Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
File: Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft (raw, json)
Hash identifier: lMPpnrNSdFyK6W0HjfDfLjR7h+/YRwcMSZ/Hqc54sAQ=
Subject key identifier: 8F:B3:32:9E:AC:8C:77:6B:5D:2B:27:D9:50:E7:BA:2E:AE:20:38:30
Authority key identifier: 1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60
Certificate issuer: /CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
Certificate serial: 019A4FD0292D2226DD386178B166245E0D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 17:00:33 +0000
Manifest this update: Tue 04 Nov 2025 17:00:33 +0000
Manifest next update: Wed 05 Nov 2025 17:00:33 +0000
Files and hashes: 1: Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl (hash: Wc5epEcwbJDU9rl0P6HS09Pl5qJD5NDopjvc94OyzL4=)
2: kWjhD15-ZoWva0lEp7OiEph-8ds.roa (hash: Wxf7YJjEdXTZXm4jCO3HEdDpnmTwoG36OiWMBmcqP2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:29:2d:22:26:dd:38:61:78:b1:66:24:5e:0d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
Validity
Not Before: Nov 4 17:00:33 2025 GMT
Not After : Nov 5 17:00:33 2025 GMT
Subject: CN=8fb3329eac8c776b5d2b27d950e7ba2eae203830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:43:5b:e3:e6:18:0a:91:89:51:a2:cd:c2:
bf:e9:16:8d:5a:e6:56:3e:03:4a:cd:78:ea:cc:90:
6c:7d:e3:b4:f4:8f:82:c3:06:c7:1f:01:65:41:59:
3a:5c:4b:2e:91:48:3e:2a:33:69:12:21:02:ad:11:
d6:0e:66:ae:48:ec:c9:c9:85:d1:35:78:89:9c:0f:
a0:a1:69:9a:8b:04:35:7e:68:12:05:85:bb:68:1b:
51:d0:e4:f5:4c:a6:04:5e:bc:96:fe:92:ec:fa:8f:
59:75:01:a1:f2:76:d3:52:68:2b:0b:73:0e:a0:89:
35:76:1e:ee:fc:b7:54:e2:99:74:36:d2:4a:0e:dd:
6e:7d:7d:ad:f5:5a:0e:ec:a1:e3:31:cd:d5:8a:88:
44:41:b9:a4:3b:09:74:08:c4:cb:1a:6c:70:c5:41:
6f:26:fc:58:3c:ca:20:c6:cc:a3:fe:57:db:25:70:
a7:2a:6a:77:5b:30:fc:2d:b5:cd:13:ec:5e:03:a1:
83:98:40:45:08:37:37:06:af:47:3c:7b:cd:93:75:
b6:41:bd:76:85:7f:18:6c:c9:df:d6:46:68:a8:90:
da:27:84:e4:51:3d:73:49:0b:3a:09:51:8d:76:04:
50:0d:32:36:39:5e:13:45:23:1c:bf:5d:dd:2c:fe:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B3:32:9E:AC:8C:77:6B:5D:2B:27:D9:50:E7:BA:2E:AE:20:38:30
X509v3 Authority Key Identifier:
keyid:1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fd:7a:37:7e:5b:39:82:73:12:5d:8b:85:8c:c3:b6:9c:12:
ce:74:bf:12:bf:71:55:5e:6c:fd:35:13:89:c4:c2:da:29:92:
30:d9:8c:99:0e:af:77:47:84:58:c6:34:32:a6:b5:06:c8:7e:
4b:2d:ee:42:b7:e9:5d:e7:e8:81:09:38:67:04:9f:89:3e:b0:
e2:55:6b:b0:fc:86:48:05:72:dc:13:dd:9c:ed:4a:aa:d7:e1:
cb:e2:ba:86:e6:f3:5f:a4:1d:a9:75:0c:5f:ef:55:ba:ab:ea:
f8:fc:ee:43:dd:65:f4:48:a4:39:89:95:65:68:b1:5c:b9:8e:
80:83:83:84:31:00:74:73:1e:08:25:3a:c2:bc:da:08:c0:53:
9a:26:6c:3a:c4:92:1d:94:30:ef:7b:a4:42:05:09:fd:60:e3:
01:87:f0:2c:52:83:63:01:03:d5:c7:ea:ab:b7:ee:54:15:7d:
49:9f:78:10:21:08:17:73:80:df:c5:fa:22:c5:6a:f3:b7:75:
b9:4d:1c:6d:92:e3:ef:47:f6:bd:39:f9:7f:56:51:cf:c7:b8:
83:cf:9f:bc:a6:66:8d:76:6d:74:3a:32:5e:d5:d6:95:fd:cb:
c7:5b:42:5f:64:b8:b8:97:fa:9d:cb:9e:30:62:7b:b5:c5:4b:
01:63:82:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:29:26 2025 by rpki-client