Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: Y3nWs9ID365nHFYC08qPZrdhI7BWFJqcUslBGGPzV5c=
Subject key identifier: DE:5F:1B:34:79:44:17:24:5F:1E:12:FC:EB:34:2B:71:E2:9D:2F:D1
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 019A50E3B9C8E637406BDD7AEC8F8C425297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:01:32 +0000
Manifest this update: Tue 04 Nov 2025 22:01:32 +0000
Manifest next update: Wed 05 Nov 2025 22:01:32 +0000
Files and hashes: 1: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: 1ao6CdVL7CjMy3D6T8Wp+0IsDKkqfhSW5jJqiFrM81Y=)
2: hwl_pJftKoYgWaDLkyi1NUP4Iqo.roa (hash: zD6uA78lx0+tAtyuIqfvTt4SALf3UDD47V0kgwtFI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:b9:c8:e6:37:40:6b:dd:7a:ec:8f:8c:42:52:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Nov 4 22:01:32 2025 GMT
Not After : Nov 5 22:01:32 2025 GMT
Subject: CN=de5f1b34794417245f1e12fceb342b71e29d2fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:ce:72:57:0a:21:34:d2:7e:17:f4:f5:a0:
12:8b:6a:3d:e3:ac:47:15:91:66:38:d5:c7:96:ba:
fe:97:97:b6:8a:f9:af:78:67:2b:bf:3a:d2:ad:d8:
61:6d:15:e4:ba:2b:37:8f:6d:2d:de:c3:0c:32:40:
77:b8:69:7e:c9:42:00:92:aa:83:0a:3f:91:f3:50:
35:5e:b2:cc:16:95:53:9f:7f:9c:ff:4d:3e:37:06:
1b:7a:30:bb:eb:8b:51:a0:08:85:ae:ca:b4:52:c1:
d3:5a:bf:01:5d:92:68:46:65:97:2f:47:c7:ed:fe:
e1:4c:b1:63:65:7c:43:cc:0b:33:de:27:c5:03:b0:
48:db:db:de:b8:66:1b:27:a0:67:16:d0:53:4e:7c:
88:95:81:46:95:f1:cc:02:c1:0e:cc:29:b6:b9:7b:
2e:cc:65:ab:95:36:d3:12:3c:3c:b9:bd:2d:b7:46:
08:b8:30:cf:ae:ce:0e:6e:da:b1:ed:79:61:4c:fd:
1a:db:31:a7:f8:55:1e:14:d6:06:eb:93:37:a2:b8:
91:44:12:02:1a:a3:bd:c3:25:de:7c:7e:53:88:97:
95:73:2b:68:51:aa:3b:42:45:90:05:a7:a9:97:24:
40:d7:0e:b6:ea:57:15:cf:59:76:0e:40:d2:af:14:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5F:1B:34:79:44:17:24:5F:1E:12:FC:EB:34:2B:71:E2:9D:2F:D1
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:06:49:87:d5:87:21:18:a6:3d:6a:c8:f1:ba:80:11:75:2a:
7c:76:01:dc:04:12:16:ea:0d:03:76:c8:3a:d5:6f:c8:04:c5:
b6:07:79:45:7e:2b:85:2a:97:42:5a:b4:2f:58:d9:bd:e1:8d:
66:0b:dd:4b:4f:31:73:59:11:70:1b:ec:bb:4f:07:dd:bb:e2:
f7:da:27:64:c2:f7:22:e8:03:26:12:1f:3b:ee:01:d5:54:7e:
69:02:0c:28:22:cb:55:bc:33:61:5e:a2:28:a2:70:f4:b6:f7:
71:27:2a:bb:3a:95:5a:40:c7:12:a1:57:b9:65:bd:6d:b8:a1:
a8:7e:f5:02:4c:59:9a:2f:b0:e5:42:44:ec:66:14:ce:76:74:
61:d4:dd:b9:1f:d4:1f:9b:97:54:21:15:84:f0:95:2e:b8:60:
f9:ce:de:18:e1:a9:63:d0:e4:b9:cb:76:5a:3b:5d:3f:0e:23:
c0:15:83:04:b4:76:7e:3a:d5:87:83:fd:54:c2:c3:00:31:94:
e1:14:51:e3:e7:76:7c:42:dd:97:6f:04:12:92:8c:d2:14:f2:
e4:f6:5e:0d:39:8b:4c:a0:fa:8b:76:6b:12:bb:32:db:fc:26:
81:96:66:4b:3b:e0:92:08:1f:86:74:cc:2e:01:68:d4:47:ec:
de:93:c0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:09:48 2025 by rpki-client