Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier: SV44nxz8zrTbE5zJvNIArLOtq6pcs8V1bn5ohuCKfpQ=
Subject key identifier: 46:BE:F3:95:F2:65:D6:FF:F6:F7:68:01:02:F5:74:13:E1:F2:4A:8B
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 019A4EF4B921A98D81A7B36420F73F5A4ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:52 +0000
Manifest this update: Tue 04 Nov 2025 13:00:52 +0000
Manifest next update: Wed 05 Nov 2025 13:00:52 +0000
Files and hashes: 1: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: hOx2/fpWJJWUJn3H3bAU4zXB985gKqXaMxujYhfAYRI=)
2: YJHXZeNag-cu70_fJht-ZOpxnGk.roa (hash: 2m1tn0x6o3pfXUEVzS2q6AJtU601h1r6TeqXWLsErHU=)
3: lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa (hash: jZwRIN2ogKpi/MzaP8NmIeUVW4yffrhHB5Fsd5XJEE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b9:21:a9:8d:81:a7:b3:64:20:f7:3f:5a:4e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Nov 4 13:00:52 2025 GMT
Not After : Nov 5 13:00:52 2025 GMT
Subject: CN=46bef395f265d6fff6f7680102f57413e1f24a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:1f:1f:4d:3f:ec:0a:99:58:79:f8:7b:61:
59:47:8d:d3:4a:c8:0f:bd:d1:28:c2:50:ef:af:0a:
0d:e6:74:48:a8:44:c5:4b:67:aa:fc:55:bf:fd:74:
84:07:a8:c4:7a:54:a6:e4:e1:9d:08:1e:45:1d:09:
d3:ac:bb:19:a9:33:e8:7d:8b:bd:60:29:bd:35:6a:
9d:70:78:05:6c:15:92:31:ed:be:43:9f:4e:57:24:
d9:43:75:a2:27:f0:04:ce:ed:89:d9:29:c8:c0:6c:
cb:a9:6e:85:02:eb:cb:6a:b4:2f:54:9e:a2:c2:57:
04:3a:e4:a8:ee:1c:1e:3d:8b:93:32:76:15:0d:65:
94:a8:ce:01:0d:fe:8b:b3:f7:07:1a:8f:78:f0:40:
6d:ed:69:d2:5e:53:ba:b5:b4:fc:69:42:a3:fc:a7:
05:87:8e:f6:91:27:09:56:8c:48:00:bb:67:9a:b1:
7b:0a:2f:1c:d6:09:cf:9d:70:05:5f:59:9d:70:5f:
b8:c3:c4:7e:63:87:1a:fc:73:cd:6c:5c:e5:0f:47:
29:37:85:34:69:44:73:5c:56:23:05:2a:41:76:57:
46:e4:cb:05:ed:78:3c:42:d8:51:c0:ca:06:8c:35:
41:19:88:c4:2a:b4:f6:5a:3e:71:49:72:74:6e:c3:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BE:F3:95:F2:65:D6:FF:F6:F7:68:01:02:F5:74:13:E1:F2:4A:8B
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:97:72:4f:ab:4b:7f:a4:aa:66:9f:6a:d9:62:6c:11:0b:4d:
88:c8:28:7a:31:11:79:2d:f0:17:3f:c2:93:4d:e7:c5:95:75:
26:e6:36:dc:e7:a6:7a:40:8b:45:a0:a3:ef:40:19:50:d2:5a:
ca:a9:54:3e:3e:8a:28:a3:f6:81:a1:0d:d8:5a:ee:63:99:a0:
23:bb:bf:52:85:95:e3:1a:b7:fa:c5:f4:94:c8:2a:16:a6:63:
50:c2:2e:7b:4b:03:03:73:16:e4:be:73:98:34:4b:61:70:dd:
68:8b:ef:59:5b:50:17:4d:e5:3a:19:2a:bb:af:a8:52:7a:e5:
8c:7e:79:cc:0a:2c:ae:6d:70:66:8d:17:64:8c:13:3b:24:8f:
02:5d:58:35:58:ca:3f:d1:48:0c:30:c1:5f:60:77:41:93:51:
b9:29:a8:9f:7b:6b:40:35:af:3a:eb:55:e4:a4:ae:01:21:0b:
83:a8:c3:02:8a:5e:ae:5b:31:ca:b3:37:dd:2d:c8:b5:44:41:
b2:ae:86:7b:07:c1:51:37:22:f9:24:c1:ee:43:46:03:b9:2d:
0a:52:f0:4a:66:9e:c8:22:ab:32:80:fc:5c:67:b8:0d:3d:2e:
b4:82:47:b3:23:73:0c:f5:ab:df:47:84:3f:72:4b:70:14:2c:
7e:1a:11:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:49 2025 by rpki-client