Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
File: G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft (raw, json)
Hash identifier: XpSO68gHZtwVxlA6f51b11X81guOprTOOS9JlZQejF8=
Subject key identifier: E9:38:21:B9:FC:A8:C6:7C:B7:13:AF:96:D9:B1:A6:DB:A0:2B:E9:AF
Authority key identifier: 1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38
Certificate issuer: /CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
Certificate serial: 019A4F99746EF7CE6FDD99595942A3F72CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
Manifest number: 07F3
Signing time: Tue 04 Nov 2025 16:00:48 +0000
Manifest this update: Tue 04 Nov 2025 16:00:48 +0000
Manifest next update: Wed 05 Nov 2025 16:00:48 +0000
Files and hashes: 1: G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl (hash: +D/qB1A8aT37pdldc4+6Ijks66VWpb6izBptZxuHsk8=)
2: m-RL63I77tnbUHaZReiKcRHtR58.roa (hash: VHqfyzr+g1S2KroF/o4QYcY/QOnFZTun+jLqscdqvBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:74:6e:f7:ce:6f:dd:99:59:59:42:a3:f7:2c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
Validity
Not Before: Nov 4 16:00:48 2025 GMT
Not After : Nov 5 16:00:48 2025 GMT
Subject: CN=e93821b9fca8c67cb713af96d9b1a6dba02be9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:8d:c4:df:d1:7e:2a:e8:b0:32:d0:74:f4:
44:db:c8:c7:87:2c:1b:8f:aa:40:8f:e8:fa:03:75:
47:e7:d3:02:e9:23:22:3d:53:e6:84:ab:00:32:f4:
df:17:7a:97:74:d6:26:23:e8:76:2c:45:b7:f4:4f:
d2:14:6b:4e:82:71:c1:85:3b:cd:eb:53:68:cc:18:
5f:f0:b8:30:69:dd:0b:57:dc:65:f5:07:b0:43:6b:
c9:d2:f2:9f:ce:d3:a0:3f:96:16:3e:d2:bc:24:17:
19:10:36:a9:db:1a:aa:b8:50:cb:c3:df:69:04:b1:
eb:5a:2e:37:32:41:b3:b2:55:d3:3a:42:98:50:d2:
e1:01:77:76:dd:59:07:a9:6b:ad:18:24:79:47:af:
0f:05:51:31:c1:ef:4c:9f:f3:54:5c:e6:29:f2:63:
50:53:13:c6:a6:bc:6e:52:ff:98:6a:d7:38:ce:3f:
83:2f:a6:6c:5c:d5:13:ef:10:90:59:1e:96:57:6f:
e3:fa:be:69:62:88:f6:89:90:79:45:96:7f:fe:fc:
43:d6:34:25:3e:dc:bb:30:06:15:b0:22:08:eb:9e:
bb:04:76:e3:a1:e1:2a:8e:43:e6:12:f8:57:2b:ec:
6a:91:d6:3a:c5:5e:3d:76:98:88:9d:20:cd:eb:be:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:38:21:B9:FC:A8:C6:7C:B7:13:AF:96:D9:B1:A6:DB:A0:2B:E9:AF
X509v3 Authority Key Identifier:
keyid:1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:be:0c:71:46:93:61:7b:db:27:9b:39:76:fc:24:4d:fb:be:
79:e3:44:ea:a9:20:6c:37:cd:29:28:cf:ca:09:08:a9:94:c5:
ea:df:94:19:b2:39:b8:23:8d:b1:f5:7b:b1:ce:f2:a0:38:64:
cc:53:c3:a6:d3:75:8d:06:bb:92:7a:ca:a7:06:53:f5:97:53:
6b:30:ea:93:b6:9f:c6:14:54:13:6c:34:9d:10:cf:a6:3f:f9:
11:1d:2b:49:f1:c4:2f:f1:c2:4d:ca:ba:6a:06:af:40:b2:e8:
92:27:fc:13:c8:98:44:f0:7e:24:cc:8b:0b:a8:07:5b:d1:30:
fc:c9:d0:65:fe:fc:2c:3e:f3:a9:6d:d1:f5:9f:57:af:9a:d5:
e2:ac:db:ef:ee:84:a5:d8:85:55:28:2c:42:0a:02:c8:57:10:
ad:fc:0f:9c:c1:b0:ad:fb:69:09:a2:7f:c6:c5:ee:2a:17:8a:
2a:7a:de:e6:ba:fe:5d:c2:b9:85:2f:b4:b6:f1:f8:7c:56:07:
ba:72:50:bd:5e:10:64:a9:a6:8b:74:f6:14:52:5d:df:b8:e5:
01:af:ac:fb:18:3d:1f:f4:69:b4:c9:ac:7b:6a:4d:b8:35:cb:
6f:f4:64:de:ec:27:e4:3c:6e:ca:ee:5c:b4:d8:b7:89:18:72:
86:1d:17:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmXRu985v3ZlZWUKj9yzRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNTQ0MzdjOTJjMWUwOGIwNmUwNzc2MTg3Yzc4ODRkZDUx
YzBlMzgwHhcNMjUxMTA0MTYwMDQ4WhcNMjUxMTA1MTYwMDQ4WjAzMTEwLwYDVQQD
EyhlOTM4MjFiOWZjYThjNjdjYjcxM2FmOTZkOWIxYTZkYmEwMmJlOWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRGNxN/RfirosDLQdPRE28jHhywb
j6pAj+j6A3VH59MC6SMiPVPmhKsAMvTfF3qXdNYmI+h2LEW39E/SFGtOgnHBhTvN
61NozBhf8Lgwad0LV9xl9QewQ2vJ0vKfztOgP5YWPtK8JBcZEDap2xqquFDLw99p
BLHrWi43MkGzslXTOkKYUNLhAXd23VkHqWutGCR5R68PBVExwe9Mn/NUXOYp8mNQ
UxPGprxuUv+Yatc4zj+DL6ZsXNUT7xCQWR6WV2/j+r5pYoj2iZB5RZZ//vxD1jQl
Pty7MAYVsCII6567BHbjoeEqjkPmEvhXK+xqkdY6xV49dpiInSDN676DLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk4Ibn8qMZ8txOvltmxptugK+mvMB8GA1UdIwQY
MBaAFBtUQ3ySweCLBuB3YYfHiE3VHA44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjIt
NTE1ZWUxNTcwMjU5LzEvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjItNTE1ZWUxNTcwMjU5
LzEvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXL4McUaT
YXvbJ5s5dvwkTfu+eeNE6qkgbDfNKSjPygkIqZTF6t+UGbI5uCONsfV7sc7yoDhk
zFPDptN1jQa7knrKpwZT9ZdTazDqk7afxhRUE2w0nRDPpj/5ER0rSfHEL/HCTcq6
agavQLLokif8E8iYRPB+JMyLC6gHW9Ew/MnQZf78LD7zqW3R9Z9Xr5rV4qzb7+6E
pdiFVSgsQgoCyFcQrfwPnMGwrftpCaJ/xsXuKheKKnre5rr+XcK5hS+0tvH4fFYH
unJQvV4QZKmmi3T2FFJd37jlAa+s+xg9H/RptMmse2pNuDXLb/Rk3uwn5Dxuyu5c
tNi3iRhyhh0XyQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:04 2025 by rpki-client