Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
File: G6b10yR0vob2MFiURTdik0TU8Bo.mft (raw, json)
Hash identifier: kD9VbzgiOoK8oqEz+bF/P/YPkA2IBe0p16DM9D5edGg=
Subject key identifier: F6:37:18:E1:31:26:15:F7:C1:C9:39:5C:DE:CD:02:EF:F1:BC:59:EA
Authority key identifier: 1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
Certificate issuer: /CN=1ba6f5d32474be86f63058944537629344d4f01a
Certificate serial: 019A7112CEA7AF1222EAD6A8E9AD46501FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
Manifest number: 0502
Signing time: Tue 11 Nov 2025 04:00:49 +0000
Manifest this update: Tue 11 Nov 2025 04:00:49 +0000
Manifest next update: Wed 12 Nov 2025 04:00:49 +0000
Files and hashes: 1: G6b10yR0vob2MFiURTdik0TU8Bo.crl (hash: prZRz3pe7Ylb3BFj7jlDsDM7fPJK3tzr/zf/wV9DE9c=)
2: mToK7O7t52pvY5jAx8Z0JoUDFIM.roa (hash: Xs8G0qX2ZJs522/1L68wTzEgBOm79/mlDz8OPsPAHlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ce:a7:af:12:22:ea:d6:a8:e9:ad:46:50:1f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba6f5d32474be86f63058944537629344d4f01a
Validity
Not Before: Nov 11 04:00:49 2025 GMT
Not After : Nov 12 04:00:49 2025 GMT
Subject: CN=f63718e1312615f7c1c9395cdecd02eff1bc59ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:b1:5c:c3:4b:fd:d8:96:1a:39:65:7a:75:
cd:1c:00:95:f9:f5:c3:6c:ab:67:d8:49:83:8b:af:
7a:4c:7e:bd:38:2a:ca:52:02:c1:b8:88:56:c5:be:
7a:7e:ec:9a:a8:55:3a:50:0a:0d:2e:0d:3b:09:13:
f2:02:79:da:8e:ea:f1:07:9e:73:68:0a:e1:17:2c:
15:32:50:6b:79:86:12:80:28:3b:1c:3e:13:6b:0b:
44:5a:c3:a3:6a:9c:ed:30:14:b1:45:4b:15:70:66:
23:26:2b:fd:29:b3:53:1b:dc:42:26:74:04:d2:dd:
56:39:fe:48:34:6f:b4:4c:2c:a7:a8:1c:af:3b:70:
3e:fc:1b:7d:69:62:10:d0:68:b3:f0:6b:32:41:07:
e4:01:8e:54:4a:26:21:1e:99:8f:e8:43:6f:45:cf:
f1:f7:be:b7:1e:41:ac:dd:35:fb:5e:db:f4:c0:c0:
02:bd:24:ca:c8:f7:b2:f9:0d:a7:85:1d:02:f9:b0:
bc:08:c0:cd:c8:8c:26:1b:0d:75:36:e2:14:ee:4b:
08:b0:4c:7a:40:ee:3b:a1:86:35:96:43:2b:6d:cc:
e1:34:1a:53:7c:78:a3:26:83:7e:01:fb:85:ef:ee:
cb:3f:74:f2:51:c1:ba:55:b3:43:8d:a5:46:a1:36:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:37:18:E1:31:26:15:F7:C1:C9:39:5C:DE:CD:02:EF:F1:BC:59:EA
X509v3 Authority Key Identifier:
keyid:1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e7:65:f3:d0:23:22:47:85:5a:13:00:92:5b:4a:6e:6a:13:
ca:be:79:63:00:1a:12:33:cf:c2:d4:99:69:63:94:f7:8a:88:
32:37:2e:0e:63:81:53:f9:ef:a7:55:8c:f0:e3:8d:77:17:dd:
7f:b7:c2:ac:2c:63:cf:b4:a3:66:44:a6:85:ef:92:79:d8:19:
09:c9:21:eb:47:75:29:59:26:e0:26:f0:a8:11:cf:4d:be:61:
ce:bc:58:69:bc:75:e4:67:82:80:6a:4f:b6:4a:1a:f3:8c:37:
d9:a7:cd:f6:16:39:1e:24:ea:e8:d0:85:25:f5:d5:71:ef:f4:
64:5c:de:45:8e:da:e9:79:77:3e:d6:03:bd:65:3e:13:0a:3c:
f3:a8:d7:a2:35:8b:be:c3:79:4d:97:56:89:e6:9f:e6:4c:71:
d7:26:30:ed:8e:7a:e0:0a:bb:0b:47:37:e9:47:66:44:34:b4:
b0:79:60:6a:3c:9f:7e:d0:4c:8c:e7:86:eb:ab:57:4d:1f:1e:
9a:e1:b0:d1:2e:f2:bb:39:71:c3:c9:1c:cc:b4:67:f6:1e:1f:
64:60:cb:9f:06:9f:bc:8c:bc:f1:c6:6d:3d:96:fe:d8:f6:af:
87:64:42:27:13:c8:67:ab:50:a8:f7:bb:7b:d3:08:e2:23:a6:
98:f4:46:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:39 2025 by rpki-client