Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: hck9BeiGXZBhMKFTe7PXH6WCd7UNcwuzy1A8D9kiUFU=
Subject key identifier: 1F:85:8B:59:3B:54:42:8E:E8:26:73:7F:A1:5D:15:8A:1C:16:06:B0
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 019A50E2952C5B3686D994195BEEF18BD85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:00:17 +0000
Manifest this update: Tue 04 Nov 2025 22:00:17 +0000
Manifest next update: Wed 05 Nov 2025 22:00:17 +0000
Files and hashes: 1: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: vtN60/x17gtXSae6bPkeYRbzPdzsdVQrG7LzAep6/JQ=)
2: a6z9s2B5USpArv-yW1XShxJdtpo.roa (hash: hfVnswmh8KT0yGpguvtRDoEqQ95xhx5KsIsgaJn/9yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:95:2c:5b:36:86:d9:94:19:5b:ee:f1:8b:d8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Nov 4 22:00:17 2025 GMT
Not After : Nov 5 22:00:17 2025 GMT
Subject: CN=1f858b593b54428ee826737fa15d158a1c1606b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:99:60:d1:8e:f2:e1:ab:d1:73:e6:c3:95:
41:57:ee:2e:3a:8e:5b:89:ee:3f:74:8f:45:d2:cf:
6a:e2:0f:b9:51:12:50:7b:06:00:81:7d:0d:67:a3:
3f:67:47:99:d6:6b:72:67:1e:1c:dc:2e:4c:bc:eb:
13:a8:ee:5e:3a:a0:09:b8:47:dd:69:4f:7e:fe:eb:
3a:f4:2c:95:90:2d:51:17:72:8b:04:b3:28:ea:2c:
17:54:36:d1:84:0c:62:0c:db:b4:fe:c5:37:06:90:
6e:f0:14:75:8b:73:6d:2b:a6:d3:42:19:31:08:90:
c6:54:cc:73:fa:95:63:22:bc:e2:7b:9d:39:cf:b7:
8f:6f:be:49:bd:68:06:01:60:d2:78:1c:81:4f:16:
fc:2e:ba:29:30:e7:2c:69:79:1d:28:dc:5e:10:ff:
26:a3:17:98:be:6a:85:f3:84:05:08:30:19:25:aa:
11:b4:78:64:b2:ac:ea:9b:48:2f:e1:bc:09:b8:63:
dc:de:67:b7:bc:09:98:6b:d3:ed:e7:71:39:72:84:
c6:45:35:df:bd:67:9e:3b:9a:95:0e:37:f4:b5:36:
a8:06:7f:30:57:17:cd:4d:78:b5:f1:22:d7:8d:3d:
ed:f9:ad:4d:5e:fb:c1:e6:51:de:a6:32:f3:ac:0d:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:85:8B:59:3B:54:42:8E:E8:26:73:7F:A1:5D:15:8A:1C:16:06:B0
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fb:11:0c:0d:f9:c4:fd:1b:93:0d:98:3d:89:35:26:0d:31:
77:6b:77:0f:a2:9c:2f:6c:35:9d:51:db:32:e5:c2:39:d1:20:
79:e4:0d:84:10:8d:9f:5b:93:2b:34:37:06:33:80:7a:ec:1c:
fd:8b:ce:b8:9f:41:03:7e:a9:ab:97:be:52:bc:f1:d6:3b:c4:
9d:9f:00:de:53:8d:bf:f5:83:3c:6d:25:af:d5:71:fe:98:85:
8a:36:e4:48:f9:66:11:3d:6d:9d:0c:1b:a2:87:6d:76:4b:57:
72:dc:11:bd:47:01:9b:33:20:be:24:49:6a:d1:56:f3:d5:b5:
b7:55:1a:fe:27:e0:95:af:8e:22:7f:de:1e:ff:97:d1:a0:d9:
ef:2e:9e:54:6b:57:d5:79:29:c2:d2:56:42:36:09:d2:14:bd:
9b:e9:cd:95:83:04:1f:0c:b5:ae:48:45:88:8d:83:9b:f0:4c:
b0:39:48:d6:40:16:99:ea:5f:29:33:dd:40:49:7c:e1:ac:1b:
1a:d7:fa:e0:e7:36:8f:c2:85:0a:0b:e8:bf:05:9a:6a:dc:35:
9b:f6:68:d3:98:4c:3f:11:6d:1b:fe:d6:1e:6b:11:fc:5b:ff:
86:f1:1a:3d:59:81:35:be:9e:4a:6b:63:14:94:b5:17:a7:ac:
50:d1:85:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:35 2025 by rpki-client