Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: tFmzetzV3IO9j5WKPpFEBP1BCmCW8N7+WBfyxGLHNYY=
Subject key identifier: 51:48:DD:6B:AE:57:CB:A3:BA:F8:3F:2B:48:31:CD:F8:32:67:76:46
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 019A4F2B28490144F21D0104D57E5E0A7799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 0F34
Signing time: Tue 04 Nov 2025 14:00:19 +0000
Manifest this update: Tue 04 Nov 2025 14:00:19 +0000
Manifest next update: Wed 05 Nov 2025 14:00:19 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: XSPjipgHB3gMBIWqHqNbIFME/YsMmKWc0gf67L3FcaY=)
2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:28:49:01:44:f2:1d:01:04:d5:7e:5e:0a:77:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Nov 4 14:00:19 2025 GMT
Not After : Nov 5 14:00:19 2025 GMT
Subject: CN=5148dd6bae57cba3baf83f2b4831cdf832677646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:d0:93:c5:68:83:d5:e4:b6:6f:51:23:3a:
cf:35:77:59:c1:ed:51:51:ed:73:3c:9f:59:d4:bd:
61:46:ef:4a:47:a5:10:64:de:40:f8:8c:fc:4c:e8:
8f:a6:f8:d0:cb:af:a7:e2:a6:b2:e1:a8:8e:24:f6:
cd:3d:d9:f7:35:62:02:7d:6c:a8:c9:b5:41:af:e8:
44:0b:4e:0e:7d:8a:a8:77:96:38:21:a2:cd:ca:d8:
df:40:a4:e0:be:85:60:ba:38:98:28:7b:23:d8:4e:
03:7d:8a:6b:23:80:be:2b:53:86:96:9a:71:7a:32:
31:bb:c3:13:91:a9:89:df:0b:82:21:f5:41:27:58:
f1:a7:d9:f2:71:4a:16:b2:77:3f:ee:c3:ff:a4:34:
87:36:03:e4:3e:25:a5:64:89:23:9d:83:50:18:d2:
c6:71:a8:15:4a:ca:b3:f1:f3:73:9c:26:b9:24:20:
e0:6e:91:73:bc:f1:fa:88:3c:43:61:0b:7a:fd:41:
dc:5b:22:4b:f9:1f:d7:15:64:2f:b4:8c:32:be:67:
2e:57:3e:1a:80:5c:c5:5b:45:c7:17:0b:ba:c6:da:
94:f8:e1:ba:21:ab:7b:02:2f:86:ed:49:37:f9:a2:
b3:70:07:17:7b:7f:fe:e1:4e:c4:f4:82:52:dd:f1:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:48:DD:6B:AE:57:CB:A3:BA:F8:3F:2B:48:31:CD:F8:32:67:76:46
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a8:f1:e4:b5:b7:cd:55:ab:dd:79:f0:dc:53:9f:d9:29:20:
64:ef:aa:da:ae:70:72:a7:d0:63:0d:a6:f6:14:4a:05:56:d5:
a9:eb:79:9a:b3:e9:91:cf:85:84:58:fc:a0:1a:73:52:7d:02:
a9:9d:b8:23:44:1d:ad:e5:22:57:4a:4d:47:29:9b:ee:ca:fb:
cf:b3:bb:36:2e:8f:45:09:b9:b0:df:aa:16:a4:11:a9:0d:ee:
aa:da:c2:8c:97:a6:45:e3:b0:ca:0d:a7:6d:bc:a6:b7:a4:27:
c3:3d:4b:01:70:47:41:4b:69:32:48:33:80:cb:b2:5d:23:9d:
6e:cc:d8:2a:39:1b:11:59:cd:43:1c:29:99:37:c6:85:33:e2:
5b:8c:09:83:07:de:94:ef:b4:b0:56:7d:11:2d:6d:9d:ef:9e:
da:13:0e:49:6c:17:ab:28:9a:eb:a0:75:04:31:4a:f7:b7:77:
5e:d6:aa:42:67:bd:77:a2:e6:ba:55:bc:8a:26:77:63:ae:21:
67:ba:36:96:f2:6d:39:01:19:34:f7:69:0e:c8:c4:89:df:58:
82:56:4e:75:f9:9e:1b:80:67:54:88:4e:61:cc:22:96:a3:1e:
35:b1:0e:53:0f:8b:c0:de:2e:39:46:e6:11:29:d2:01:93:5b:
53:30:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:49 2025 by rpki-client