Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
File: G7yEG3eaK7LCio2u4rLRDVp8NNU.mft (raw, json)
Hash identifier: p9gd4RwE9sLEDIC45aZSUU8lDoY0t69cmb5ZzYmiyxI=
Subject key identifier: 79:D8:9B:9E:56:2B:82:00:35:0C:0E:C3:90:C3:48:54:97:A3:82:A8
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Certificate issuer: /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial: 019A725C5242B91CC14770304D8BF8085416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:00:44 +0000
Manifest this update: Tue 11 Nov 2025 10:00:44 +0000
Manifest next update: Wed 12 Nov 2025 10:00:44 +0000
Files and hashes: 1: G7yEG3eaK7LCio2u4rLRDVp8NNU.crl (hash: /NSnVEiPXfygjyR91xAqjB+mfHLe7yjdrLk+vpPYdVo=)
2: VBl-ShtkY5AIJWsXxjtVR-loSP4.roa (hash: UuFGS1s0gPMKN8UjwJZO3gcLtja3SP+rxmHIDo2PFTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:52:42:b9:1c:c1:47:70:30:4d:8b:f8:08:54:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Validity
Not Before: Nov 11 10:00:44 2025 GMT
Not After : Nov 12 10:00:44 2025 GMT
Subject: CN=79d89b9e562b8200350c0ec390c3485497a382a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:8d:b7:ab:48:c0:11:2b:10:cd:ff:5b:6b:
c5:95:b6:76:79:2f:1b:79:71:9c:f0:d4:97:4c:6c:
a1:ae:cc:c7:df:08:16:9a:01:ff:fa:ba:75:a9:fe:
27:0b:2d:e6:56:9e:f2:08:23:34:33:00:b2:b2:33:
37:ae:a0:c7:a5:38:18:f0:2b:4e:f5:f2:44:1d:fc:
5a:d6:9b:27:a4:20:20:79:75:c1:b5:47:5e:4f:14:
18:b3:62:c5:37:d0:a1:fc:9c:f4:e0:d6:d4:86:92:
0c:3c:04:be:97:86:29:05:14:bb:50:78:bc:c0:f8:
f7:6c:16:ab:74:13:98:97:af:a3:7f:d2:d1:3f:59:
ea:9d:5b:fa:33:85:07:34:7a:a6:76:c3:ae:16:53:
2b:20:eb:07:da:3d:89:1e:b0:fb:d1:da:01:1c:3f:
40:4d:7d:9c:18:c2:5c:75:c7:20:6d:72:35:60:67:
2a:51:fb:5a:f3:25:09:c5:ab:d0:97:ad:da:38:70:
10:3f:04:01:5c:92:25:04:98:d5:cb:7a:19:df:90:
de:e3:79:22:6d:93:0e:b6:76:8a:d2:8b:dd:65:2b:
6a:ac:7a:39:14:96:e1:22:c2:12:02:46:4a:7a:c2:
97:89:4a:e5:2f:7b:78:9e:b0:2f:0b:ee:af:e6:5c:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:9B:9E:56:2B:82:00:35:0C:0E:C3:90:C3:48:54:97:A3:82:A8
X509v3 Authority Key Identifier:
keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f8:48:ff:53:ba:e1:1b:cc:f4:f2:7f:fc:da:75:e2:8b:8e:
b5:16:fe:dc:df:7c:f7:e4:e7:c0:59:59:3b:0a:a9:62:84:f1:
8d:51:27:9c:f2:c4:7e:55:e8:d5:0b:58:3e:dc:65:5e:86:4b:
85:b2:c5:f8:b1:6c:1c:37:21:b5:4e:3f:c4:0c:e7:fb:bd:05:
a0:22:b5:a9:d5:38:2d:94:27:95:58:07:8d:72:1f:bf:95:d2:
49:92:ea:30:ed:d3:c7:b5:36:01:f6:1e:62:70:9a:19:3d:9a:
d7:74:10:b3:5a:33:05:d3:60:17:f8:c4:07:5b:9c:05:57:86:
1e:7a:83:60:c4:ca:54:6a:62:7b:c0:5c:3e:92:3d:41:dd:16:
78:76:b9:f0:b1:67:03:ba:cb:8b:96:02:0a:bd:8f:e7:c4:82:
bc:bf:47:b9:97:05:da:4d:3b:bb:f9:5a:70:d0:6e:ad:c4:cd:
e3:7b:95:0f:c8:2b:65:04:ed:8f:39:26:03:cd:40:34:9f:b8:
a5:0a:12:93:11:31:05:52:27:6e:ac:78:81:32:d8:b6:27:64:
95:69:1a:80:bc:05:0b:0f:91:32:a9:3d:9b:d5:51:f5:4f:fa:
fc:ac:7e:86:18:97:ef:0f:8b:da:6e:94:a4:c9:33:4c:2b:b7:
fe:a0:df:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:21:34 2025 by rpki-client