Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
File: G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json)
Hash identifier: P8uyfOvmxXKQPChHhKJvtG8se5bmvA/SMiFJ+llMLn8=
Subject key identifier: BC:BC:BC:7E:36:52:63:0F:34:00:33:06:1D:C4:48:9F:9A:C3:FB:CF
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial: 019A50752AF1109DD60C714AE78A2B48AA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 20:00:47 +0000
Manifest this update: Tue 04 Nov 2025 20:00:47 +0000
Manifest next update: Wed 05 Nov 2025 20:00:47 +0000
Files and hashes: 1: 2iBSszmMQqmiQ3uytPa6Rj5usVw.roa (hash: uKmKRGw9bMp+kTA7Ddvynf7WAl8sh27c2GAtM3UsdJQ=)
2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: mm3+blpKSt10AlDZXnXGZ5a3ziQgyvvdVltw3hcbSdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:2a:f1:10:9d:d6:0c:71:4a:e7:8a:2b:48:aa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
Validity
Not Before: Nov 4 20:00:47 2025 GMT
Not After : Nov 5 20:00:47 2025 GMT
Subject: CN=bcbcbc7e3652630f340033061dc4489f9ac3fbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:23:02:03:50:46:4f:ac:bf:72:b9:b8:ed:
83:4f:08:83:30:78:76:d1:fe:22:d0:eb:6e:02:48:
4a:1b:c8:17:73:30:ad:72:d1:43:24:0b:46:4f:75:
60:47:94:e3:02:90:e2:2d:bd:84:8f:e4:62:bb:c7:
2b:c2:97:52:a6:37:d3:cf:6f:07:51:43:56:96:a2:
7d:f5:88:ec:b7:53:42:fb:df:80:9e:cc:33:3d:f6:
9e:30:d0:c5:48:f2:f7:f4:c9:b8:02:c8:ec:22:a0:
58:48:0e:1a:fb:36:cf:5b:f1:b5:0c:ff:c4:b4:ca:
20:87:e7:6d:46:41:6d:5a:d1:dd:14:84:bd:41:fe:
48:70:d7:c1:55:51:63:db:f8:bd:0a:c4:f1:e4:29:
fb:73:d7:b7:ea:83:3a:6d:14:84:69:6a:ff:30:e6:
eb:06:79:2c:75:e2:90:ca:d9:96:f3:94:6b:d6:26:
6b:e8:e9:2b:3e:af:57:4b:6b:cb:3b:c7:84:1e:8e:
93:6d:b9:f8:ef:41:13:f6:ec:52:35:64:d3:bf:7d:
1b:13:ef:eb:13:3d:97:e5:74:b4:7c:eb:55:e9:a6:
98:5e:3d:f3:dc:c7:42:a8:aa:ba:8f:64:45:0f:ab:
af:20:bc:29:cb:e9:d7:39:0e:de:3e:30:0c:28:f4:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BC:BC:7E:36:52:63:0F:34:00:33:06:1D:C4:48:9F:9A:C3:FB:CF
X509v3 Authority Key Identifier:
keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3e:8d:e9:79:80:14:58:61:49:7f:42:77:66:09:94:cc:3f:
97:50:2f:5b:db:6e:c4:73:e6:38:03:50:07:c1:bd:4f:2d:5c:
32:bf:9a:c7:fa:a2:2b:a5:00:e3:e4:96:88:5c:70:10:2e:72:
4b:25:79:6b:8f:24:7f:e4:c6:eb:5a:72:5d:9e:8f:29:25:c1:
e6:90:fc:ac:9c:c5:07:c9:16:1f:34:91:fe:07:2f:81:16:ce:
b1:3a:e5:52:ee:90:fe:f5:0f:aa:42:53:30:f4:38:91:ed:b1:
2e:e9:64:db:9d:bb:7c:40:86:42:80:2f:76:d9:b3:8d:a3:56:
3c:47:96:3b:19:38:fb:45:0b:08:44:16:f4:0a:cd:7f:b2:a3:
e5:13:ff:28:1b:b1:7b:43:24:6b:fc:aa:fb:7b:23:19:ee:50:
2d:33:15:aa:91:ae:46:ab:19:d1:47:c0:c4:98:e3:0e:52:40:
3b:63:75:a7:b5:dd:95:68:6a:5e:ac:93:b0:7f:28:b2:4e:63:
10:a4:50:7a:d6:3d:25:26:26:2f:8f:94:59:bb:13:24:55:fe:
ad:c3:54:91:58:59:3d:09:4f:4a:01:cf:b2:de:c7:2b:b6:03:
f5:ba:e5:b5:c0:bf:7b:7d:a7:da:18:ff:ae:e6:b6:67:8a:13:
ee:87:9b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdSrxEJ3WDHFK54orSKp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjgyODExM2JiYTM0MjNkMTU3MzE5NjRmZTU3YjVmMjUy
YmZkZTYwHhcNMjUxMTA0MjAwMDQ3WhcNMjUxMTA1MjAwMDQ3WjAzMTEwLwYDVQQD
EyhiY2JjYmM3ZTM2NTI2MzBmMzQwMDMzMDYxZGM0NDg5ZjlhYzNmYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3sjAgNQRk+sv3K5uO2DTwiDMHh2
0f4i0OtuAkhKG8gXczCtctFDJAtGT3VgR5TjApDiLb2Ej+Riu8crwpdSpjfTz28H
UUNWlqJ99Yjst1NC+9+AnswzPfaeMNDFSPL39Mm4AsjsIqBYSA4a+zbPW/G1DP/E
tMogh+dtRkFtWtHdFIS9Qf5IcNfBVVFj2/i9CsTx5Cn7c9e36oM6bRSEaWr/MObr
BnksdeKQytmW85Rr1iZr6OkrPq9XS2vLO8eEHo6Tbbn470ET9uxSNWTTv30bE+/r
Ez2X5XS0fOtV6aaYXj3z3MdCqKq6j2RFD6uvILwpy+nXOQ7ePjAMKPQpvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLy8vH42UmMPNAAzBh3ESJ+aw/vPMB8GA1UdIwQY
MBaAFBtoKBE7ujQj0Vcxlk/le18lK/3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEt
MDNiYzYzY2EyNWEzLzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEtMDNiYzYzY2EyNWEz
LzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcT6N6XmA
FFhhSX9Cd2YJlMw/l1AvW9tuxHPmOANQB8G9Ty1cMr+ax/qiK6UA4+SWiFxwEC5y
SyV5a48kf+TG61pyXZ6PKSXB5pD8rJzFB8kWHzSR/gcvgRbOsTrlUu6Q/vUPqkJT
MPQ4ke2xLulk2527fECGQoAvdtmzjaNWPEeWOxk4+0ULCEQW9ArNf7Kj5RP/KBux
e0Mka/yq+3sjGe5QLTMVqpGuRqsZ0UfAxJjjDlJAO2N1p7XdlWhqXqyTsH8osk5j
EKRQetY9JSYmL4+UWbsTJFX+rcNUkVhZPQlPSgHPst7HK7YD9brltcC/e32n2hj/
rua2Z4oT7oebXg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:21 2025 by rpki-client