Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File: G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier: FiIF8iTxdGecUw1TOdNSb+W/zdhSEwdgOS27b8aOKzs=
Subject key identifier: 29:6F:ED:C5:69:FD:02:56:6A:2E:7C:37:9F:BF:1A:7B:E1:B8:D7:B5
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer: /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial: 019A71132413A5BA7A2C09DA5D1D619F6045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number: 0666
Signing time: Tue 11 Nov 2025 04:01:10 +0000
Manifest this update: Tue 11 Nov 2025 04:01:10 +0000
Manifest next update: Wed 12 Nov 2025 04:01:10 +0000
Files and hashes: 1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: zgKrim/5MTpCeItz9c6WNNboZYs/jHDbyIipJYkUyqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:24:13:a5:ba:7a:2c:09:da:5d:1d:61:9f:60:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Validity
Not Before: Nov 11 04:01:10 2025 GMT
Not After : Nov 12 04:01:10 2025 GMT
Subject: CN=296fedc569fd02566a2e7c379fbf1a7be1b8d7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:65:b5:05:09:ab:50:53:de:14:9e:f5:27:
a4:a3:11:62:56:13:0b:1e:9d:12:a2:b1:1b:45:cf:
0e:b8:54:09:b3:b5:80:e1:45:9c:7a:c9:87:89:00:
68:7c:0e:90:36:4e:2e:37:da:55:b2:af:3a:83:40:
c0:e9:fb:07:4b:83:8d:1b:56:cb:92:52:86:2f:61:
2a:17:c2:0c:d1:5c:e8:05:27:27:e5:c0:25:56:54:
67:b9:7b:f9:9d:50:ea:64:52:41:f5:37:cc:4e:07:
56:96:14:25:e6:f6:83:98:94:c4:d8:0b:a6:78:e0:
2b:b1:55:11:fd:d0:09:e0:3b:8f:89:e4:56:79:0d:
d3:f9:0a:ac:00:9d:8b:c0:bb:4c:81:0d:23:2e:17:
fb:72:c6:45:d4:98:62:45:08:11:ae:61:da:3b:f7:
f2:1a:f5:70:c3:28:73:07:08:6d:92:23:d5:cd:25:
20:dc:5c:b6:8f:8f:ed:ed:12:7a:16:f4:ac:ff:1a:
cf:3b:51:07:d9:14:a9:66:d6:5b:27:bf:5d:19:8a:
0f:02:5d:ac:1a:10:c8:ac:57:a8:e6:f6:0e:1a:1c:
ba:08:6e:65:4e:fd:93:ba:e4:12:0f:73:f3:72:88:
d1:6f:5e:62:b4:8d:97:53:22:4e:b7:1e:33:bc:41:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6F:ED:C5:69:FD:02:56:6A:2E:7C:37:9F:BF:1A:7B:E1:B8:D7:B5
X509v3 Authority Key Identifier:
keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:22:ec:f5:95:1a:30:6f:93:86:d4:48:1a:be:63:c3:0a:37:
78:97:95:5a:de:97:c2:26:f2:be:e5:97:86:a0:ca:1a:06:47:
84:a0:9c:95:a4:4d:3b:cd:b5:56:aa:5b:38:a5:8c:c8:51:ad:
d4:5a:f6:bb:ad:fe:00:19:ca:42:70:01:fa:e1:c1:9e:51:b3:
f5:a8:1c:08:5b:10:31:90:5b:68:a5:0e:c6:e4:80:ff:d7:3a:
ac:04:ff:de:e0:a5:12:b7:d5:4f:80:8d:64:12:a8:c3:82:2b:
66:7b:ac:be:bf:3d:ca:96:99:b8:ee:1a:48:a8:5f:01:b0:1c:
ed:e0:87:60:0f:62:c3:4f:7a:cc:a3:e8:07:3f:b6:df:1f:7b:
6b:68:e8:14:5a:b3:f6:23:ed:f3:d0:a5:a1:0c:11:5d:32:15:
8e:81:eb:e8:2c:27:81:06:6a:1f:ab:f6:8d:94:5c:dc:76:d7:
7b:75:ae:6b:39:03:95:13:02:93:3f:e3:99:bb:a1:c5:dd:35:
b9:4f:03:8b:e4:27:17:87:3f:ab:56:66:70:63:4c:e9:b9:79:
c5:2b:d3:21:9a:37:11:fb:36:87:40:cf:49:e8:d2:47:d6:a9:
3a:e5:96:f1:52:37:0c:2a:a6:6e:c7:b5:e5:9c:65:3c:4f:3a:
f3:7d:96:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:39 2025 by rpki-client