Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: VV5VguTadWAO0zRptMd5dQc+4CwBICRKfoPF3P/B9Sw=
Subject key identifier: 27:5F:AB:68:F4:5C:D9:05:D3:AE:49:B5:28:4A:E9:1C:E3:61:53:EE
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019A4EF52FB414427C01F67027320E815F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:22 +0000
Manifest this update: Tue 04 Nov 2025 13:01:22 +0000
Manifest next update: Wed 05 Nov 2025 13:01:22 +0000
Files and hashes: 1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: 1Nzq5FFSjchRlX9Vb9xqnrDv2Sndw1i/q+5TXxl8emU=)
3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2f:b4:14:42:7c:01:f6:70:27:32:0e:81:5f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Nov 4 13:01:22 2025 GMT
Not After : Nov 5 13:01:22 2025 GMT
Subject: CN=275fab68f45cd905d3ae49b5284ae91ce36153ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:fd:d4:fd:62:d8:3d:6f:79:21:91:1a:a6:
a4:24:05:6c:85:3c:55:70:74:37:09:22:04:a3:25:
f1:14:ff:84:10:20:7b:82:7d:f1:08:18:3c:30:8b:
ea:e0:52:1d:a0:5c:8c:93:ec:da:0e:17:9f:3b:03:
8c:2b:29:7e:1b:ca:67:3b:e5:60:ed:09:db:b7:ec:
23:97:ad:73:59:62:89:96:4d:4e:ef:f5:b2:65:37:
78:c0:56:2d:a5:62:a6:e7:b3:37:6c:01:7e:d8:1a:
34:c2:e0:b8:5f:aa:71:fa:08:cd:42:df:c0:e5:f1:
2d:5a:dd:56:82:5f:8a:cf:c3:2a:c1:2c:a3:f8:77:
a6:1c:40:d5:4f:f1:73:6b:db:31:06:91:e4:ad:b9:
e8:e9:38:f4:54:b3:2e:c2:2b:4e:9b:52:3d:c1:17:
e8:c2:2f:46:29:87:56:ef:0f:b2:ea:3a:93:49:eb:
42:82:76:75:c0:c0:05:96:b4:1f:33:ce:f7:15:64:
37:b0:50:6f:64:24:cd:ab:2a:da:8d:9d:37:48:47:
4b:01:a1:7e:54:9f:7c:6e:d7:0b:72:39:47:74:74:
8a:cb:73:11:41:af:b3:46:1c:16:7d:3c:31:dd:c2:
73:24:2a:43:1e:8f:e5:01:7a:3f:fc:10:40:63:b9:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5F:AB:68:F4:5C:D9:05:D3:AE:49:B5:28:4A:E9:1C:E3:61:53:EE
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b2:0b:d0:4c:20:ff:84:49:96:ab:29:00:80:9f:ad:09:c2:
36:5d:ae:c9:bb:f4:d7:78:aa:f6:d9:17:7f:94:ba:fc:7e:56:
0a:f6:2c:cf:a7:17:b3:13:96:73:5e:29:c9:e3:80:02:08:a8:
14:7c:31:bb:b2:d6:c1:e0:a9:cb:3b:47:be:1d:5d:27:bd:3d:
95:b1:24:1d:6e:2a:1b:27:e5:91:df:b1:c5:aa:c0:4c:8f:58:
e1:67:34:cb:25:9d:d9:1a:8c:f7:36:27:62:30:d2:04:dc:75:
9d:50:13:12:76:ec:4b:2c:62:a3:15:a2:ff:47:66:37:fd:58:
7a:49:2e:20:fd:b9:7d:e7:3e:c3:55:87:62:89:62:b5:e8:b2:
62:ee:7f:67:87:2f:d6:51:2f:1f:d7:4e:85:05:57:e6:ce:cd:
0a:c9:bd:df:78:3f:02:6b:a7:d1:7f:6b:99:7e:66:84:04:aa:
d8:85:79:7a:29:07:e1:80:40:85:06:ef:7b:c8:a3:86:b0:77:
f9:44:14:3d:7c:1e:d8:30:2b:7c:e5:9d:d1:af:87:01:1e:86:
36:e7:48:21:a0:0d:3d:c4:48:86:d6:53:e3:72:79:26:26:1d:
2a:3c:d9:58:e8:82:6f:3e:7f:6b:0d:54:70:58:fc:ea:7f:43:
f8:8b:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:30 2025 by rpki-client