Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
File: g-k154ofll0QiRUhXQ8Et2tzPlg.mft (raw, json)
Hash identifier: aupF8OvmMui51UqoThEUCXh2lsN7GxPdgDGtUSVhTyc=
Subject key identifier: 42:FC:F2:F5:02:B3:20:98:1E:9E:54:B0:E2:6A:1B:6F:37:8B:53:33
Authority key identifier: 83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58
Certificate issuer: /CN=83e935e78a1f965d108915215d0f04b76b733e58
Certificate serial: 019A4EF563550A2F994D1BC6414596437F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:35 +0000
Manifest this update: Tue 04 Nov 2025 13:01:35 +0000
Manifest next update: Wed 05 Nov 2025 13:01:35 +0000
Files and hashes: 1: g-k154ofll0QiRUhXQ8Et2tzPlg.crl (hash: syZ9D7yYWM6gjvld2mCGYs9NVpp8VyNNL95zCd66BnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:63:55:0a:2f:99:4d:1b:c6:41:45:96:43:7f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e935e78a1f965d108915215d0f04b76b733e58
Validity
Not Before: Nov 4 13:01:35 2025 GMT
Not After : Nov 5 13:01:35 2025 GMT
Subject: CN=42fcf2f502b320981e9e54b0e26a1b6f378b5333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:a4:20:65:00:13:71:87:a1:2b:de:f1:0e:
85:ad:05:81:de:67:14:17:40:2f:8b:85:66:55:a2:
2e:78:47:a4:68:37:dc:38:48:c7:8f:f1:ce:25:34:
cf:e7:01:be:0f:c3:24:33:74:8f:88:67:d0:5f:a7:
7f:50:7d:73:64:8c:e4:ca:89:4c:43:58:01:1e:72:
5a:22:cf:33:6a:28:27:22:b1:c7:11:54:20:56:25:
e0:12:df:6d:01:44:a3:8d:cb:da:88:c1:26:29:40:
5d:c0:f1:7b:0d:5a:d0:cc:0e:b5:ae:8d:3a:d4:12:
fd:f1:eb:7f:bb:e0:e7:08:2a:2d:f1:a6:64:2b:0f:
85:7b:55:f0:4f:fe:cf:8f:78:fe:12:27:a9:bb:ba:
1b:bf:43:9c:fa:1d:36:7e:db:6d:11:60:bf:60:fe:
dd:00:13:97:99:fc:eb:2b:0f:bb:44:94:cf:f3:ad:
02:43:6d:e9:14:b1:38:e4:af:63:b3:05:cc:f0:2e:
ed:37:cc:ea:6f:06:2d:a1:4d:c3:b2:56:3a:e3:fe:
a0:87:f8:9d:f2:08:76:92:15:ae:7f:eb:7e:8f:ef:
4d:94:39:5f:91:c0:79:2f:97:e9:be:84:3a:b7:42:
86:da:54:da:61:7f:65:d2:33:17:cb:ef:2a:14:e5:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FC:F2:F5:02:B3:20:98:1E:9E:54:B0:E2:6A:1B:6F:37:8B:53:33
X509v3 Authority Key Identifier:
keyid:83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6c:80:e0:11:6d:18:f7:2f:ff:a3:51:bc:4b:da:f7:9f:8b:
96:05:5d:05:6f:a1:d8:6e:69:29:6c:73:3b:2d:39:59:bf:4d:
4a:34:fd:ef:7b:5c:6e:20:9c:fd:12:6f:85:c7:52:94:c0:dc:
d0:6f:33:18:6c:af:bf:c5:01:a3:8e:0b:2a:52:23:12:1a:5e:
d6:9e:4f:4f:62:a0:62:a1:0b:9b:01:6f:d1:3d:fa:06:d6:ac:
12:e3:0f:40:f7:df:05:b3:fa:c2:e1:50:8d:2f:20:2e:e1:e4:
d3:0a:a1:8b:d5:03:82:51:99:74:38:36:45:f1:cb:71:14:14:
64:a0:42:18:ac:0f:72:c9:b7:fb:2f:8e:13:cc:31:a3:27:f8:
29:c4:5f:d5:de:63:5f:30:93:a7:b5:00:09:2a:70:97:60:94:
8e:3e:7e:29:f7:47:c2:46:42:68:fd:a1:bf:bd:69:58:42:5c:
3a:f3:e5:2f:4b:29:f0:da:7e:f5:9e:76:2d:bc:b6:2e:71:39:
0a:1b:aa:2e:e0:94:d0:b4:02:e6:85:8d:36:ea:36:a3:33:d4:
a8:b3:9f:67:11:58:1f:35:bb:42:75:37:56:5f:20:01:1b:b0:
ab:70:05:9a:45:32:4e:9f:c2:1f:50:77:3d:31:9f:a9:47:98:
70:fb:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:07 2025 by rpki-client