Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
File: G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json)
Hash identifier: KJ6vu+xFcHRvigAUyPrTmbnYE0gi/4S1kNTu1lG9qu0=
Subject key identifier: 4E:EA:35:6B:E7:D3:99:6E:AD:01:AE:65:20:68:56:EF:F9:89:65:A6
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial: 019A7301428871168EBA62B2BDF9B3D23BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
Manifest number: 06F4
Signing time: Tue 11 Nov 2025 13:00:53 +0000
Manifest this update: Tue 11 Nov 2025 13:00:53 +0000
Manifest next update: Wed 12 Nov 2025 13:00:53 +0000
Files and hashes: 1: 66D5GH85kpdoRl5xE-EYGnJIu7s.roa (hash: FRI0FnMjIpTP/o+NpM2rBO+2noxEcPY4kmpjzIRRmcw=)
2: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: R9E+ShLl5ijv4qE6z+RutZM/xl7YCrpgfvfbxj3bzWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:42:88:71:16:8e:ba:62:b2:bd:f9:b3:d2:3b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Validity
Not Before: Nov 11 13:00:53 2025 GMT
Not After : Nov 12 13:00:53 2025 GMT
Subject: CN=4eea356be7d3996ead01ae65206856eff98965a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:7e:7c:d3:86:04:0c:e4:28:43:d2:fa:32:
ee:d3:50:f1:09:68:76:7d:d3:b5:72:92:73:ca:32:
8b:e0:5d:cf:43:11:36:e6:1c:3c:fe:d1:34:0a:32:
68:ab:5a:32:02:45:dd:c1:ec:d0:e6:68:2d:23:96:
87:8f:0a:f4:49:d1:52:0d:1b:8b:1c:ea:75:f4:1e:
70:fc:3e:60:9c:9e:83:81:4f:59:7b:3d:06:3c:8c:
a1:f7:d5:de:0a:cc:76:9e:42:32:4a:44:23:54:27:
fe:1f:ea:65:9d:78:df:b6:f9:a9:c1:e9:0e:29:61:
63:2a:32:36:01:71:64:c1:46:2d:3e:3e:26:61:fa:
a3:c8:eb:75:a8:18:a0:f2:cd:63:73:9e:74:9f:89:
c4:56:84:5d:0d:42:7a:15:60:59:49:02:f2:22:cb:
ed:33:2e:c4:2e:59:23:30:23:db:f9:0b:fd:18:4c:
6c:f9:5f:95:73:f4:a2:7a:92:86:22:3a:e2:34:35:
11:c4:01:13:76:37:ed:35:11:9d:37:b8:1c:70:44:
1a:ba:33:fc:cd:dc:10:13:89:5a:e4:70:1c:5d:11:
92:28:eb:f2:f3:00:33:a0:b8:55:62:0c:5c:9e:68:
85:a4:eb:1b:bf:f6:57:a3:c9:0a:3f:56:6b:65:74:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EA:35:6B:E7:D3:99:6E:AD:01:AE:65:20:68:56:EF:F9:89:65:A6
X509v3 Authority Key Identifier:
keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5d:a9:da:16:5d:e0:77:dc:2d:12:c8:17:b4:35:54:0d:19:
12:3e:5b:50:b0:3b:43:c7:fa:8a:90:a5:72:f3:ed:68:05:34:
30:b0:1a:de:6f:1d:43:9a:82:29:44:1f:c9:e0:be:4d:87:c9:
2f:c5:50:fe:a9:1a:06:24:b0:e1:0e:12:ce:57:ea:86:5f:15:
50:a2:be:0a:99:d0:54:13:e5:17:d7:ec:8c:8f:e5:ed:82:22:
fa:fd:c9:e5:f3:37:65:6f:dc:e0:63:c3:47:b3:63:74:dd:b3:
d8:58:d2:c4:37:ae:72:1a:34:00:8b:fd:7e:0f:ca:76:24:9a:
b0:f5:0b:6a:51:d1:d1:ea:44:9f:de:b2:2e:5d:ef:ed:6d:9f:
09:c4:95:7d:ae:93:55:12:2e:00:5e:9d:46:5a:1e:73:25:ad:
7f:60:5e:ed:b5:db:dc:17:de:c2:99:8d:0e:fb:af:b9:0a:e5:
aa:31:14:75:79:ea:61:bb:4b:ee:4a:85:5f:05:49:75:84:f0:
30:d1:74:90:5e:ef:06:14:43:1f:60:56:01:54:cc:99:36:37:
b3:e5:89:c1:61:db:8c:ee:dd:6f:1b:e7:7b:ed:34:29:b7:b8:
2f:6e:98:e8:c0:f8:2a:c6:04:67:e6:38:c0:66:05:3b:3c:68:
b3:61:4e:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAUKIcRaOumKyvfmz0jvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNGQ4MDM3M2UzZTM0ZDAwYTg1Yjg0MTI4ZDQwNTM5OWJj
ZjhhNDUwHhcNMjUxMTExMTMwMDUzWhcNMjUxMTEyMTMwMDUzWjAzMTEwLwYDVQQD
Eyg0ZWVhMzU2YmU3ZDM5OTZlYWQwMWFlNjUyMDY4NTZlZmY5ODk2NWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2d+fNOGBAzkKEPS+jLu01DxCWh2
fdO1cpJzyjKL4F3PQxE25hw8/tE0CjJoq1oyAkXdwezQ5mgtI5aHjwr0SdFSDRuL
HOp19B5w/D5gnJ6DgU9Zez0GPIyh99XeCsx2nkIySkQjVCf+H+plnXjftvmpwekO
KWFjKjI2AXFkwUYtPj4mYfqjyOt1qBig8s1jc550n4nEVoRdDUJ6FWBZSQLyIsvt
My7ELlkjMCPb+Qv9GExs+V+Vc/SiepKGIjriNDURxAETdjftNRGdN7gccEQaujP8
zdwQE4la5HAcXRGSKOvy8wAzoLhVYgxcnmiFpOsbv/ZXo8kKP1ZrZXRzdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7qNWvn05lurQGuZSBoVu/5iWWmMB8GA1UdIwQY
MBaAFBtNgDc+PjTQCoW4QSjUBTmbz4pFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMt
OGUwMGJkYTNiMjQ1LzEvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMtOGUwMGJkYTNiMjQ1
LzEvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMl2p2hZd
4HfcLRLIF7Q1VA0ZEj5bULA7Q8f6ipClcvPtaAU0MLAa3m8dQ5qCKUQfyeC+TYfJ
L8VQ/qkaBiSw4Q4Szlfqhl8VUKK+CpnQVBPlF9fsjI/l7YIi+v3J5fM3ZW/c4GPD
R7NjdN2z2FjSxDeucho0AIv9fg/KdiSasPULalHR0epEn96yLl3v7W2fCcSVfa6T
VRIuAF6dRloecyWtf2Be7bXb3BfewpmNDvuvuQrlqjEUdXnqYbtL7kqFXwVJdYTw
MNF0kF7vBhRDH2BWAVTMmTY3s+WJwWHbjO7dbxvne+00Kbe4L26Y6MD4KsYEZ+Y4
wGYFOzxos2FO8A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:51 2025 by rpki-client