Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json)
Hash identifier: 2++JNe53jAm7OeEuPaCImbJBFl8qgi7DyGedzNEGWns=
Subject key identifier: E5:29:79:3C:6E:FA:31:A2:F9:E2:32:5C:EE:31:92:FB:47:B8:49:C2
Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Certificate serial: 019A50E38475B378D759AB007A61F04A8148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
Manifest number: 0A75
Signing time: Tue 04 Nov 2025 22:01:18 +0000
Manifest this update: Tue 04 Nov 2025 22:01:18 +0000
Manifest next update: Wed 05 Nov 2025 22:01:18 +0000
Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: UCdMkADqkD3vOTw4RwFWHBzfcFPL4Rm0SYrPNXOJ9o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:84:75:b3:78:d7:59:ab:00:7a:61:f0:4a:81:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Validity
Not Before: Nov 4 22:01:18 2025 GMT
Not After : Nov 5 22:01:18 2025 GMT
Subject: CN=e529793c6efa31a2f9e2325cee3192fb47b849c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:2d:96:d8:c5:59:6e:7c:46:34:5c:99:63:
4e:67:f6:c3:48:bf:50:49:08:0a:d4:5b:67:32:16:
7d:f0:8b:65:e2:2c:e3:b2:87:01:7b:57:16:b6:bf:
a0:58:13:19:45:96:f4:8c:a7:a6:f7:fc:10:16:c8:
fe:5b:82:be:55:d1:10:50:ee:62:c7:23:79:a1:5c:
20:bb:d7:06:af:cb:e5:3f:28:f9:1a:d3:b3:02:81:
44:4a:45:8e:9c:5e:2e:12:88:52:fa:76:74:f6:ab:
eb:9f:fb:32:fd:51:59:70:db:19:31:8d:51:20:32:
35:db:04:d8:6c:a7:40:ec:84:35:23:57:4a:e0:8a:
ec:b0:df:90:8b:fb:f5:fb:0a:8b:6f:a7:7b:50:7d:
6b:a5:71:23:4a:c4:50:24:a8:af:90:6d:10:9b:0f:
cf:e0:82:86:60:c2:c3:ba:64:55:b4:15:6b:c2:45:
dd:de:34:c3:88:2d:f8:24:ee:85:dc:19:ae:1e:ac:
15:bc:86:92:59:cb:1e:3d:40:0a:17:96:ab:26:e8:
41:c3:d5:90:b6:84:53:cc:40:0d:a5:ac:00:f4:8d:
54:80:1b:e0:38:7a:7b:35:6f:c2:84:61:3d:9d:5d:
e9:e0:c4:02:39:35:23:69:b9:69:7a:95:97:0d:9d:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:29:79:3C:6E:FA:31:A2:F9:E2:32:5C:EE:31:92:FB:47:B8:49:C2
X509v3 Authority Key Identifier:
keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:99:57:eb:55:52:98:59:ad:a6:3a:d2:f2:c2:50:4c:ea:5f:
c0:93:fa:05:3d:cf:67:6a:86:5b:e0:47:03:f1:10:0f:ba:3a:
cb:de:5c:4e:4e:ff:21:5b:e2:c2:fa:d2:d7:f9:af:ab:ad:0f:
ad:93:da:f1:15:47:c1:58:4f:1c:5a:86:f2:bd:b4:88:00:66:
89:09:1d:bd:4b:6b:ea:86:fa:a7:c1:f6:88:05:27:58:e1:4e:
df:d0:9d:2a:fa:41:69:d9:14:15:23:35:fc:03:12:9f:b1:24:
9d:a9:70:c1:3d:76:5b:ed:fa:08:be:2e:6e:ca:ab:68:cf:56:
38:d9:97:0b:39:4a:8d:1a:ab:d6:5c:22:af:01:c6:3c:c8:76:
3f:db:8f:64:0b:77:f7:8d:cf:3b:c3:d2:20:7e:53:d7:9a:e1:
03:ce:e9:80:8a:80:28:84:92:90:53:3c:4f:35:55:8e:de:4b:
94:01:28:88:3d:75:ae:6a:ca:ca:fe:61:7b:78:30:2a:c7:83:
9a:03:e4:9d:85:a4:10:93:e9:8c:8a:f1:cf:b5:b6:70:34:1b:
d5:9d:91:13:7f:e1:a0:84:83:e9:6e:26:b4:17:67:a2:0e:5f:
1a:96:e0:39:27:9f:aa:6c:cc:27:2d:d2:5e:0d:c6:55:54:8d:
92:aa:9f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:50:59 2025 by rpki-client