Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: N82OFumoq1tfyQ3V6cWI9JUwbwW5l3WLqLQJ8OdxUzQ=
Subject key identifier: 0C:14:94:52:ED:D7:D8:15:09:BD:D9:25:50:80:9B:BD:A3:EF:FD:34
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019A3F828442F91DB68C74726A8385EFEEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 1707
Signing time: Sat 01 Nov 2025 13:01:49 +0000
Manifest this update: Sat 01 Nov 2025 13:01:49 +0000
Manifest next update: Sun 02 Nov 2025 13:01:49 +0000
Files and hashes: 1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: CbX1C/DdpoRAf+jFaiU0iykKMvKsfcj892bKVYAGgWE=)
3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:82:84:42:f9:1d:b6:8c:74:72:6a:83:85:ef:ee:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Nov 1 13:01:49 2025 GMT
Not After : Nov 2 13:01:49 2025 GMT
Subject: CN=0c149452edd7d81509bdd92550809bbda3effd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:44:fd:8a:bc:55:01:8b:8d:0f:99:42:95:
c8:82:03:fe:c1:b5:3b:50:e6:3e:5b:39:b5:16:aa:
7b:78:e4:20:1f:f3:54:a4:52:b0:c9:87:51:19:f9:
53:0f:b3:9c:ee:fb:f2:16:f7:a4:b7:e7:a3:91:d1:
07:1a:78:e3:b8:04:11:18:01:d1:3a:57:fe:91:aa:
6c:8d:14:56:86:43:64:1f:5a:30:09:d0:6a:83:50:
92:7c:ea:a6:9c:27:a4:7f:00:48:4f:84:45:bd:e4:
9f:d1:a3:11:7a:bc:ee:20:e3:7a:94:89:23:f5:3c:
01:0d:60:19:60:87:46:a9:d8:fc:a8:f0:ce:7e:33:
ff:e3:87:53:bc:f0:61:43:d3:e4:48:ab:bf:10:e7:
29:85:f2:1c:8e:82:3e:6f:bc:74:ab:1b:41:9e:f4:
4c:55:7b:b5:36:11:59:df:dd:79:44:e2:c2:cc:70:
d6:68:ea:fd:b5:ca:78:09:91:36:e7:d9:c5:c9:2a:
d4:50:7e:f3:5c:f1:0a:00:e5:60:bd:cd:f4:65:94:
98:fb:d4:a2:88:12:3d:0d:e6:b3:68:62:62:e9:82:
6e:e7:bd:58:76:20:cd:14:92:ba:ce:aa:6f:88:a1:
d5:6d:2c:04:f5:a8:6d:fb:cc:6b:3c:a3:7a:31:5a:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:14:94:52:ED:D7:D8:15:09:BD:D9:25:50:80:9B:BD:A3:EF:FD:34
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:88:b4:53:46:e3:27:c6:5b:04:0e:c4:f2:76:21:e8:83:09:
9a:df:0f:33:ef:5e:26:64:21:bc:ed:cd:dc:dd:1a:2e:c8:25:
8d:fb:03:a4:4a:83:29:cd:b8:b2:d7:0e:e9:77:2d:b2:5e:be:
bb:f8:93:95:85:9a:22:72:58:b8:b3:0e:44:9b:aa:5c:52:4e:
6b:15:8b:2e:1a:23:79:7d:9f:48:ad:3f:4a:33:39:e9:24:6c:
77:6b:70:80:53:94:b8:0c:0d:80:25:00:ea:d2:66:a3:be:9c:
16:71:06:a3:99:7c:ac:9d:33:c1:3d:d9:6d:98:e1:84:a8:66:
05:ec:d4:fe:b7:76:74:3d:c1:ad:54:75:2a:1f:22:64:01:5e:
1a:b6:61:a4:f2:85:af:fe:86:87:0b:30:90:3f:c5:a6:a6:3a:
07:ec:93:9a:a3:72:45:53:f8:30:32:ef:11:07:3f:9d:96:d6:
df:f7:97:c3:e3:bf:0b:50:71:e9:7d:83:f0:13:10:47:37:74:
6e:de:cf:fe:7b:6a:e0:c2:e3:0b:c2:05:b4:1f:cd:89:d2:23:
6f:93:9b:ff:54:0b:31:b9:8d:13:a4:a1:bf:9a:0f:de:61:16:
ee:fa:ad:72:41:36:7a:91:26:df:24:6d:e4:7f:ba:d7:c1:f2:
65:71:85:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 18:00:57 2025 by rpki-client