Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: xcQ0lZNHJuDC8vh5L1kKWoeS5EXPWLa1oLLp+GwKOA4=
Subject key identifier: D5:E4:5B:14:30:5D:5C:74:3E:EA:51:15:BE:E3:D8:1E:67:6F:FB:8F
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 019A4D3D2327788B7CD9A799A80209A0E662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:43 +0000
Manifest this update: Tue 04 Nov 2025 05:00:43 +0000
Manifest next update: Wed 05 Nov 2025 05:00:43 +0000
Files and hashes: 1: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: BcMZXtu5qVGOhiOIa7LZ7O04SVPq93VZC5naQqAivGM=)
2: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (hash: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=)
3: Y2jaKnMLOg7L7yt3a5FoJKVZD9M.roa (hash: E77+sc63md8h3e/NARC1FrCtInem3ClY6WQ72Z8aT70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:23:27:78:8b:7c:d9:a7:99:a8:02:09:a0:e6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Nov 4 05:00:43 2025 GMT
Not After : Nov 5 05:00:43 2025 GMT
Subject: CN=d5e45b14305d5c743eea5115bee3d81e676ffb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:74:a6:5c:47:b1:4e:30:e7:5d:99:59:4a:
38:00:63:f2:3e:07:38:4e:68:bd:25:1e:71:00:61:
50:8f:e3:d0:17:bd:91:bb:5f:e7:54:b6:80:b2:ed:
5f:1a:be:5f:61:b8:e0:ea:ec:93:dc:d3:9a:36:fd:
f7:5b:54:65:7f:8a:8e:e8:4f:90:ce:5f:fb:da:25:
1d:5e:64:a3:ed:1e:1c:8f:83:90:8f:04:82:0e:44:
ae:ae:62:e6:9b:a1:00:9f:a9:47:f9:c4:c8:d6:19:
c3:85:1c:1a:39:c8:bc:15:7c:eb:d7:47:de:50:74:
db:2a:53:01:f5:0b:ea:e0:4d:88:27:3b:28:d1:9b:
04:e5:99:0c:71:fa:e7:91:fa:b0:0a:be:df:d9:0d:
8c:c2:ca:44:31:c7:9d:ab:b2:b0:4f:ca:ba:05:df:
e1:05:d9:fa:c8:ff:de:c4:db:87:27:da:5c:e0:55:
e9:f3:12:47:23:38:2e:58:ea:63:9b:d4:0e:12:b2:
86:6c:c9:60:48:88:89:28:c5:97:8a:b4:3d:a7:62:
2c:6d:80:47:6c:81:4d:37:86:cb:62:97:27:78:ed:
61:fc:66:a7:ff:52:d9:11:1a:0f:04:86:dc:62:6e:
64:ff:c7:76:31:dd:ec:29:fb:16:c2:b2:fe:cf:a9:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:5B:14:30:5D:5C:74:3E:EA:51:15:BE:E3:D8:1E:67:6F:FB:8F
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:41:99:3f:44:9a:d2:10:01:c9:06:3d:2d:b4:5f:96:07:bb:
ca:ce:38:2b:b2:8c:04:f4:44:8e:35:5d:7f:66:16:3a:2d:90:
54:30:5a:7a:43:93:b2:79:b3:24:2b:c5:41:d5:de:cf:66:1c:
69:bc:a0:09:61:2f:cd:1d:38:ae:a2:75:58:15:e7:2a:ea:d4:
e7:f4:13:e9:39:e7:8e:bc:05:56:7f:57:34:41:ea:c7:ad:07:
0f:16:59:93:af:34:59:4f:5f:68:89:24:f8:0c:2f:d2:e0:d7:
49:90:a4:18:0c:9b:7a:b6:74:81:95:ac:99:cc:8a:12:58:91:
a0:09:ad:04:54:b6:98:f9:ee:3f:15:5c:16:60:70:e1:fb:75:
2f:6e:94:e4:4b:a7:60:c7:9b:d8:cc:59:fa:b4:44:39:62:e2:
41:f4:dc:8d:2f:1e:ac:f5:58:22:51:16:b8:75:20:e0:3f:04:
b2:10:14:ee:91:a9:b9:cd:20:56:96:17:79:cb:d9:8c:db:f3:
23:64:d4:94:94:f0:52:00:f2:90:b9:cb:be:5b:d1:2f:38:28:
27:38:2c:b5:a7:77:ad:d8:e0:03:cc:cf:ca:33:dc:2b:5d:67:
da:58:53:f2:0c:4f:35:0f:43:d4:2b:e2:50:97:a0:7e:9e:b9:
e0:31:91:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:59 2025 by rpki-client