:1c:bd:
eb:08:df:c8:9a:8f:1b:45:19:30:59:72:05:e6:60:
c7:58:c4:c1:2a:42:8c:b8:d8:48:65:19:8d:ad:f2:
da:d2:b1:05:e1:df:a1:ff:74:ef:c0:88:31:13:49:
c9:4c:00:41:c2:eb:bb:24:7f:2b:f8:d3:b3:28:17:
be:20:64:34:ab:8b:3d:c5:d9:cb:71:d6:28:64:1f:
4e:c3:b5:b6:60:c2:b6:0f:54:3a:63:6c:27:43:05:
42:ae:d3:ef:b3:77:e7:28:93:9e:3d:d3:d6:74:e7:
da:83:f5:ba:94:ab:64:50:b8:e1:b6:06:9b:a0:20:
3c:fc:ed:e3:98:5d:59:78:d1:2f:92:7d:73:17:7a:
c2:de:88:be:cf:82:87:53:9f:6d:6d:95:bb:b2:04:
8b:f4:9a:54:01:59:61:50:60:7c:c8:ee:54:7c:e8:
b1:6b:85:0c:c3:e2:cf:0a:52:20:64:91:1a:f8:95:
57:49:14:a3:63:9e:ae:3f:4a:a6:9c:a0:30:a6:a0:
6f:e4:3f:d9:0d:0e:bd:0b:e4:54:69:59:6f:94:37:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:45:13:87:69:2F:3B:5C:46:47:03:24:C4:C4:C1:DA:68:96:B7
X509v3 Authority Key Identifier:
keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:eb:b5:52:f3:d5:9a:f1:b2:ee:03:33:81:68:01:a8:49:be:
ee:ef:aa:4a:59:4a:56:99:3b:0a:e9:a7:8b:2b:bd:ed:8b:ad:
9b:b0:84:67:48:54:71:fb:18:4b:39:d6:5b:37:f8:17:ce:c4:
3b:6a:be:e1:09:1c:85:4a:8b:23:01:d1:73:7e:07:51:13:24:
5c:7a:00:d0:e1:0f:f9:31:6b:01:ff:1d:38:ed:fb:db:76:55:
a8:20:a4:ad:63:9e:c0:2f:f7:ca:9c:9a:72:a5:ac:27:e8:b3:
62:d3:b1:27:31:43:bd:46:9a:8b:03:56:0f:d3:5b:b7:ac:68:
30:d4:b1:ac:d5:97:df:3d:19:23:6d:45:58:dd:32:0d:5e:8b:
49:85:ba:0b:b3:fc:11:f9:24:25:35:90:ce:1e:e0:60:15:24:
80:fe:6f:f3:8f:63:e6:74:77:15:91:1a:9b:15:2f:32:4a:2c:
e9:30:2f:46:02:63:dd:ec:dd:bd:a7:65:27:9e:b2:18:e6:7f:
5c:71:1c:e8:03:c7:5c:f6:87:43:61:34:14:a7:29:b6:54:0d:
e5:68:a2:e7:ae:0a:f8:f3:00:16:c3:e9:c3:99:c5:62:fd:1f:
72:2c:2a:f3:e3:33:6f:f2:db:f5:f6:81:92:38:9c:3a:90:c1:
2d:38:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:09 2025 by rpki-client