Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File: G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier: O0omRavVTzhS63M7RTwqbldth0sHKB9JFZpheq7VJrY=
Subject key identifier: BD:DD:1F:E8:E8:90:81:D2:9E:84:94:30:CA:BE:F6:A8:D6:FE:60:A8
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer: /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial: 019A2AE7EDEE588F637DF6F6154EBC6796F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number: 119A
Signing time: Tue 28 Oct 2025 13:00:34 +0000
Manifest this update: Tue 28 Oct 2025 13:00:34 +0000
Manifest next update: Wed 29 Oct 2025 13:00:34 +0000
Files and hashes: 1: BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (hash: /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=)
2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: SSe+HjhY7VCRjdmoxiZcmfVDqtqnjrcb/p4uUwfZUI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e7:ed:ee:58:8f:63:7d:f6:f6:15:4e:bc:67:96:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Validity
Not Before: Oct 28 13:00:34 2025 GMT
Not After : Oct 29 13:00:34 2025 GMT
Subject: CN=bddd1fe8e89081d29e849430cabef6a8d6fe60a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:e8:0b:e0:3f:07:6b:5e:48:55:10:80:76:
29:91:be:76:40:00:ba:bf:e5:47:b8:25:a5:e3:7f:
a4:c0:ec:d2:04:f3:1f:85:58:15:dc:f0:8f:8a:fe:
88:38:64:62:2f:ad:72:12:c1:27:f4:14:73:70:1a:
4f:81:fd:c9:b7:4a:50:49:7d:1a:bf:bf:eb:98:4a:
0c:7c:2c:6d:d5:8e:72:8e:5a:a0:26:65:01:f0:f2:
a5:74:18:7b:48:81:08:1b:bc:27:16:2f:a1:c1:26:
99:c0:17:c2:8a:f0:66:1e:ee:e8:c5:4a:33:dc:6c:
09:03:6f:1c:c3:ba:18:46:ec:e3:88:3a:d6:6d:8b:
3b:eb:6c:06:03:49:ae:c5:23:86:55:44:e1:8f:d9:
03:fd:61:15:9d:9e:82:f9:5c:d6:15:dc:81:a3:af:
0e:1b:8e:e8:08:7b:08:5d:03:fc:d7:0e:f2:12:3b:
39:86:f5:fe:1b:66:65:27:c5:bc:f8:b1:05:ff:33:
a4:d5:06:f5:49:53:a5:d6:b7:c8:62:98:c0:26:1e:
d6:1d:9a:93:c3:51:e8:a9:e4:42:ed:04:cd:be:e2:
a1:de:98:bb:26:b7:0d:f2:76:e0:53:8c:99:2b:48:
17:cf:93:3d:3f:c5:16:fc:af:8d:37:8c:21:09:c5:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DD:1F:E8:E8:90:81:D2:9E:84:94:30:CA:BE:F6:A8:D6:FE:60:A8
X509v3 Authority Key Identifier:
keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:36:be:14:4b:5b:07:70:6c:81:5d:ea:12:b1:87:68:d4:40:
cc:46:51:9a:7c:13:bb:10:d1:ee:59:92:9c:43:4e:f1:89:d5:
67:18:bd:c4:a9:de:ce:33:42:64:a7:3a:62:f5:23:46:4d:07:
06:c9:69:20:5f:6c:7d:4c:e6:f2:9d:d0:d3:ec:cb:10:a2:dc:
83:47:20:ca:28:84:2f:4b:15:25:0d:2f:88:c7:33:13:dc:fb:
0b:49:40:cf:6f:79:c0:18:72:d1:a6:36:91:ec:b1:37:11:4d:
69:a0:40:11:4b:17:d0:a1:30:32:60:39:86:a3:7e:59:18:16:
67:2b:f9:ec:44:52:ec:47:2d:01:f8:aa:fc:35:4c:18:06:a5:
72:f8:47:9e:ba:6c:b5:64:f5:52:26:ba:bb:72:81:4a:82:06:
2e:55:55:d6:7c:01:5e:cb:2f:00:46:03:82:ae:10:e1:88:44:
55:db:8e:5e:ce:e7:4e:f5:9b:3d:7c:33:b3:95:a2:ff:a0:b0:
0e:73:c6:23:f9:91:6c:cc:2e:9a:39:3c:97:e7:e3:44:76:78:
86:bc:91:0f:37:46:19:91:6e:9a:59:78:65:d1:23:55:5f:25:
cf:53:69:80:cc:12:18:ea:9a:a5:4e:7b:61:47:4c:b8:a7:ac:
89:86:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:10:25 2025 by rpki-client