Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: ZgpY7MDJ9A6ThM45Yw2iCuGqVajgMA6Vf/J/kDuKKJ4=
Subject key identifier: B6:FE:57:9F:13:52:C8:A1:04:79:ED:B5:26:63:A9:09:EF:97:A2:D1
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 019A4F98F3FE74C4AF2F46BABFC143D1C52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0A05
Signing time: Tue 04 Nov 2025 16:00:15 +0000
Manifest this update: Tue 04 Nov 2025 16:00:15 +0000
Manifest next update: Wed 05 Nov 2025 16:00:15 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: 4ZPLvZZ+QgohDiC5H7quaiq0yTcZPcP8EdBSJ4ZYCEM=)
2: zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa (hash: haMcqGD9VuWSxs2wPMo5yLhdGqSHCO1AnFtOfllpTYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:f3:fe:74:c4:af:2f:46:ba:bf:c1:43:d1:c5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Nov 4 16:00:15 2025 GMT
Not After : Nov 5 16:00:15 2025 GMT
Subject: CN=b6fe579f1352c8a10479edb52663a909ef97a2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:50:d7:c5:1c:ad:d7:7c:ac:63:45:7f:79:
f6:18:68:fd:d2:24:26:a3:fa:24:60:de:b4:01:4e:
d5:b1:e8:43:c4:07:e1:e1:03:4f:27:c9:25:85:15:
56:2b:98:a0:a2:cf:4f:41:fd:8c:93:93:ca:75:5d:
67:43:ad:7b:52:9d:cd:3f:c4:e7:d7:26:57:1e:a1:
e5:fd:6b:b7:c5:83:f0:ba:8e:34:e5:83:f8:ac:db:
2c:b2:f9:33:2e:fb:62:ad:15:22:d2:9f:5f:df:ec:
a2:10:03:26:f0:0a:3f:24:ee:6f:85:60:f3:fa:70:
78:e4:47:a8:1b:01:a7:e1:3f:fd:50:05:5d:8b:86:
33:84:07:4e:08:a3:07:30:57:38:e6:24:df:de:e5:
fb:e2:f7:d0:60:4c:0f:5f:37:58:e9:a4:00:8d:be:
76:83:6e:a3:d7:94:46:22:0a:21:a8:17:10:f4:ca:
39:8b:bf:31:64:bf:ec:6b:5a:a8:ef:27:12:d1:d9:
25:ad:a7:1f:ee:ea:09:5a:fa:4c:0f:15:ae:c5:71:
32:ad:b1:83:57:a8:fa:d0:3d:6c:5a:3f:e2:38:19:
e7:1f:2e:e9:30:e8:05:ec:00:5d:5e:4a:35:ef:88:
a0:ba:17:3a:b8:61:3d:02:e5:c6:80:e3:76:be:eb:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FE:57:9F:13:52:C8:A1:04:79:ED:B5:26:63:A9:09:EF:97:A2:D1
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b1:8d:b2:92:1a:19:95:81:26:30:54:dc:67:fe:0b:3a:02:
d8:f1:fe:98:b2:9f:37:56:82:9c:e5:4d:c9:09:d8:4f:cd:da:
18:4c:31:1c:49:a7:3a:aa:31:8e:9b:6b:a5:fc:c3:d7:c4:fa:
98:c2:d7:a7:55:76:49:5c:02:49:a3:74:fa:94:7a:20:68:ea:
4b:52:b2:e0:18:d0:0f:80:79:0f:e9:47:ae:17:3d:8f:1d:11:
4d:91:9a:b8:56:1f:4e:9d:fd:a7:8a:67:80:aa:e5:1e:79:6f:
db:ee:21:ed:52:1e:20:ce:df:28:b4:f7:f4:2f:6a:11:52:c6:
0d:dd:8b:bf:ac:0d:ee:aa:b7:9d:c8:d3:81:c0:18:ed:36:24:
b8:40:53:15:e7:29:07:f9:58:0f:7c:9c:47:07:e4:77:73:91:
86:d7:4b:37:c4:87:69:b1:ee:1f:89:f6:5c:43:53:8a:cf:63:
22:d9:ba:45:9b:82:e8:92:13:f7:44:59:3a:0a:85:98:0b:d6:
cd:22:7d:49:6b:ec:85:c6:f5:0d:3d:07:b2:3d:08:07:09:5a:
3e:57:e7:ac:a5:f2:c8:47:8e:75:92:3b:e1:16:43:80:b8:65:
2f:7f:e7:ce:ba:22:67:97:54:93:f4:d9:b3:17:39:7f:c1:5a:
af:d2:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:45 2025 by rpki-client