Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: cQ3Xcum5QuMlB95DUfGF8pl6/qg8V1NQvBfuDxbkBy8=
Subject key identifier: 9B:01:96:77:95:D5:E4:6F:94:FC:41:A7:67:54:FA:1E:ED:0E:34:A6
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 0199C7FC8A22467BC676861E733FE18245DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 08C9
Signing time: Thu 09 Oct 2025 08:00:40 +0000
Manifest this update: Thu 09 Oct 2025 08:00:40 +0000
Manifest next update: Fri 10 Oct 2025 08:00:40 +0000
Files and hashes: 1: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: nl6sTMzfBMI3mkmqbqqQWGMKdEzkMAQpr1qtXH8iTRo=)
2: j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa (hash: qcMICYRSrbrQRjk9ZR+9VL6T/3wI6mHE1uL2fvOP8p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 07:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:fc:8a:22:46:7b:c6:76:86:1e:73:3f:e1:82:45:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: Oct 9 08:00:40 2025 GMT
Not After : Oct 10 08:00:40 2025 GMT
Subject: CN=9b01967795d5e46f94fc41a76754fa1eed0e34a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:2f:0e:7f:50:10:ca:5f:39:c1:c5:d0:17:
67:9e:07:d0:1e:fc:46:34:e0:5b:a9:ce:75:e9:e5:
50:3d:83:cf:a7:35:a4:a5:9d:c2:61:e3:b3:c1:81:
c6:9c:e4:d9:88:61:6d:75:1b:39:a3:61:d6:2a:90:
ba:5f:36:be:c6:97:f3:15:15:9c:31:33:77:2f:b2:
60:d5:75:0d:38:a7:0f:d7:bc:0b:bb:f2:ec:37:c8:
68:f5:3f:80:5d:07:c7:61:e7:3b:b9:6c:7c:f6:07:
78:ce:9d:dd:50:3d:eb:cf:ed:24:3c:5f:c5:e9:6f:
c4:3d:77:ed:35:fc:42:92:53:e9:f1:f9:a1:a1:77:
47:4a:ee:3e:c9:ed:e7:ab:59:d8:e9:2b:95:2f:7a:
41:bf:3e:2f:83:7e:69:9c:cb:de:6c:f9:bd:62:6a:
7b:df:9e:91:7d:19:02:48:b8:fa:2e:7f:db:8c:c1:
10:e5:90:85:b6:9a:64:1f:4e:ae:4f:23:b9:54:62:
a1:23:f8:ce:77:ed:dc:a5:67:20:e7:57:6e:eb:19:
3a:a3:01:a5:2a:dc:c1:57:79:b1:b8:7d:a4:46:25:
6b:79:78:02:48:5e:9d:0a:12:18:c5:62:b1:aa:ba:
63:9c:b1:a0:65:cc:10:a1:2d:b3:72:ee:a9:4f:81:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:01:96:77:95:D5:E4:6F:94:FC:41:A7:67:54:FA:1E:ED:0E:34:A6
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4a:36:c1:2a:80:38:3c:88:d8:4c:81:83:69:9a:bc:8b:bc:
ce:42:2f:e6:ba:55:6e:4d:55:6e:cc:af:d7:0d:b7:d1:c2:28:
db:6d:a3:df:ec:67:ee:43:b9:bf:b1:31:1b:96:31:66:69:b1:
f0:cf:f8:67:2a:e4:e3:4d:c5:c0:ba:c7:75:0e:8e:86:02:de:
57:ca:02:86:ad:75:bf:98:eb:ed:b3:d6:29:fe:28:d3:70:8e:
34:5f:c7:91:a4:95:a8:cc:bf:f1:63:81:a7:05:da:0c:02:06:
62:54:f8:23:ba:72:5b:0c:cf:f6:76:44:4e:94:b1:3c:53:4a:
f6:b4:3e:a2:b4:b4:42:3c:e0:3f:5e:83:96:84:c5:8a:56:2f:
b8:32:16:a1:bc:67:7f:8d:99:38:a1:1a:f7:57:ed:62:28:26:
55:2d:a5:7b:7a:e1:35:bf:0e:aa:f4:92:b8:65:92:f9:9b:2f:
19:a0:3d:ea:4d:af:84:72:d1:97:37:c6:00:9e:7e:a1:6b:cb:
d3:64:10:cc:ee:30:83:4e:11:6e:24:d4:b8:f9:e8:02:ef:59:
6f:9b:57:ee:9b:cc:6a:c8:6d:c1:93:19:12:60:d9:81:74:64:
a1:5e:be:06:d1:f1:98:09:3f:b6:9a:c5:ba:7a:cd:05:22:fa:
3f:ab:b0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 11:11:17 2025 by rpki-client