Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier: pJZc1yMKqnqBjtuJeqgaDk9lBILUYXT5jliSFANrXRU=
Subject key identifier: D9:7A:14:63:11:49:51:1A:43:E6:34:C3:4B:D1:AC:15:3C:3A:E0:39
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 019A725CDC1A7D4A78213DD46599F4F0FC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number: 13C4
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: 1ISrUMvXtY8idtkbmSmcNCBmXOs.roa (hash: JdzcjRC1qPASLJAyKXCJZ2jvTuTxM21yeidKZ9A5IsQ=)
2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: 50z5ZygmQlN68LVVsFgaFDI9CG4iuDqInNf3z7nR7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:dc:1a:7d:4a:78:21:3d:d4:65:99:f4:f0:fc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=d97a14631149511a43e634c34bd1ac153c3ae039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:e1:6c:01:46:9f:d1:68:32:05:09:33:ef:
e4:9b:6d:6c:e8:db:b4:f8:84:88:2a:f4:07:e6:f9:
f6:9f:3f:6d:1b:cb:c5:ad:a8:51:7b:f3:25:fa:1a:
f2:29:c4:95:3b:e8:db:ce:7d:f6:32:c0:59:85:12:
b7:ec:8e:39:f0:c6:5a:4d:23:34:45:df:b5:33:60:
4e:74:27:75:87:67:c4:f2:5a:60:dd:dd:25:f1:69:
f2:ae:1c:10:ac:59:f3:8d:32:3b:e3:52:a4:91:d1:
ab:ad:4b:21:40:2f:a5:1f:43:56:14:ff:1c:03:66:
27:73:8d:05:94:c5:dc:52:ac:d4:84:0d:59:7e:79:
07:39:fc:8b:b4:1f:ac:ae:e3:ac:e8:3f:38:12:26:
41:47:5a:50:e1:2f:a8:69:e0:05:87:c5:f3:48:aa:
2c:a4:b0:95:7d:ed:b1:29:63:40:07:1a:ea:9d:f2:
c5:b0:d6:25:ef:e7:f0:f9:ec:1a:94:30:1e:94:d6:
72:c6:23:f0:ed:8e:4a:cb:09:8c:37:41:ab:f3:34:
c3:1a:01:37:03:e3:d6:b1:9a:c5:a8:78:d3:39:0e:
f5:6c:89:4d:62:39:b6:5d:6d:e4:66:6d:de:eb:06:
86:bb:c4:02:21:16:8c:67:58:8f:c2:2f:ea:5f:88:
25:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7A:14:63:11:49:51:1A:43:E6:34:C3:4B:D1:AC:15:3C:3A:E0:39
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:31:c6:67:85:68:a2:a6:a3:da:c5:e6:16:36:95:2c:22:4a:
3f:b4:55:20:c3:1c:b0:79:80:57:77:18:97:61:20:e8:52:7a:
6c:d1:5d:f5:02:b2:ed:01:bb:36:04:ec:df:9a:d8:5d:af:8b:
ca:07:cc:64:78:b4:ab:2c:31:88:26:c8:d8:39:3f:dd:b3:26:
c0:19:01:8d:50:40:f5:5e:57:1c:c1:f4:6b:07:ed:3c:6e:e0:
b4:08:60:5f:95:94:97:ca:b8:b2:42:c3:e7:a5:21:63:0c:20:
42:d5:69:e0:c2:33:ff:8c:13:b0:07:a7:f1:00:f9:74:e6:18:
e8:f0:13:43:1c:bc:6b:f6:71:38:68:77:e5:e4:48:9a:96:d8:
bd:ac:b6:14:6a:a4:5d:20:97:ab:78:6e:ab:09:0e:cb:94:bb:
35:5d:d1:ba:e4:a1:91:44:de:d0:90:75:5a:68:20:88:46:80:
c2:32:0d:2e:51:f0:5d:17:75:dc:e9:0a:37:9f:11:3f:23:f6:
2c:4b:41:2e:f7:69:d2:4c:8e:5f:4b:e7:2a:8d:96:c6:7a:15:
0f:01:6c:fc:d6:3b:11:2b:a6:b8:a4:c0:15:2c:ca:4c:69:95:
2e:0c:b5:00:47:24:9e:f0:92:f3:d9:a3:db:2a:84:1c:0d:ca:
b5:ee:5e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:02 2025 by rpki-client