Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: tPsSn61r6BuOfr9sZ3nihqHqnNnswAxfut+mvNVxlEs=
Subject key identifier: 93:B5:3B:E3:53:D4:B1:72:E2:AF:E4:1E:99:D8:A6:86:32:20:9C:44
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 019A72263C32E1D06725444806641FF82113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 13A3
Signing time: Tue 11 Nov 2025 09:01:39 +0000
Manifest this update: Tue 11 Nov 2025 09:01:39 +0000
Manifest next update: Wed 12 Nov 2025 09:01:39 +0000
Files and hashes: 1: FpKpXAvwQ5eTmnpDjAybF20U0r8.roa (hash: rDfC3vqrlhOzRgHniKHIntRfI5mc/vDS+DS8eZGWJuQ=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: P212ACpx430jvHsdyOkrfYxVt2/jSVf+Z6sfggrgyLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3c:32:e1:d0:67:25:44:48:06:64:1f:f8:21:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Nov 11 09:01:39 2025 GMT
Not After : Nov 12 09:01:39 2025 GMT
Subject: CN=93b53be353d4b172e2afe41e99d8a68632209c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:b1:d7:a3:0a:e4:4e:99:60:6c:85:9a:54:
d5:ca:ec:0d:f6:81:28:08:16:4e:11:96:ef:6e:92:
11:40:f9:51:96:ec:e6:f1:61:25:4d:fe:8c:13:11:
8b:16:d0:6c:a2:b6:36:40:49:51:c3:fd:7d:bc:0d:
55:62:1f:0c:c3:c0:6b:95:4b:e7:26:b3:be:fd:c1:
60:2f:fa:98:ca:b4:93:49:8b:f0:a1:64:e8:20:1e:
e0:3f:27:c3:16:40:22:82:88:8f:22:b8:a3:75:e4:
0a:1c:e8:aa:76:3c:64:7e:46:65:eb:17:77:f7:80:
7a:6a:79:43:b6:93:44:c9:b0:e2:f1:64:77:df:b6:
4a:79:71:b0:d5:54:cc:43:b4:ea:ba:0b:bf:b0:3a:
92:a5:40:6e:d8:5e:4e:67:eb:0f:f5:37:21:c1:61:
a7:e6:b8:08:24:ef:31:41:15:ac:9a:9b:7c:b3:62:
de:9a:86:a6:55:af:eb:2d:8b:80:9d:80:e7:f0:05:
dd:82:9c:94:ae:c8:ec:a6:4f:68:bb:c2:c5:91:1a:
e1:94:ba:08:05:cf:74:d6:56:1b:42:fe:60:97:a8:
e6:1d:21:12:2f:81:67:1b:bb:6a:fc:80:b0:32:96:
6d:e4:91:8c:39:95:eb:e3:90:4e:64:31:11:37:62:
be:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B5:3B:E3:53:D4:B1:72:E2:AF:E4:1E:99:D8:A6:86:32:20:9C:44
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:9d:26:db:5c:45:95:cc:4f:01:f5:b1:35:fc:8a:de:a3:9e:
d0:d7:79:f6:da:7d:1d:90:1d:a9:90:60:23:d9:a8:4c:a4:b7:
c5:2a:5e:4c:d1:03:c1:37:92:bf:07:3f:30:b4:3e:f5:25:4f:
40:04:65:dc:5c:4f:24:87:9e:37:03:10:9b:3c:9a:29:84:05:
bf:56:9f:af:52:c1:9b:ed:d3:dc:10:37:70:da:01:f8:67:b2:
a5:97:d6:83:3b:63:58:47:83:22:d9:a0:d7:bb:5a:b5:96:90:
1b:d3:66:3e:98:73:c4:a4:dd:44:dc:3f:4f:a0:ff:4a:63:9b:
83:50:d2:c5:39:07:dc:e3:3f:62:a1:e3:82:af:6a:2e:60:91:
db:64:a5:5b:e2:19:b4:38:45:5f:4a:c4:6e:30:36:2e:17:32:
8a:56:af:b4:11:90:6e:dd:b5:3d:a3:3b:4b:a6:c9:55:b9:22:
d6:e2:61:c1:5f:62:1e:96:00:7c:51:5c:79:23:1b:1d:a2:60:
25:2f:ed:89:c3:96:69:e9:04:c2:d7:54:a6:b6:12:0c:37:9b:
f4:34:21:c3:3f:2d:09:eb:09:c1:1c:52:46:fb:5a:6a:d8:a9:
48:97:36:75:7f:a7:e9:f3:80:72:a6:7e:77:5f:30:c5:0b:8c:
81:00:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:41 2025 by rpki-client