Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
File: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json)
Hash identifier: /FFAN3AaXhgzWZGUWR3dBG1RShdwW7G4QZHnsm2X3dU=
Subject key identifier: 1F:56:41:A3:DC:3A:D3:C6:CA:57:5D:E8:A7:D5:63:4C:72:A1:79:FB
Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
Certificate issuer: /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Certificate serial: 019A71B810BCB236CDF1A9FF23649F26560A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
Manifest number: 0BE4
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: 0FKlgC/Ul++3JxMUlWR8v0Fuen3LC66Bg+XxlrjnrhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:10:bc:b2:36:cd:f1:a9:ff:23:64:9f:26:56:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=1f5641a3dc3ad3c6ca575de8a7d5634c72a179fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:dd:03:30:fd:4d:ac:c0:1b:24:95:c4:56:
7e:3c:05:35:62:0f:6b:72:82:88:3f:df:c0:bb:3e:
00:eb:e7:4e:35:81:8e:20:9a:59:bf:ee:ff:9c:62:
e5:94:5a:14:aa:1e:3c:c2:9d:7a:5a:21:22:51:4f:
d8:fc:04:6b:77:59:45:87:14:b3:df:3a:95:38:8b:
48:10:43:7d:20:65:a2:26:86:62:d0:7f:63:23:f8:
88:24:f9:02:b8:a7:07:fd:e2:fd:44:35:db:a0:6e:
a0:87:f5:bd:c2:a4:57:cb:b1:e4:2f:d4:43:2b:fa:
f6:11:33:85:f0:82:48:a8:bd:15:a4:33:96:14:73:
76:45:91:00:a4:ce:4c:c9:63:74:00:bf:c3:ba:e2:
d7:55:b2:b3:be:25:c1:80:6d:27:fd:70:26:ee:df:
ce:6a:de:27:5a:3d:7c:82:58:9f:de:01:ad:0d:0d:
e2:6a:08:0f:ba:cc:0c:ed:b4:95:ff:8e:3f:10:84:
60:a2:d9:0f:50:c9:1d:93:ac:3a:39:1e:ad:69:72:
5c:3b:69:36:24:26:dd:ff:bf:d4:f9:ae:44:ed:aa:
df:cc:6e:38:40:fb:7a:92:cf:8e:d7:60:73:12:24:
9f:36:dd:54:a0:19:ac:75:0d:01:93:f7:9b:7d:4a:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:56:41:A3:DC:3A:D3:C6:CA:57:5D:E8:A7:D5:63:4C:72:A1:79:FB
X509v3 Authority Key Identifier:
keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:90:a3:ce:2a:ff:0d:c7:36:8a:40:80:f1:1f:cc:cb:b2:1d:
30:f3:46:fd:6d:27:e3:74:ea:d2:bb:19:a0:38:8b:4a:d1:8e:
69:fc:9a:36:3d:24:d8:05:a5:b7:ef:f7:a6:b6:8b:04:53:92:
8c:45:76:fb:75:47:a1:bc:b0:c3:88:a0:9d:ea:35:7b:d7:c3:
04:a5:91:24:17:8b:8a:ba:8a:d6:49:f0:ff:a4:57:4c:7a:ea:
a4:9e:57:35:76:4a:b0:00:fe:58:57:84:41:95:5c:10:50:b4:
58:62:5f:4e:36:24:05:fd:e1:6c:53:1a:ae:7e:1b:43:58:6a:
dd:09:7c:d9:82:8c:e2:fb:6f:23:bb:f8:74:85:96:e2:fc:2c:
b0:fc:11:73:ec:49:36:32:77:cc:06:4b:a8:96:aa:00:61:6d:
a1:88:44:2b:47:aa:0d:4c:b8:5b:ce:c7:ae:aa:34:9e:ac:e4:
83:26:57:35:2a:1a:9c:cb:10:06:e1:9a:26:d8:7e:f0:9e:58:
6e:32:3c:7c:45:62:8b:c7:06:56:59:55:1d:81:a6:80:35:8b:
81:b8:32:06:39:91:2b:1c:60:85:94:7b:b2:b6:e6:fc:c7:a5:
8f:6d:4e:30:a7:c1:21:51:5b:47:54:c4:ba:38:64:eb:a4:f6:
9f:b1:a1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:56:44 2025 by rpki-client