Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
File: G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json)
Hash identifier: DC4vJJC869M8lXLZgmjePpsPM2ZH524iSzHtg/IEXQA=
Subject key identifier: 28:E9:8A:C0:02:DC:57:96:74:81:4F:38:DF:CC:51:58:99:25:D5:B4
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Certificate issuer: /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial: 019A72264D1743A352132B3C0B4A52C7664D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
Manifest number: 109A
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: P0Mi3YDRf3wlD9pqs9K0adOwIhtk6bi5ZgwEAxatmOE=)
2: hH7p55BYalQ3lSf5_ESdyJOLa1g.roa (hash: CwjN/ntMIQN6pGzj4DyEYFD1soFJfMvM2aBgkytuAgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4d:17:43:a3:52:13:2b:3c:0b:4a:52:c7:66:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=28e98ac002dc579674814f38dfcc51589925d5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7e:99:25:e4:06:1b:2a:6f:d9:90:06:e9:6e:
6c:35:bd:61:ba:c2:c0:65:6f:05:a5:4b:1e:46:e9:
79:4a:0d:de:3d:d8:52:14:22:0b:39:1b:ee:bf:ef:
57:7a:28:ba:95:b7:3f:39:84:9b:c2:c3:25:3d:ff:
3a:df:d7:43:29:fd:9d:8c:ee:2b:fb:ea:0c:31:e4:
0e:cd:b9:3d:f6:5d:61:91:d1:91:aa:ca:60:03:67:
e9:57:7a:0a:b0:b5:1f:90:d5:00:d2:e9:3a:11:05:
1e:43:ad:9e:48:16:d8:3b:fd:ef:78:48:91:9e:f9:
c9:fb:4c:78:bc:dd:54:ce:2b:db:5c:4e:13:38:6c:
cf:07:71:5b:d7:da:bc:3c:e8:79:02:94:d6:60:6a:
ae:36:1c:b9:a6:07:c9:cd:22:4b:63:c2:5c:be:cd:
fa:31:b1:51:af:6c:5f:84:4c:ba:8b:8f:49:1e:f4:
ed:da:52:e1:d1:55:02:d5:2c:52:80:01:98:5b:5c:
87:b2:6d:f7:74:5a:11:18:98:b9:e6:90:8c:c7:e0:
49:07:3b:bb:f2:c7:d4:26:bd:e7:46:5b:d9:ee:49:
42:5c:fa:29:89:2f:f6:e1:06:0d:19:05:94:96:b2:
26:3e:ca:50:9b:85:3a:a0:c7:82:e5:39:f4:75:ee:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E9:8A:C0:02:DC:57:96:74:81:4F:38:DF:CC:51:58:99:25:D5:B4
X509v3 Authority Key Identifier:
keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e5:4d:78:16:5f:23:8d:ec:3f:7d:d0:fb:1f:1b:1f:9d:82:
76:bd:82:51:6b:f0:c7:cd:92:9b:b6:62:26:03:6a:9c:09:b4:
48:09:a2:5a:2d:b9:f9:1e:dc:25:26:df:b3:67:4d:1d:fa:38:
1d:b5:02:d1:a9:42:31:b1:7b:10:46:9b:91:75:af:b9:69:0e:
cc:d7:56:70:66:d9:bc:c2:57:f2:73:06:d1:15:99:e2:32:0b:
26:e4:5a:92:e7:d0:ea:19:29:b4:0e:cf:e6:09:2f:92:08:1c:
e9:f1:a9:b3:01:3a:fa:2e:37:78:ca:5d:1d:0a:20:8c:a5:82:
24:13:27:85:85:49:05:c3:1b:f5:0d:6c:65:19:dd:fa:ca:7d:
0f:23:8b:bf:c7:56:14:c8:c1:6c:54:29:3c:4b:a5:bd:66:cf:
b6:13:44:21:7e:ac:51:02:7d:79:2e:b4:a5:68:37:a8:56:2b:
1a:39:5c:e8:e2:17:36:ef:97:e4:e0:56:e9:e3:b7:2f:87:cd:
62:a2:f5:90:46:23:1b:e4:d5:b9:5c:64:fb:ea:85:2a:cd:29:
4d:7c:37:09:3c:a2:e1:e0:a2:ea:e0:e1:37:41:a2:4e:e9:e9:
a8:be:7b:6b:5d:b9:6b:fa:2e:27:08:bd:34:7f:56:16:ae:fe:
81:07:a2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:23 2025 by rpki-client