Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
File: G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json)
Hash identifier: nUnJnMI+A4QpKgUaMIZUaMN4FE2Zo43+1KWvUjzWz0I=
Subject key identifier: 91:80:FB:C9:7E:4A:9F:F4:FD:92:DC:AA:25:E1:1D:54:8C:34:DD:A7
Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
Certificate issuer: /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Certificate serial: 019A50E2CC2AFCBDAB6DFD8220B11DD33FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
Manifest number: 15EE
Signing time: Tue 04 Nov 2025 22:00:31 +0000
Manifest this update: Tue 04 Nov 2025 22:00:31 +0000
Manifest next update: Wed 05 Nov 2025 22:00:31 +0000
Files and hashes: 1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: eiP+BlUx2avYI7VOgLppb6NQXxSX0l0qcpCZS+ZHQog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:cc:2a:fc:bd:ab:6d:fd:82:20:b1:1d:d3:3f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Validity
Not Before: Nov 4 22:00:31 2025 GMT
Not After : Nov 5 22:00:31 2025 GMT
Subject: CN=9180fbc97e4a9ff4fd92dcaa25e11d548c34dda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:3b:2b:ab:81:68:c9:d7:e0:78:f0:40:30:
30:95:24:ac:cb:88:08:a4:3b:4b:f8:0e:dd:03:c4:
33:b5:39:ba:f4:22:e8:ad:72:ef:c3:54:55:f0:ba:
03:fd:2c:fb:88:3b:5f:73:0a:a3:f7:45:62:36:49:
c8:07:d3:e1:81:6a:e4:a8:c6:5b:ba:cf:f5:51:b7:
e2:6b:fe:67:f6:7e:30:74:18:8e:46:3b:19:50:8b:
8c:6e:84:d4:df:74:77:d4:b6:95:f7:d5:38:7a:ec:
e5:58:1f:eb:9f:72:a8:9c:aa:38:45:a1:fa:e9:0b:
ba:5c:9f:27:b6:2c:c4:0e:2d:77:f4:3f:e4:91:4a:
e4:39:73:0d:54:a8:8f:55:58:68:e8:48:ed:37:43:
ca:f9:f3:bb:6f:9c:de:53:4d:2a:bf:0d:93:dc:7b:
e3:a4:0a:be:89:1e:17:ef:68:5b:80:05:ca:3d:b6:
36:2a:5c:ee:01:95:dc:6c:69:70:0a:32:66:9d:71:
13:8c:a2:3d:0d:23:65:4f:33:a1:da:49:73:61:64:
22:70:40:e5:ef:18:8e:96:34:27:2d:1f:b6:32:f6:
9f:4d:a7:fe:d0:fe:92:d5:d1:93:75:9e:d5:ff:9f:
67:d1:27:9e:ac:4a:19:63:5c:db:e4:5d:49:b0:68:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:80:FB:C9:7E:4A:9F:F4:FD:92:DC:AA:25:E1:1D:54:8C:34:DD:A7
X509v3 Authority Key Identifier:
keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:05:8c:60:32:d2:67:87:4f:36:bc:24:b5:ce:18:03:3f:33:
d3:d5:07:1e:df:4e:3a:7b:e4:9a:46:82:45:99:fa:b8:41:2a:
14:c7:bc:e8:84:aa:93:00:77:47:22:2c:09:19:ab:57:cb:c1:
0c:fd:81:92:a9:49:be:78:6e:83:a8:2e:dd:b9:ea:be:7b:36:
fb:ab:68:2c:24:0d:db:ed:7e:5e:3a:e4:4b:8c:6d:84:e5:fb:
1c:5c:6a:e8:7b:4f:2c:a6:2d:11:c9:98:a5:92:09:dd:ad:b8:
86:f4:38:ab:ac:0c:1d:8b:a1:1f:75:7c:11:6d:d2:82:6c:d8:
32:a2:9d:1c:40:91:9f:5c:68:a2:24:4a:e9:d0:a6:79:42:f0:
e0:56:cb:49:59:fc:e3:4b:2c:b1:4e:b2:13:ca:e9:37:f4:16:
ea:08:05:d8:94:7c:ad:55:24:4f:bf:e3:ee:31:c5:2b:de:68:
ec:53:24:9d:20:56:09:25:a4:0f:2c:34:db:9d:3b:d3:75:4b:
d2:16:87:07:43:1a:16:36:6a:0e:7a:50:ed:f7:6e:f2:ce:16:
dd:26:4c:74:ec:66:36:89:15:e3:2c:2d:32:3e:11:d5:08:03:
8d:99:fc:af:a5:56:70:81:45:71:fb:00:31:c1:d1:52:29:f2:
3f:18:6c:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4swq/L2rbf2CILEd0z/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWJiYmJlYjZlOTIyMzE3NmNhNWExZGYxNDk4OTg2MDE3
ZThlMjgwHhcNMjUxMTA0MjIwMDMxWhcNMjUxMTA1MjIwMDMxWjAzMTEwLwYDVQQD
Eyg5MTgwZmJjOTdlNGE5ZmY0ZmQ5MmRjYWEyNWUxMWQ1NDhjMzRkZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP07K6uBaMnX4HjwQDAwlSSsy4gI
pDtL+A7dA8QztTm69CLorXLvw1RV8LoD/Sz7iDtfcwqj90ViNknIB9PhgWrkqMZb
us/1Ubfia/5n9n4wdBiORjsZUIuMboTU33R31LaV99U4euzlWB/rn3KonKo4RaH6
6Qu6XJ8ntizEDi139D/kkUrkOXMNVKiPVVho6EjtN0PK+fO7b5zeU00qvw2T3Hvj
pAq+iR4X72hbgAXKPbY2KlzuAZXcbGlwCjJmnXETjKI9DSNlTzOh2klzYWQicEDl
7xiOljQnLR+2MvafTaf+0P6S1dGTdZ7V/59n0SeerEoZY1zb5F1JsGiRVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGA+8l+Sp/0/ZLcqiXhHVSMNN2nMB8GA1UdIwQY
MBaAFBvru7626SIxdspaHfFJiYYBfo4oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84MzlmZDgtYzI4Yy00MTEyLTk3OWEt
N2VjNDAyZWNmYjVjLzEvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS84MzlmZDgtYzI4Yy00MTEyLTk3OWEtN2VjNDAyZWNmYjVj
LzEvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAWMYDLS
Z4dPNrwktc4YAz8z09UHHt9OOnvkmkaCRZn6uEEqFMe86ISqkwB3RyIsCRmrV8vB
DP2BkqlJvnhug6gu3bnqvns2+6toLCQN2+1+XjrkS4xthOX7HFxq6HtPLKYtEcmY
pZIJ3a24hvQ4q6wMHYuhH3V8EW3SgmzYMqKdHECRn1xooiRK6dCmeULw4FbLSVn8
40sssU6yE8rpN/QW6ggF2JR8rVUkT7/j7jHFK95o7FMknSBWCSWkDyw0250703VL
0haHB0MaFjZqDnpQ7fdu8s4W3SZMdOxmNokV4ywtMj4R1QgDjZn8r6VWcIFFcfsA
McHRUinyPxhsqA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:40:45 2025 by rpki-client