Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
File: G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json)
Hash identifier: XwHqCFO9PpjtRhSe+6KNdJi7xcgtxrwpbEY9dzBW2oI=
Subject key identifier: B2:6B:E0:35:5D:2A:AF:AB:6D:F0:29:65:23:FB:9F:31:19:97:7D:7A
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Certificate issuer: /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial: 019A4D74081EB94F50EF93FFBAB2CF349F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
Manifest number: 1087
Signing time: Tue 04 Nov 2025 06:00:41 +0000
Manifest this update: Tue 04 Nov 2025 06:00:41 +0000
Manifest next update: Wed 05 Nov 2025 06:00:41 +0000
Files and hashes: 1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: cXZYB/kr+1mLGnGOsVVSY2FE0oVp/ZHp8YUCiRdbMmM=)
2: hH7p55BYalQ3lSf5_ESdyJOLa1g.roa (hash: CwjN/ntMIQN6pGzj4DyEYFD1soFJfMvM2aBgkytuAgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:08:1e:b9:4f:50:ef:93:ff:ba:b2:cf:34:9f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Validity
Not Before: Nov 4 06:00:41 2025 GMT
Not After : Nov 5 06:00:41 2025 GMT
Subject: CN=b26be0355d2aafab6df0296523fb9f3119977d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:c8:21:ff:cc:fa:fc:9a:d9:88:9d:9c:28:
e4:9f:e0:ad:7a:30:cb:af:cb:17:6f:82:26:36:c8:
d3:c0:e8:07:8c:ed:72:68:74:a3:2a:ff:cf:ba:cc:
3c:32:1c:a4:76:66:7b:5f:ea:1c:1a:9f:20:8d:cf:
49:18:f9:6c:16:9d:8a:9c:86:ab:7c:7f:58:65:90:
52:6b:16:ae:5b:c6:eb:c7:62:0c:b7:87:ed:d8:d2:
17:e0:1c:7f:95:9c:e0:c2:75:7c:79:ce:f3:2f:2f:
26:44:03:e7:65:e1:4d:3c:ad:5b:1e:60:86:6f:41:
1b:c1:c0:66:c7:a3:b2:ac:6b:14:88:1e:4a:e5:b4:
c0:b6:dd:9f:6e:fe:d8:d7:db:da:70:a4:2c:6e:0e:
95:4f:77:de:7c:b1:f1:ca:77:12:38:ef:ec:0a:9f:
0c:99:4c:b6:f9:41:6f:b9:3f:14:b0:0c:1c:84:84:
de:a5:0e:2e:71:6e:14:3e:5b:d9:b2:a7:45:93:26:
62:0b:08:86:5d:c5:cf:cf:ea:d9:3c:88:9f:60:cd:
8c:33:42:25:e5:79:77:d3:5b:93:84:5f:1d:dd:8a:
b6:6d:5e:db:36:db:9f:bb:72:53:3d:38:1e:2f:85:
43:71:00:19:06:9c:99:c0:fa:e0:8a:10:e1:a5:60:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6B:E0:35:5D:2A:AF:AB:6D:F0:29:65:23:FB:9F:31:19:97:7D:7A
X509v3 Authority Key Identifier:
keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2d:55:47:0a:4f:93:d9:d3:4a:d0:4f:c7:1a:0a:92:61:fa:
a2:09:98:2c:a1:ef:47:aa:7f:88:b8:ef:ec:26:55:72:89:84:
d0:21:ed:d5:53:42:ea:19:9f:ca:06:e0:c3:51:3c:13:27:7e:
d1:b9:85:61:3f:8c:80:66:e2:16:a3:01:f9:26:46:ac:55:1f:
ad:81:03:9c:1c:5d:ce:5d:7e:97:88:74:76:07:56:0a:1b:34:
7d:f1:00:46:9d:ce:dd:08:58:77:ab:9c:0d:4a:f7:f0:51:17:
7b:20:f6:38:33:97:a9:d5:7f:c8:49:40:02:43:90:47:e0:64:
03:fb:70:56:fb:65:bb:12:b2:b6:19:ff:7e:ee:82:17:b0:57:
3a:dd:ce:dd:d5:65:6e:2f:ad:5f:6e:bf:cf:04:3d:3e:e6:f1:
9c:04:6f:c6:f8:51:0e:4c:f2:08:ce:a2:16:12:f2:3a:ff:d6:
9f:ba:15:59:63:65:7c:30:f6:6a:98:38:62:12:37:52:5b:e9:
c3:80:c3:13:b0:c0:9f:e4:95:7e:23:d3:bb:50:62:a1:0d:a9:
dd:d6:4f:a6:47:1b:38:12:a2:1f:84:7b:24:6f:62:78:32:02:
40:6b:db:d0:29:59:cc:41:22:e7:54:df:18:11:e3:b9:23:e5:
87:0f:85:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:10 2025 by rpki-client