Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: aQE14v/LFvNuuAJgcmQj5/NH8nlJlqjYdJ38K5ztjbQ=
Subject key identifier: DE:58:D4:DA:D3:E9:F7:F6:68:73:98:F0:E0:91:AC:C4:BE:82:C6:74
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 019A4EF59CABAC1AE326FD444FB1AFCB0B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 0E91
Signing time: Tue 04 Nov 2025 13:01:50 +0000
Manifest this update: Tue 04 Nov 2025 13:01:50 +0000
Manifest next update: Wed 05 Nov 2025 13:01:50 +0000
Files and hashes: 1: 1-6tgApGzi84jUfnnO4hR3VcZnhw.roa (hash: HVjUDSjbZacQo7V9+9zKGEkK9aQQLCss0l6qBdFGXKw=)
2: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: pBikg1OCwx5KPmd0cDYqqeE4K76JmdoH8zobht7tynA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:9c:ab:ac:1a:e3:26:fd:44:4f:b1:af:cb:0b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Nov 4 13:01:50 2025 GMT
Not After : Nov 5 13:01:50 2025 GMT
Subject: CN=de58d4dad3e9f7f6687398f0e091acc4be82c674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:a3:d4:f5:8b:61:28:9d:7f:de:a3:90:d1:
06:02:95:36:59:26:5f:2c:7d:e5:bb:91:b2:93:f7:
ca:a2:f4:bc:bc:fc:7f:5f:60:16:a4:7a:b4:05:a1:
7e:e7:1d:55:5d:8c:85:73:26:40:40:5b:57:1f:46:
de:81:7d:0e:85:60:7a:a7:22:77:ea:0a:a4:a9:2c:
2e:1c:a7:c3:a9:2d:d2:07:c7:06:67:de:8e:d5:09:
a9:36:e0:d7:14:42:10:b6:2d:ef:c0:a0:9b:fe:01:
99:3d:b8:a7:c5:86:e2:4e:c0:8c:ad:9e:48:36:6b:
f7:e5:9a:d7:b2:b6:6a:57:f4:36:62:78:77:5e:c3:
a6:80:64:4b:ed:8d:c0:55:74:d6:2c:72:c3:e7:62:
a3:1f:1a:92:b8:fb:d8:f3:19:69:96:18:2a:2a:57:
ab:c9:38:fd:02:6c:b3:20:be:4a:2a:dd:77:5c:db:
4f:da:dd:8b:98:7e:65:f2:6f:be:25:a1:55:9a:c2:
d9:f3:10:7c:11:ba:30:df:01:12:ba:f9:9f:d0:9f:
5c:df:e6:95:fc:d9:37:12:73:61:12:a3:e5:72:94:
6f:f9:2f:5c:fa:ee:5d:cd:a5:67:37:25:16:f7:fd:
99:19:e7:03:c1:7e:ce:b6:49:57:a6:87:85:a7:8d:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:58:D4:DA:D3:E9:F7:F6:68:73:98:F0:E0:91:AC:C4:BE:82:C6:74
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:0c:fc:9b:02:ca:4b:67:b5:6e:e9:32:99:13:e0:de:3c:b6:
81:9b:e2:ba:9c:b1:af:a4:c7:48:a0:74:c6:c6:45:79:68:ec:
d5:be:22:de:a2:94:99:b5:a5:be:45:5c:a5:a5:52:52:0e:fb:
c7:d8:b8:9a:05:e6:17:d5:73:b9:d8:d0:c8:b0:14:2d:20:e7:
3b:9f:fb:f1:0a:49:30:d7:4d:1f:b1:af:9f:44:1d:0c:60:0b:
6a:fc:fe:a9:2a:37:7d:32:f2:07:69:70:71:f6:4a:8a:00:17:
74:d6:04:24:fe:ae:7f:10:82:72:77:90:bf:45:3c:4d:ac:89:
0d:25:f8:23:24:63:43:b2:91:29:a0:fa:76:8a:77:ec:98:c0:
63:f1:2f:c1:d8:98:ea:3f:9f:c3:bc:cf:ac:67:5d:6e:82:af:
66:5f:5a:99:2a:5b:a5:5a:9f:e5:67:0e:53:2c:68:ae:14:a7:
fe:d6:da:dd:dd:b6:dd:97:6b:4b:6e:27:46:ce:7a:31:7b:58:
66:a9:d0:d6:bc:db:50:82:b6:7a:a6:e7:ff:e0:a2:2e:3b:25:
b6:8e:c2:ce:e8:57:b2:fd:aa:2b:90:52:32:a8:8e:d7:c4:de:
ad:38:fb:bf:37:b9:1e:82:07:05:b2:44:9c:b2:cc:2e:8c:b1:
32:50:6d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:35 2025 by rpki-client