Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
File: G57Ppx7--bsb_nsuQCFc2lsjHl0.mft (raw, json)
Hash identifier: jN7qDbhPl6t4wbfHUPe0i5Jg6JBCehXdEM1EiQWkqMw=
Subject key identifier: 4F:EC:A2:FE:1E:12:1D:53:6B:E2:96:2B:05:0D:3E:F7:C6:23:A0:A9
Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
Certificate issuer: /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Certificate serial: 01994F9C2D0CFC36CE69B2B1E3DEAB700AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
Manifest number: 1689
Signing time: Mon 15 Sep 2025 23:00:59 +0000
Manifest this update: Mon 15 Sep 2025 23:00:59 +0000
Manifest next update: Tue 16 Sep 2025 23:00:59 +0000
Files and hashes: 1: G57Ppx7--bsb_nsuQCFc2lsjHl0.crl (hash: nXlBbkr7b4W+tDCXls/8UBLI3VxJK6e31MGs/iwbs5g=)
2: lxlrJ6zUgWTjPJVPagQ8_bikf3Y.roa (hash: ohk+IdQW1buST7Ifi9lGkmLrZs39V2tT52pS0ULxhf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:9c:2d:0c:fc:36:ce:69:b2:b1:e3:de:ab:70:0a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Validity
Not Before: Sep 15 23:00:59 2025 GMT
Not After : Sep 16 23:00:59 2025 GMT
Subject: CN=4feca2fe1e121d536be2962b050d3ef7c623a0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:0f:0a:70:ba:08:4d:29:cd:d8:21:d2:ca:
02:86:42:03:76:1a:67:da:be:e8:00:3e:50:59:9e:
b9:f3:a0:d4:9f:2c:72:36:86:ef:30:c4:20:9a:ce:
ca:82:1e:b2:ce:27:a3:76:53:b1:2b:a2:35:8d:16:
d9:19:74:76:8f:b1:8d:79:62:0f:cb:05:e5:b0:57:
e3:15:aa:1d:89:8c:4b:d2:fe:18:39:25:92:36:2e:
fe:8b:b2:40:23:b2:e5:fc:c0:2e:35:74:19:9f:09:
78:0f:3b:84:78:03:ad:99:04:4e:0e:72:25:67:37:
12:f1:13:d9:20:65:77:0c:9f:a7:15:07:11:ec:99:
ff:fc:32:71:32:5c:e5:3b:ae:59:57:41:74:81:95:
b8:98:9b:f2:6a:79:5f:85:80:67:52:21:20:13:2e:
59:e4:08:ad:f5:a0:8e:cb:70:9a:a1:9f:e1:1c:20:
1b:bc:3c:6a:7a:ff:14:3d:5d:12:95:cf:40:0e:2d:
da:78:53:79:fd:95:bd:63:d1:ff:bd:8d:6a:c8:0e:
28:a5:7f:b6:4a:13:63:27:43:dd:7f:16:52:83:f2:
9d:53:16:9d:dd:d1:84:c1:65:6b:29:31:a3:11:47:
66:04:52:91:e3:9f:4d:96:dd:ed:a1:a0:39:c1:41:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EC:A2:FE:1E:12:1D:53:6B:E2:96:2B:05:0D:3E:F7:C6:23:A0:A9
X509v3 Authority Key Identifier:
keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a7:57:5f:2c:35:4b:90:6e:21:22:1a:35:7e:a4:9e:f2:b5:
87:6c:36:53:9a:c6:11:4d:07:35:27:e1:f4:84:b3:8e:2b:1e:
9b:09:d6:06:20:82:03:5b:e6:f9:c7:08:98:a8:24:9d:53:ad:
93:c5:1a:3c:f2:86:46:f8:c5:0c:2d:ce:49:08:aa:c6:2b:75:
d8:10:01:6a:bc:a7:3e:0a:2e:02:a2:a7:50:a8:e4:e1:44:ac:
22:03:a9:97:f4:fb:c1:67:44:43:18:1c:02:ff:78:db:9b:c1:
54:3f:eb:c0:ce:37:07:10:6b:29:e4:98:f4:7c:90:34:fc:cc:
9d:91:ab:a6:b5:82:74:06:21:43:8a:89:37:50:08:d0:b8:3a:
d9:f5:f6:0c:6b:0d:c6:98:53:a7:f7:cd:be:4e:5c:af:d1:2f:
d4:44:5a:ed:2a:08:9d:61:0d:f7:ed:34:58:96:cf:95:a7:79:
71:69:84:7a:74:9e:48:bf:52:fd:32:30:56:b1:4a:ee:95:57:
33:de:b7:dd:04:af:03:25:ef:b4:89:a9:7f:b0:1d:b3:e3:8b:
b5:bc:b9:dd:6d:68:d3:bd:aa:29:33:07:b0:4e:53:5c:bd:e8:
85:9c:bd:3f:5f:67:ad:c9:6d:df:5e:f1:d0:9b:33:44:fd:04:
57:f8:56:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlPnC0M/DbOabKx496rcAqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWVjZmE3MWVmZWY5YmIxYmZlN2IyZTQwMjE1Y2RhNWIy
MzFlNWQwHhcNMjUwOTE1MjMwMDU5WhcNMjUwOTE2MjMwMDU5WjAzMTEwLwYDVQQD
Eyg0ZmVjYTJmZTFlMTIxZDUzNmJlMjk2MmIwNTBkM2VmN2M2MjNhMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCAPCnC6CE0pzdgh0soChkIDdhpn
2r7oAD5QWZ6586DUnyxyNobvMMQgms7Kgh6yziejdlOxK6I1jRbZGXR2j7GNeWIP
ywXlsFfjFaodiYxL0v4YOSWSNi7+i7JAI7Ll/MAuNXQZnwl4DzuEeAOtmQRODnIl
ZzcS8RPZIGV3DJ+nFQcR7Jn//DJxMlzlO65ZV0F0gZW4mJvyanlfhYBnUiEgEy5Z
5Ait9aCOy3CaoZ/hHCAbvDxqev8UPV0Slc9ADi3aeFN5/ZW9Y9H/vY1qyA4opX+2
ShNjJ0PdfxZSg/KdUxad3dGEwWVrKTGjEUdmBFKR459Nlt3toaA5wUE55wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/sov4eEh1Ta+KWKwUNPvfGI6CpMB8GA1UdIwQY
MBaAFBuez6ce/vm7G/57LkAhXNpbIx5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQt
ZjEwZDI2ZTNjM2RmLzEvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lZDE2MDktMTA4Ni00N2I0LWE0OWQtZjEwZDI2ZTNjM2Rm
LzEvRzU3UHB4Ny0tYnNiX25zdVFDRmMybHNqSGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6dXXyw1
S5BuISIaNX6knvK1h2w2U5rGEU0HNSfh9ISzjisemwnWBiCCA1vm+ccImKgknVOt
k8UaPPKGRvjFDC3OSQiqxit12BABarynPgouAqKnUKjk4USsIgOpl/T7wWdEQxgc
Av9425vBVD/rwM43BxBrKeSY9HyQNPzMnZGrprWCdAYhQ4qJN1AI0Lg62fX2DGsN
xphTp/fNvk5cr9Ev1ERa7SoInWEN9+00WJbPlad5cWmEenSeSL9S/TIwVrFK7pVX
M9633QSvAyXvtImpf7Ads+OLtby53W1o072qKTMHsE5TXL3ohZy9P19nrclt317x
0JszRP0EV/hWPw==
-----END CERTIFICATE-----
Generated at Tue Sep 16 05:57:07 2025 by rpki-client