Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File: G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier: grHn2FdAw2JlezfwVjzfjHPe/fok+6lRQrkEHlBmVlY=
Subject key identifier: D2:B7:3B:0E:60:56:6D:2D:41:FB:CB:81:47:4F:47:F9:82:FE:AD:EC
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer: /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial: 019922FAEB62E25E6335FE03203BBFF3CE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number: 05B9
Signing time: Sun 07 Sep 2025 07:01:33 +0000
Manifest this update: Sun 07 Sep 2025 07:01:33 +0000
Manifest next update: Mon 08 Sep 2025 07:01:33 +0000
Files and hashes: 1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: qvWI8e1mGeNvyTGFyv6bbk4QhEWGjb05cYOLsrSYAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:eb:62:e2:5e:63:35:fe:03:20:3b:bf:f3:ce:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Validity
Not Before: Sep 7 07:01:33 2025 GMT
Not After : Sep 8 07:01:33 2025 GMT
Subject: CN=d2b73b0e60566d2d41fbcb81474f47f982feadec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:5d:6c:60:28:33:3e:1b:81:1b:a9:9d:02:
1c:ca:ba:c5:90:db:cb:52:e7:88:89:29:d9:ce:fa:
6b:63:e3:da:4c:77:91:89:3e:09:a2:fd:7f:de:dc:
f8:cb:8c:d0:79:98:03:c0:80:94:3b:37:23:26:cd:
a5:96:13:f4:5e:4b:c2:bf:02:29:3b:c0:23:e5:3f:
71:4c:03:0f:b6:32:4a:5b:44:5b:c3:eb:c2:b2:dc:
20:ec:b9:48:2e:b4:af:c5:41:07:39:dd:ee:c0:1b:
f4:57:30:42:1a:ee:5e:c9:5c:ae:2e:93:8b:e5:b7:
28:96:8a:19:2b:8b:19:a9:e1:6b:c4:2b:b6:17:1f:
f0:4e:ff:f5:82:dd:fe:46:e7:ef:f1:09:d9:bc:f1:
44:42:59:d5:80:42:14:25:12:a8:18:03:2e:a5:72:
9a:3d:a2:ad:80:1b:58:97:73:68:79:87:6d:b4:04:
ef:49:78:c1:a8:aa:69:90:8b:00:d6:70:16:c6:ab:
80:2b:72:8f:f9:c0:a2:ef:ec:77:8e:a0:cb:96:4a:
f5:dc:fd:9a:89:7c:d7:c5:44:80:03:4a:dc:64:dd:
54:7c:cf:ec:69:01:09:be:d8:28:18:35:f8:a1:08:
d5:83:03:4b:f3:b9:90:fa:de:de:b2:b8:8a:0b:08:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B7:3B:0E:60:56:6D:2D:41:FB:CB:81:47:4F:47:F9:82:FE:AD:EC
X509v3 Authority Key Identifier:
keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0a:83:29:14:17:bb:1a:c2:04:a6:3f:d6:77:20:e9:44:57:
30:24:01:c9:24:37:96:c4:b3:5d:a8:ae:6b:97:d9:f4:dd:49:
31:4a:f2:a0:10:25:e4:f1:68:0b:65:08:f8:83:25:52:aa:fa:
1c:b3:da:c2:cc:15:c5:32:01:f3:b0:38:49:d9:47:a8:7c:38:
30:cd:ff:72:03:11:e3:ae:10:15:1a:8d:ed:e2:de:e8:a0:77:
42:b3:8a:cf:a2:75:75:1e:f4:96:d2:ba:f0:1c:35:ac:42:df:
4a:a8:dc:24:22:c3:3a:9a:b1:d4:95:73:83:5d:c3:62:67:64:
cf:a5:74:92:34:0f:f7:9f:11:ad:27:35:45:44:8c:ec:a5:e7:
60:7a:7e:1a:98:b6:56:62:ac:27:ed:97:d5:be:57:43:64:6b:
67:18:77:a3:f5:0a:33:ab:b5:df:c6:76:6e:8f:a8:ad:b1:45:
15:4f:63:c9:04:d6:5f:c9:29:9e:a0:f7:40:e4:a5:f7:ed:88:
41:72:e6:0e:19:12:8a:7f:2e:7c:c3:95:d2:04:33:63:b9:3a:
1e:20:cb:99:cb:4b:1b:8b:94:c2:4f:04:4a:43:41:5f:79:8d:
8f:1c:ba:e8:f8:99:64:ce:51:8a:bc:0b:70:86:a9:e7:00:a5:
3a:c6:df:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:50 2025 by rpki-client