Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
File: G7gLSjMnxYOuzbA87z9k8zvVmwg.mft (raw, json)
Hash identifier: a+W1jOY6UmC30LJIaQIv6KOcDrC162F0iEt58JCV/HQ=
Subject key identifier: D9:16:2E:31:B4:50:ED:61:54:97:53:50:98:D8:28:EF:36:A7:2D:59
Authority key identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
Certificate issuer: /CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Certificate serial: 019A7112C987E83E2C3A16C83C32CCBC5A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
Manifest number: 0C42
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: G7gLSjMnxYOuzbA87z9k8zvVmwg.crl (hash: q6PhkhMmw1pwy0QyhIY5tly2jnEuc7PwdWU8RlwKyss=)
2: f9_4yHGEiJhxZligkSR6T3R3EKU.roa (hash: zpcNNRByx6ZecO+EUAONqKSkYOomMoB7CmsUhShj7mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c9:87:e8:3e:2c:3a:16:c8:3c:32:cc:bc:5a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=d9162e31b450ed615497535098d828ef36a72d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:5a:2d:41:09:8a:f8:57:a8:02:35:a2:6f:
5d:5c:cd:aa:8b:bb:fa:a2:19:e6:81:92:d5:c0:71:
60:af:15:9c:65:08:f0:4d:24:ac:56:a2:02:6c:23:
ef:f6:bf:e5:cd:62:86:61:2f:8a:c9:8b:de:5e:10:
37:a7:d9:78:40:b2:0a:05:8c:d5:ea:cd:52:1b:03:
40:c2:d4:2d:4b:40:4e:de:de:a5:47:0a:1f:c3:7e:
5e:eb:6f:c8:ee:ff:1c:68:ed:7e:4b:d6:10:f6:f1:
57:a2:b1:71:f2:7f:90:e8:cb:7a:74:85:e6:ee:07:
83:d5:4f:15:24:3e:96:ad:8e:6d:42:92:7a:71:03:
4c:c7:d9:00:dc:d7:d5:1f:7d:9b:d5:ea:7a:40:fe:
d0:ba:6e:ad:57:a9:4d:9d:0d:ab:a3:32:3a:4e:3d:
62:15:61:c2:4e:3c:7b:26:b3:17:27:32:24:41:3f:
89:ff:27:4f:15:2e:08:5c:1a:62:e9:01:e5:7b:11:
9b:19:a1:6d:5e:0a:10:0f:e0:16:68:c3:ae:cf:b8:
b9:28:86:9c:5a:7a:17:17:72:c3:3e:22:b8:cf:d6:
19:eb:4d:19:7c:e1:d5:3c:3f:b0:1a:3b:d6:7c:4b:
db:1f:8e:4e:0b:df:27:49:7e:2c:cb:02:67:3e:d5:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:16:2E:31:B4:50:ED:61:54:97:53:50:98:D8:28:EF:36:A7:2D:59
X509v3 Authority Key Identifier:
keyid:1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e7:9c:9d:ac:1f:91:0b:1c:0a:59:c9:d6:bc:18:71:23:d3:
e0:5f:7e:b9:51:28:b2:19:57:5f:57:75:26:b1:ba:14:6b:02:
e7:de:df:21:4b:34:cb:54:5a:db:6e:03:1c:ba:c0:aa:a8:72:
a0:40:37:68:f9:ef:e3:c6:3e:6b:e0:cb:90:dc:8b:d5:85:ec:
35:2a:77:6d:f9:e8:9d:e8:5d:83:ae:66:3d:d4:3e:65:72:8b:
da:30:3c:b5:f6:6b:6c:e1:ea:93:d9:53:5c:81:aa:7d:40:20:
3d:f7:f9:83:7a:1b:ab:2d:69:99:ab:8c:88:07:a4:60:b6:17:
1c:3a:01:35:3a:d6:ff:66:bb:2f:67:da:a0:5f:f5:31:de:73:
80:5c:d1:e6:75:f9:34:74:90:b8:89:80:b6:4e:77:2c:e0:6c:
f2:9a:a2:8b:45:cc:23:49:bc:f0:09:f6:e1:9e:07:0d:44:f0:
dd:02:46:17:bc:0a:0f:25:7b:a5:44:2a:a2:22:0b:d4:23:84:
65:03:8c:f2:ad:c2:65:78:f6:b9:4e:09:8f:7d:62:34:08:79:
5d:30:49:cb:2c:e4:ee:1e:14:14:31:fb:00:2b:7e:a8:e6:31:
b7:01:0a:ad:7b:8d:87:df:70:93:5e:71:61:28:81:24:e4:8d:
62:4c:30:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:16 2025 by rpki-client