Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json)
Hash identifier: Q807Sub3kPj2Chc3Ek4SMKkQ6l/dI/fq7gm0wg0dC4k=
Subject key identifier: 3B:3F:4A:68:66:FA:C1:16:FD:44:C0:92:A1:F3:A0:7B:F3:44:FB:D1
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 019A71B8D4BC041E3ED507B13433A8DC05F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: EWj-IKBdi-VQbg6FFbIiaaIj7UA.roa (hash: blruzwC9IPFb7cI8V12vzE/ugdCglrr9S2cLxCpCzJI=)
2: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: s5vpEkQfg5zvtF+i0zJfOHEv1tJZrfTOVErc2/B46/A=)
3: l5yAXyPGwA9Y5lyLs2yb1MceJsY.roa (hash: AJ6lbq1xzcp35bTjVgiXhAuT5kBSyVNhwmMHHhgVeKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d4:bc:04:1e:3e:d5:07:b1:34:33:a8:dc:05:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=3b3f4a6866fac116fd44c092a1f3a07bf344fbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:bf:b6:90:6a:70:da:48:ca:e3:79:6f:1c:
f9:35:ef:0f:b8:80:90:9d:4d:44:f6:70:16:ae:de:
8f:87:19:d5:fe:d4:e9:50:d8:5f:db:fe:b5:70:68:
d1:f6:1e:cf:5f:1a:05:b2:89:a6:20:fe:bf:68:d7:
f9:9c:24:c0:bd:9e:41:41:04:35:27:36:ab:0e:6d:
4a:48:53:04:84:82:2a:1c:e6:17:e2:5a:c7:7b:cd:
93:bc:8b:c9:f5:fe:4e:a5:a6:d2:d3:35:2b:d5:d6:
73:59:97:ea:8d:05:fd:2a:2a:ba:24:03:d5:aa:a8:
15:ae:75:93:95:5e:16:71:b9:b2:f4:6b:aa:9d:95:
fd:2a:90:93:49:d7:9d:7a:4e:a9:b6:4d:9d:1e:cd:
ec:ae:d5:1a:80:c2:59:2b:61:b0:2f:e5:1b:ec:20:
6f:08:9e:b1:b0:b0:83:3d:5a:c1:75:ac:81:fa:16:
cd:8b:9f:70:a2:55:3a:bb:4b:aa:0a:4d:31:c1:5c:
fd:ec:e5:fd:c5:59:06:db:0d:bb:80:d6:72:e6:c4:
0e:49:d5:f2:90:bd:63:82:6e:52:13:63:bd:44:d4:
fe:33:f4:fc:6a:37:b0:a4:69:05:4d:15:e5:63:dd:
e7:13:e2:af:f8:b8:41:74:7f:7f:bb:65:5f:5f:c9:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:4A:68:66:FA:C1:16:FD:44:C0:92:A1:F3:A0:7B:F3:44:FB:D1
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f4:e6:0f:97:90:40:d6:03:c6:28:b9:0e:ad:c0:04:93:d3:
8f:ed:f2:9f:ce:19:05:4f:b3:f2:7f:bf:79:fc:c3:92:1b:cc:
5d:af:c4:7d:67:6e:4b:7e:91:a7:89:72:a9:1a:50:5c:94:dd:
16:c1:bd:e0:80:39:d3:73:2d:e3:4a:f9:b2:6a:42:18:8e:c1:
fe:1d:c7:99:08:4d:f8:86:6d:68:51:9b:8d:c7:72:ac:da:67:
42:56:59:71:93:32:06:57:d2:89:9d:e0:59:4c:0a:b0:ae:d0:
72:62:e1:70:aa:e5:e8:d0:66:5d:ad:24:dc:42:cc:68:df:f9:
ef:20:66:d5:12:20:a0:14:8f:72:f8:83:d6:77:86:16:a1:86:
0e:c0:4a:82:91:1e:f5:f2:da:29:e4:c2:ca:3e:7a:75:2d:1e:
d4:5b:d9:7f:8e:a6:09:97:a6:f2:90:50:66:9f:f4:41:c1:2c:
8c:1b:f7:88:61:9a:1f:1a:1e:d6:1b:71:e5:9a:6b:1c:af:a4:
64:8b:76:27:ac:f3:a4:f4:18:d0:b8:bd:25:a2:4b:62:43:67:
75:f5:55:31:24:39:1e:e1:a7:80:bf:19:5b:0c:3a:bc:6b:06:
ac:41:5f:a2:2f:26:12:a6:8e:a8:35:f8:d5:75:b3:05:6b:c9:
a7:88:75:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:43 2025 by rpki-client