Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
File: G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json)
Hash identifier: VBoQ3LzUoSratgzXtvndBu8vhCosZeWHbDjigsMpaBE=
Subject key identifier: E3:48:E7:1E:A1:F1:1A:7A:BE:28:85:B0:AF:4B:21:30:55:6B:9A:45
Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Certificate issuer: /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Certificate serial: 019A722613765A12DC926EC202F86AB88977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:29 +0000
Manifest this update: Tue 11 Nov 2025 09:01:29 +0000
Manifest next update: Wed 12 Nov 2025 09:01:29 +0000
Files and hashes: 1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: X0kneprKg1Zp8V561xA9cvgSKE7E6bcmuH8Wd0fLmks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:13:76:5a:12:dc:92:6e:c2:02:f8:6a:b8:89:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Validity
Not Before: Nov 11 09:01:29 2025 GMT
Not After : Nov 12 09:01:29 2025 GMT
Subject: CN=e348e71ea1f11a7abe2885b0af4b2130556b9a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:2e:77:a3:69:d3:ca:af:bf:67:ce:7e:68:
89:85:7f:0b:e3:b9:72:70:de:b6:b4:c8:12:81:5f:
5a:71:03:0e:11:07:d1:af:60:d9:65:1b:61:24:40:
db:b2:27:bd:d5:4c:3b:f0:f5:86:f1:3a:b8:5a:e4:
1d:10:c8:2d:49:b3:90:60:d3:00:df:99:68:92:3a:
f4:b8:33:4d:8f:f0:60:7b:89:fb:33:68:ef:79:de:
45:2e:98:04:5b:3a:6e:06:26:44:09:af:cf:ec:eb:
18:f4:5e:a9:14:89:8b:eb:03:f8:85:e7:a8:d5:b0:
8b:8a:7a:66:ee:23:22:7a:1c:91:49:08:13:61:80:
b6:5c:cf:e1:72:48:fe:e5:71:8a:66:fd:7b:37:82:
95:50:67:c5:6b:1d:e7:14:71:c8:cd:a1:07:6e:4a:
aa:07:23:48:54:c9:d4:c9:88:77:ef:b2:87:f0:fc:
96:14:1b:c4:2a:7c:c5:e4:40:a7:99:57:c7:7a:88:
6b:65:4d:dd:03:86:88:59:93:3b:2d:09:44:38:0c:
7d:67:64:28:de:49:a5:ae:1f:10:66:43:f1:a3:e5:
ac:6f:59:a0:e6:a6:1e:63:6d:a9:c3:57:d0:ca:ba:
ac:b0:3d:ba:40:66:4e:96:e1:1c:ef:ed:30:c6:3a:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:48:E7:1E:A1:F1:1A:7A:BE:28:85:B0:AF:4B:21:30:55:6B:9A:45
X509v3 Authority Key Identifier:
keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fa:04:a9:9e:7b:ca:b7:61:a0:db:6b:54:4c:19:17:86:98:
f0:0e:3e:af:d8:f2:62:a8:cd:b6:a8:4a:3c:22:97:49:20:94:
4f:b1:b9:36:dd:26:ec:c0:d0:dc:20:0c:34:68:89:df:b0:67:
cc:25:de:1b:ea:66:b4:84:e4:06:bc:be:7e:f3:a6:22:98:dd:
6d:9a:41:26:85:20:ef:31:a5:c2:c1:01:37:75:c9:b9:eb:a7:
7a:52:d2:c1:57:07:b9:a9:4a:b3:d0:1c:d5:fa:91:6e:31:d3:
da:a4:db:8a:d6:eb:aa:73:a5:18:a7:0a:f1:97:0b:8d:c3:33:
7b:4b:f0:e0:d5:7f:8a:42:d6:d2:d1:e6:76:da:68:48:56:45:
6b:e5:e8:a9:e7:04:da:e5:eb:16:84:53:b7:0d:b4:0c:3d:7e:
50:23:bd:48:ff:d6:24:42:16:97:c6:b2:85:91:7a:02:11:3f:
a9:af:92:1c:92:89:35:a7:c8:72:d2:75:3b:fa:08:80:86:ee:
4f:31:02:fc:6d:c9:42:53:d5:7c:25:dc:0b:a9:db:57:db:2c:
f7:97:70:6a:2a:ce:75:af:d7:bf:62:55:77:ac:43:66:fc:06:
f6:21:30:41:63:59:46:dd:9d:93:00:9a:59:a0:b0:bb:58:9b:
ab:d1:43:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJhN2WhLckm7CAvhquIl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNGUzZTMzZmQ0ZjZkOWNiNGYxM2NhMjIzNzFlMzBiMzZj
ZmE3NzYwHhcNMjUxMTExMDkwMTI5WhcNMjUxMTEyMDkwMTI5WjAzMTEwLwYDVQQD
EyhlMzQ4ZTcxZWExZjExYTdhYmUyODg1YjBhZjRiMjEzMDU1NmI5YTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk0ud6Np08qvv2fOfmiJhX8L47ly
cN62tMgSgV9acQMOEQfRr2DZZRthJEDbsie91Uw78PWG8Tq4WuQdEMgtSbOQYNMA
35lokjr0uDNNj/Bge4n7M2jved5FLpgEWzpuBiZECa/P7OsY9F6pFImL6wP4heeo
1bCLinpm7iMiehyRSQgTYYC2XM/hckj+5XGKZv17N4KVUGfFax3nFHHIzaEHbkqq
ByNIVMnUyYh377KH8PyWFBvEKnzF5ECnmVfHeohrZU3dA4aIWZM7LQlEOAx9Z2Qo
3kmlrh8QZkPxo+Wsb1mg5qYeY22pw1fQyrqssD26QGZOluEc7+0wxjo0vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONI5x6h8Rp6viiFsK9LITBVa5pFMB8GA1UdIwQY
MBaAFBtOPjP9T22ctPE8oiNx4ws2z6d2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzA0LU1fMVBiWnkwOFR5aUkzSGpDemJQcDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOGE0MDQtNWU3Ni00ZWY0LWJiMDct
MDI2YzI2YjVkMzk1LzEvRzA0LU1fMVBiWnkwOFR5aUkzSGpDemJQcDNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jOGE0MDQtNWU3Ni00ZWY0LWJiMDctMDI2YzI2YjVkMzk1
LzEvRzA0LU1fMVBiWnkwOFR5aUkzSGpDemJQcDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvoEqZ57
yrdhoNtrVEwZF4aY8A4+r9jyYqjNtqhKPCKXSSCUT7G5Nt0m7MDQ3CAMNGiJ37Bn
zCXeG+pmtITkBry+fvOmIpjdbZpBJoUg7zGlwsEBN3XJueunelLSwVcHualKs9Ac
1fqRbjHT2qTbitbrqnOlGKcK8ZcLjcMze0vw4NV/ikLW0tHmdtpoSFZFa+XoqecE
2uXrFoRTtw20DD1+UCO9SP/WJEIWl8ayhZF6AhE/qa+SHJKJNafIctJ1O/oIgIbu
TzEC/G3JQlPVfCXcC6nbV9ss95dwairOda/Xv2JVd6xDZvwG9iEwQWNZRt2dkwCa
WaCwu1ibq9FDVw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:54 2025 by rpki-client