Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: C2peWDmDoCwCSRDk7HlmIxszglmTgJbf6ZHEW5LkbBU=
Subject key identifier: E3:FF:7D:D8:D1:FD:82:86:61:58:81:4A:E5:7F:A8:E1:07:91:6D:41
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 019A725C6408B5788030299303088AA5FFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0A17
Signing time: Tue 11 Nov 2025 10:00:48 +0000
Manifest this update: Tue 11 Nov 2025 10:00:48 +0000
Manifest next update: Wed 12 Nov 2025 10:00:48 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: jA+Kr/iJFJs2q16OE65yqF8zP+g/fZbb0Vh2OfNdN8Y=)
2: zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa (hash: haMcqGD9VuWSxs2wPMo5yLhdGqSHCO1AnFtOfllpTYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:64:08:b5:78:80:30:29:93:03:08:8a:a5:ff:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Nov 11 10:00:48 2025 GMT
Not After : Nov 12 10:00:48 2025 GMT
Subject: CN=e3ff7dd8d1fd82866158814ae57fa8e107916d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:b1:ff:f5:dd:2d:5e:95:ac:8b:be:44:ac:5f:
3f:7c:f3:de:21:34:b5:16:01:98:8d:ff:05:ea:3e:
da:2a:15:12:20:26:6c:c1:dd:b2:ce:3f:ee:54:ea:
3c:00:7c:ad:e9:cd:a0:45:9c:bc:fd:38:ba:c7:69:
94:32:28:14:16:69:ee:57:95:42:12:8e:36:50:90:
7c:9f:d9:3a:dd:3e:ca:64:80:c0:3a:c8:94:99:7b:
18:9a:ab:79:fc:62:11:7b:26:55:b6:4f:96:ef:94:
9d:01:4a:80:bb:21:04:6b:e6:ce:e1:1c:91:9d:05:
4a:72:75:0d:4c:ec:fd:72:26:c6:2b:ea:45:b9:48:
90:8b:d9:69:c7:6d:18:ee:bc:51:99:74:1f:22:25:
c9:ae:5e:58:aa:65:cc:04:ca:54:26:b9:19:ed:ba:
d8:6d:c7:3e:e8:f9:52:72:9c:37:82:f7:ac:f4:8f:
b9:60:3c:be:1c:55:39:c0:35:36:d0:7e:6f:9b:40:
5a:39:f8:02:5f:1b:ad:6d:ac:5a:9b:d0:9b:b0:a9:
6d:f5:24:28:09:53:1d:49:0c:ca:29:33:d7:cf:9b:
3f:92:b5:4d:2f:d9:eb:41:8f:9c:d5:b8:9a:ff:14:
e0:2c:07:7d:b0:4c:e0:38:bf:11:16:29:da:ce:0e:
c0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FF:7D:D8:D1:FD:82:86:61:58:81:4A:E5:7F:A8:E1:07:91:6D:41
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9b:e5:af:92:ed:ab:39:81:b3:9a:8d:76:e2:d9:29:df:4e:
49:88:fa:20:41:a3:9e:dc:f8:55:03:b4:f4:31:0a:81:a4:e1:
a0:07:64:28:a0:65:cc:ac:c1:fc:b8:b0:4e:49:2f:c6:af:62:
ce:9e:d3:66:8d:a2:d1:4d:9f:41:2f:c6:be:cc:33:ee:7b:e0:
e8:22:c1:c2:5b:90:b9:b6:15:43:6a:46:16:79:7a:e7:29:44:
bc:3d:56:4a:00:ee:bc:c5:04:46:d9:2c:a9:5d:f3:25:cf:70:
85:42:a0:94:b1:c3:18:02:06:15:51:d5:b0:a1:58:36:ef:5b:
ef:bd:fa:20:e7:4a:36:e2:d3:7b:1f:bf:16:0c:64:9a:97:3e:
2f:7b:8b:0b:ac:b8:87:78:8f:2e:4b:c6:f3:39:1e:11:a3:01:
c4:77:db:a4:21:70:15:c9:07:c6:21:67:58:22:21:b7:88:60:
2b:88:12:a4:94:c4:61:cc:11:87:0a:6f:59:22:75:7e:5f:34:
92:1e:42:5f:86:61:56:23:a5:9e:cf:f0:02:06:c7:4b:60:4e:
66:54:49:0d:83:05:4f:55:5f:e7:9d:71:38:97:ee:bf:9a:85:
2a:91:ad:6c:19:27:2a:93:2d:27:1d:ff:fe:92:66:89:50:e0:
41:39:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:23 2025 by rpki-client