Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
File: g_65rfwvZVEiBb1IETJMnX9qAiI.mft (raw, json)
Hash identifier: GiMAN0fsyPpxzG3AFinFEnVQXvwcCQES7dk5GMTgQls=
Subject key identifier: E2:87:C6:76:69:3B:2D:DB:66:D0:C4:50:06:53:75:D7:31:97:AE:16
Authority key identifier: 83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
Certificate issuer: /CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Certificate serial: 019A71B8EA9A94B05B29C874F863C091FFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
Manifest number: 0518
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: g_65rfwvZVEiBb1IETJMnX9qAiI.crl (hash: 6xHSCY6wNbLXC9TsXidtTi6ixLGRn1budourycq6x8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ea:9a:94:b0:5b:29:c8:74:f8:63:c0:91:ff:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=e287c676693b2ddb66d0c450065375d73197ae16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:92:87:75:08:f2:b2:c9:1c:0d:e5:59:8b:
e6:ba:7a:55:53:c8:94:34:9d:20:b7:35:43:2f:7e:
2e:1a:c9:64:dc:db:38:39:bc:1a:97:77:7d:ac:c5:
59:d6:5a:83:b5:e4:16:92:92:ae:99:17:19:b6:a3:
85:97:76:51:b7:82:06:6b:55:2a:c7:8c:97:43:f2:
39:1d:07:fc:fb:5f:e3:99:f6:17:fa:0d:7c:dd:da:
b8:82:5f:27:19:5f:a0:9e:e1:43:6b:72:68:bc:44:
7b:42:a0:b9:e2:80:25:8a:54:a4:61:bb:03:6c:07:
47:30:f8:49:5b:14:1d:29:aa:74:e9:25:d4:27:71:
27:fa:0c:c0:fd:79:76:b7:57:36:5d:78:6e:65:2f:
2c:23:ed:da:c5:c1:ac:4f:a8:43:64:a3:d1:28:04:
e6:d1:76:52:1c:4d:ad:56:b5:94:2d:b2:39:ad:08:
1f:a8:3c:99:bb:4e:00:31:ea:f5:2b:9e:6b:8d:27:
44:ff:89:e6:07:2c:c9:86:f7:2a:cb:ab:05:35:08:
b6:51:08:3d:23:9f:fc:f6:91:8e:d8:75:ef:44:f6:
24:db:15:1f:67:d6:c8:87:c6:8e:3a:b8:a0:d8:10:
8e:2d:ee:9a:29:68:8c:7c:b3:b1:6d:8d:31:51:e2:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:87:C6:76:69:3B:2D:DB:66:D0:C4:50:06:53:75:D7:31:97:AE:16
X509v3 Authority Key Identifier:
keyid:83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0c:8e:8f:98:ab:cb:3a:4c:06:6d:43:4b:fa:85:eb:40:b5:
51:06:1b:17:d0:f8:aa:5c:d5:f2:b4:09:93:36:05:23:b6:22:
37:46:52:2f:45:91:b8:e0:38:ce:6d:f4:64:92:e5:ac:af:c2:
10:69:4f:b7:7b:c7:d0:cf:ac:28:a6:04:bc:0f:8c:44:39:51:
da:32:a4:08:17:b8:3c:85:54:12:c8:6c:af:cb:09:92:80:ea:
4b:4b:a8:ba:0d:3a:33:5e:cc:d2:7b:c8:fe:00:ce:fc:7f:fd:
64:44:aa:31:93:ff:2e:36:ed:2e:33:6a:bb:41:4e:4c:cd:27:
e1:0c:0c:a0:7f:0e:57:86:99:29:6c:32:b4:b2:39:c5:e5:bb:
1a:aa:3a:b7:d1:a5:4d:35:bd:2c:84:f5:9b:0d:e8:8d:47:3c:
8f:d3:c4:e6:d7:92:a1:88:cd:b6:cc:fc:15:ba:3a:3d:20:47:
90:26:dc:3e:95:f8:b4:b1:b2:3a:c2:64:c8:2d:e0:1b:e7:b1:
2c:a5:86:09:bd:27:a0:f9:01:6f:93:60:17:6c:2a:b3:a4:cf:
cc:55:e4:b3:86:eb:47:d4:b5:14:3f:7f:a3:b9:4c:5e:f4:3c:
04:0e:24:05:10:4b:97:ec:1c:e2:71:bd:e1:fd:cf:a3:db:7c:
05:7b:aa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:30 2025 by rpki-client