Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
File: G2pafunSGn3UW7v_9DGzZN6gta4.mft (raw, json)
Hash identifier: mYDnXVBfEjONG063oRdwNDErRO9Ow/ginyI4ugUKCpw=
Subject key identifier: B8:C4:FD:14:53:02:D8:59:EB:2B:2D:50:FA:E3:BF:3D:1C:CD:A0:C3
Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
Certificate issuer: /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Certificate serial: 019A71EE9611104186FCA19C0CC3DA7B20AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
Manifest number: 094B
Signing time: Tue 11 Nov 2025 08:00:52 +0000
Manifest this update: Tue 11 Nov 2025 08:00:52 +0000
Manifest next update: Wed 12 Nov 2025 08:00:52 +0000
Files and hashes: 1: G2pafunSGn3UW7v_9DGzZN6gta4.crl (hash: mt98Qna+01AEUenjXCPSlCB5Ejp0ExCovJ1LWUfpZUM=)
2: sEHEZJdyZNM4H5KyWrunH6ae2rs.roa (hash: 2fdDOMvINX/MZk3ZnK4mtn0JneFrVoF0x/0pmTQHlWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:96:11:10:41:86:fc:a1:9c:0c:c3:da:7b:20:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Validity
Not Before: Nov 11 08:00:52 2025 GMT
Not After : Nov 12 08:00:52 2025 GMT
Subject: CN=b8c4fd145302d859eb2b2d50fae3bf3d1ccda0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:39:45:e7:f7:ce:e2:41:1d:08:75:78:85:
4b:1d:e0:ef:98:bf:13:67:1c:b1:94:d9:ca:18:ab:
94:9f:65:00:e3:12:70:5b:84:bb:51:9a:f4:60:47:
12:97:34:7f:66:f8:f8:42:fd:85:57:ba:ef:1b:96:
4b:d9:91:9a:2b:f0:3f:5c:9e:35:f3:dc:80:84:a1:
c2:7f:fa:84:2f:dc:68:83:d7:06:90:89:89:b7:35:
07:2e:f1:fb:45:54:66:b1:1c:ca:4f:55:3b:e5:0f:
ec:14:ef:6a:cf:34:19:8e:27:6c:f0:63:8e:10:31:
77:f1:96:0a:5c:a9:10:8f:0f:17:99:e8:b7:e5:96:
fa:61:2c:5c:54:3e:02:8a:19:ca:3d:98:a9:88:77:
a6:dd:0c:3f:c2:18:03:10:67:ad:30:30:26:eb:a6:
da:7a:ef:f3:ec:02:a3:ed:c6:f0:35:bb:c8:93:02:
ec:7f:81:d7:72:dd:41:4b:50:bb:e2:f7:ee:12:3a:
a8:41:d7:37:f4:eb:52:5e:4f:d8:4a:2c:97:82:52:
8e:47:d2:e2:ad:84:9b:17:57:34:6e:01:af:c4:f4:
8e:fb:99:41:b3:ca:b1:03:28:a6:56:5d:06:60:10:
bf:1e:94:a0:79:fd:78:f3:2d:24:e0:1c:75:cb:12:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C4:FD:14:53:02:D8:59:EB:2B:2D:50:FA:E3:BF:3D:1C:CD:A0:C3
X509v3 Authority Key Identifier:
keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f7:c3:61:7d:27:1c:dd:a2:69:3a:08:d7:fb:eb:1f:14:d0:
4a:99:17:80:c8:c1:20:49:52:51:cb:c2:bd:13:8d:46:e0:64:
36:2a:72:70:b6:45:52:32:28:54:27:7e:5c:aa:75:c3:c4:a1:
6f:9e:fc:60:f4:78:e9:3d:8f:b3:ce:6a:d1:6c:4a:6d:6e:37:
a0:5a:98:62:7d:b9:5c:c6:c4:97:ce:ed:20:13:3d:13:bd:73:
ed:cf:14:94:c7:10:9e:68:33:79:1f:b6:b1:42:7d:fa:84:22:
bb:d9:13:7e:e3:4d:b9:b5:97:5c:9a:f8:a8:f3:f0:52:63:ef:
85:d4:ba:a5:cd:29:60:c0:17:45:ce:11:d5:bf:d0:bc:8b:19:
bc:fc:54:1c:44:07:29:21:be:f0:db:f3:24:37:6e:de:67:20:
9b:35:d2:63:ac:5e:25:5d:a7:85:d3:40:d7:90:57:04:44:08:
36:3b:d7:ed:93:a4:cc:8e:da:3a:95:80:90:8d:ca:da:68:33:
c7:30:c9:86:98:5e:a8:b3:a2:3e:a9:a3:68:14:5d:f8:60:cd:
9c:f2:01:b2:26:f6:32:9c:a8:45:b5:e4:19:50:71:ea:99:15:
3f:75:26:c3:ce:89:1d:c7:f1:ed:eb:46:ec:b6:13:d0:3d:39:
75:8e:3c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:49:47 2025 by rpki-client