Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File: G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier: pbPeAfjmKC3YIQi1Xwl8T+i1kJgYr7NsvLExnW3i2nE=
Subject key identifier: 3B:B5:AD:87:00:26:D6:87:92:82:6F:C6:CA:35:7D:D9:C4:C2:31:D6
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer: /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial: 019A4FD01E0AEEC8C638D7AA3C1FE68E98A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number: 043D
Signing time: Tue 04 Nov 2025 17:00:30 +0000
Manifest this update: Tue 04 Nov 2025 17:00:30 +0000
Manifest next update: Wed 05 Nov 2025 17:00:30 +0000
Files and hashes: 1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: ohKRD6GhIRLiatP/hPFvRLt/jfFLmXXmA/uAI+r0+pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:1e:0a:ee:c8:c6:38:d7:aa:3c:1f:e6:8e:98:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Validity
Not Before: Nov 4 17:00:30 2025 GMT
Not After : Nov 5 17:00:30 2025 GMT
Subject: CN=3bb5ad870026d68792826fc6ca357dd9c4c231d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:93:ee:74:8c:83:73:28:fb:c8:da:31:9c:cd:
58:a7:99:54:00:fc:5c:f4:e5:6a:50:0c:52:72:21:
7b:36:30:3f:75:f3:db:c6:90:4a:92:7d:df:b8:0c:
08:f1:90:95:10:db:92:91:43:95:af:2f:a7:b3:91:
58:1b:9b:1a:a8:5e:1e:1b:e7:9d:57:2a:3d:6a:be:
79:f8:39:ec:ec:73:ee:57:67:31:94:39:81:70:ed:
57:7e:e2:dc:a6:3f:61:3d:14:38:9c:bb:0c:02:9d:
f2:d4:18:f4:d7:0d:eb:95:f1:6f:72:0f:7a:4d:ca:
bc:5f:53:c2:98:7f:7d:37:b5:dc:07:79:b3:00:9d:
71:ee:b8:39:75:0c:b4:09:06:ca:ee:83:49:41:b2:
b0:15:9d:61:e7:49:7a:5d:68:5a:4c:f9:69:80:8e:
f0:2b:fb:24:b4:78:11:e5:cf:ba:12:41:8d:5d:4b:
53:c2:c8:00:e5:6f:f3:b4:0d:23:b3:c0:1e:9c:ae:
ba:26:fa:0d:58:4b:a9:ce:3c:ed:f9:54:79:62:26:
36:8a:08:12:f8:1f:ce:9e:5a:2f:cd:de:9e:4b:97:
86:0a:06:3f:d4:f9:8c:8e:a3:41:da:3c:84:92:ee:
d4:4b:1a:09:65:17:89:92:c1:29:ed:0b:1b:55:ad:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B5:AD:87:00:26:D6:87:92:82:6F:C6:CA:35:7D:D9:C4:C2:31:D6
X509v3 Authority Key Identifier:
keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2d:4f:4b:f9:3b:db:7a:74:3a:0e:42:bd:37:16:78:02:bb:
49:2b:78:3c:bb:c8:9d:f1:c8:6b:cd:2d:2a:0c:76:45:f4:a9:
b1:9b:39:fc:f3:ad:7d:7e:2d:f0:bc:3c:75:66:21:41:97:a7:
78:e0:f4:1f:3a:4c:ed:2f:f2:df:81:1a:e2:85:3f:c2:58:90:
bb:6b:d0:fa:f5:d2:f1:d2:8a:58:58:3f:fa:f9:54:30:7d:e7:
e6:f5:19:ab:4d:0a:68:7d:3e:fb:b2:bf:7e:53:c2:08:ff:6c:
b5:5a:4c:da:18:ed:7c:07:99:6f:b5:1e:77:1f:0a:90:b4:4d:
84:7c:c1:83:d5:1a:6f:a8:8a:3a:b4:cb:a5:77:dd:77:06:39:
ce:28:68:d8:8f:87:25:62:42:af:63:40:6a:a5:ab:0c:65:af:
97:a2:bd:20:3f:be:51:b2:8a:4c:a4:5d:4d:89:22:4f:a0:80:
ed:96:08:1f:a9:b1:d4:bb:4f:33:9a:b5:35:6c:cf:c9:78:11:
6f:ef:1a:c0:6a:54:69:25:cc:c8:1c:f4:93:71:ae:47:a7:12:
7b:a9:75:65:f2:fc:ba:ac:81:47:91:a0:11:40:1b:ba:e0:49:
85:c0:54:dc:b1:7a:80:3d:f7:8b:63:02:06:5d:30:3f:c4:78:
4f:e9:4b:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0B4K7sjGONeqPB/mjpigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZDI2OTA0N2QwMmZlOGI1YTJhYzllYjhkNWZlYzA3YjE4
N2VkYTEwHhcNMjUxMTA0MTcwMDMwWhcNMjUxMTA1MTcwMDMwWjAzMTEwLwYDVQQD
EygzYmI1YWQ4NzAwMjZkNjg3OTI4MjZmYzZjYTM1N2RkOWM0YzIzMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pPudIyDcyj7yNoxnM1Yp5lUAPxc
9OVqUAxSciF7NjA/dfPbxpBKkn3fuAwI8ZCVENuSkUOVry+ns5FYG5saqF4eG+ed
Vyo9ar55+Dns7HPuV2cxlDmBcO1XfuLcpj9hPRQ4nLsMAp3y1Bj01w3rlfFvcg96
Tcq8X1PCmH99N7XcB3mzAJ1x7rg5dQy0CQbK7oNJQbKwFZ1h50l6XWhaTPlpgI7w
K/sktHgR5c+6EkGNXUtTwsgA5W/ztA0js8AenK66JvoNWEupzjzt+VR5YiY2iggS
+B/Onlovzd6eS5eGCgY/1PmMjqNB2jyEku7USxoJZReJksEp7QsbVa24+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu1rYcAJtaHkoJvxso1fdnEwjHWMB8GA1UdIwQY
MBaAFBvSaQR9Av6LWirJ641f7Aexh+2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84YzZlOTYtZDc3OC00OWRkLTllNWUt
M2NmMmI4MDAyMDMxLzEvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84YzZlOTYtZDc3OC00OWRkLTllNWUtM2NmMmI4MDAyMDMx
LzEvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGC1PS/k7
23p0Og5CvTcWeAK7SSt4PLvInfHIa80tKgx2RfSpsZs5/POtfX4t8Lw8dWYhQZen
eOD0HzpM7S/y34Ea4oU/wliQu2vQ+vXS8dKKWFg/+vlUMH3n5vUZq00KaH0++7K/
flPCCP9stVpM2hjtfAeZb7Uedx8KkLRNhHzBg9Uab6iKOrTLpXfddwY5ziho2I+H
JWJCr2NAaqWrDGWvl6K9ID++UbKKTKRdTYkiT6CA7ZYIH6mx1LtPM5q1NWzPyXgR
b+8awGpUaSXMyBz0k3GuR6cSe6l1ZfL8uqyBR5GgEUAbuuBJhcBU3LF6gD33i2MC
Bl0wP8R4T+lLRA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:04:35 2025 by rpki-client