Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
File: G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json)
Hash identifier: ZleFSBeg+jZZLD0HzZ+1/pqPUhBVIOaV69ETbovQmm4=
Subject key identifier: 38:22:DB:7B:B7:0E:5C:EB:85:02:D6:D3:85:87:3D:17:1E:AE:FE:9C
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial: 019A7149EB742CC43FD7E421EEE9C94DE367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:01:01 +0000
Manifest this update: Tue 11 Nov 2025 05:01:01 +0000
Manifest next update: Wed 12 Nov 2025 05:01:01 +0000
Files and hashes: 1: 2iBSszmMQqmiQ3uytPa6Rj5usVw.roa (hash: uKmKRGw9bMp+kTA7Ddvynf7WAl8sh27c2GAtM3UsdJQ=)
2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: DjRJAgcmj9iBzdvMqvL1tLoWIcVK5OnbQYBQWLGTn3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:eb:74:2c:c4:3f:d7:e4:21:ee:e9:c9:4d:e3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
Validity
Not Before: Nov 11 05:01:01 2025 GMT
Not After : Nov 12 05:01:01 2025 GMT
Subject: CN=3822db7bb70e5ceb8502d6d385873d171eaefe9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:e1:81:43:2e:2a:fc:0a:ec:3f:d7:39:23:
ed:1d:1f:50:30:d1:4f:ac:9d:1d:01:13:0d:7c:8f:
d2:15:11:17:52:51:7c:55:15:2d:a5:3e:51:90:42:
94:2a:7f:ce:ba:9d:d8:ee:11:0a:a5:68:68:de:6a:
88:82:29:17:05:e8:41:f1:b8:9a:40:23:e0:be:37:
34:0a:1e:ae:f1:2e:ad:7a:b9:8b:81:da:72:f4:97:
df:4d:be:b0:ea:f6:aa:b8:46:21:67:3c:bb:87:43:
30:35:c2:36:c9:48:95:84:6d:11:af:41:cb:92:2f:
db:b2:d5:87:e7:66:1d:ce:41:f4:71:30:d7:88:5c:
c2:6f:b4:38:04:b8:cb:4f:f4:97:57:ab:26:4c:7a:
ec:ca:d6:4c:c9:68:09:60:fc:10:24:b6:bc:b6:0f:
1d:78:4b:6b:52:77:df:0e:71:b7:04:8c:f3:f1:d1:
83:d4:b0:d5:85:84:ea:40:24:ca:8d:64:a3:a7:5e:
df:8d:bc:41:7e:f7:7c:f4:b9:bf:49:64:44:3f:ac:
af:33:6e:79:97:ec:bf:b9:91:04:bb:72:42:7f:48:
4e:71:f8:5e:5e:90:24:b0:94:39:f9:21:e9:03:2b:
db:8c:21:98:d6:fa:83:ba:a8:79:1b:7d:5d:fd:8c:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:DB:7B:B7:0E:5C:EB:85:02:D6:D3:85:87:3D:17:1E:AE:FE:9C
X509v3 Authority Key Identifier:
keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:10:b1:11:6e:0b:18:e7:d2:b0:7d:0b:1a:04:89:ef:8c:02:
ee:8a:9e:4d:f6:28:9e:bf:d9:8e:0e:2a:5b:5e:01:73:ae:ed:
13:82:56:21:e1:39:20:24:9f:3b:06:09:a5:59:cc:a1:b2:f0:
b4:25:70:ef:29:e6:9e:dd:a2:75:57:dc:86:dd:35:6b:d5:16:
65:8c:e0:2b:69:58:c2:28:5e:b1:9b:d4:87:16:30:a9:92:e7:
ba:b3:64:a7:45:da:c0:81:9c:cc:78:72:d4:0f:b2:44:0c:8b:
73:2a:b3:6f:05:7c:b2:57:a9:99:e7:8b:dc:9e:0a:81:4c:ad:
ec:8a:95:44:76:19:46:c4:99:60:d5:ce:bd:21:88:97:d6:4b:
5d:33:57:02:a9:b4:b2:6c:c2:ca:03:e7:b8:c0:03:ef:ba:eb:
89:74:5b:58:a9:fe:66:5f:f0:e0:7e:31:f8:40:96:15:bd:b0:
4e:b0:5a:9f:99:53:d4:13:75:bb:0f:82:93:50:4b:98:be:93:
53:75:fb:f5:43:21:cb:8a:05:78:4c:d2:21:31:3b:4c:d3:9b:
5f:43:7c:e7:bf:42:84:b4:bd:98:ce:7b:d4:5f:b0:a2:0b:17:
e2:82:b0:b2:1e:16:f5:20:bb:1a:ed:16:11:e4:42:69:c1:65:
8d:bf:e3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:10 2025 by rpki-client