Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
File: G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft (raw, json)
Hash identifier: mnPKkQYQ8ZjijqGvIfvNYBdeIuby9J3hiUmShEMSzb8=
Subject key identifier: 19:A1:AE:E4:74:EC:B3:F9:78:25:8A:11:9C:C4:B5:9E:97:7D:27:B9
Authority key identifier: 1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
Certificate issuer: /CN=1b934577cb49d8d231b74c550726f3387e026cf6
Certificate serial: 0199239F26790ECBC7F4C52E4E200123E8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:00:56 +0000
Manifest this update: Sun 07 Sep 2025 10:00:56 +0000
Manifest next update: Mon 08 Sep 2025 10:00:56 +0000
Files and hashes: 1: G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl (hash: PELy9mnHts3nEph21lBv3m6FN5mYNkZUC89rm1i8/b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:26:79:0e:cb:c7:f4:c5:2e:4e:20:01:23:e8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b934577cb49d8d231b74c550726f3387e026cf6
Validity
Not Before: Sep 7 10:00:56 2025 GMT
Not After : Sep 8 10:00:56 2025 GMT
Subject: CN=19a1aee474ecb3f978258a119cc4b59e977d27b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:04:76:16:71:9a:db:a8:92:0d:55:11:cf:
e3:ef:82:ff:a6:33:35:ae:1e:b1:2c:b2:bb:bb:ee:
ac:8d:75:ec:a4:66:f8:45:65:7f:3a:2a:6a:91:f1:
69:d6:53:da:ce:91:b0:f6:44:e8:21:57:9a:50:0f:
76:f4:2a:c0:f2:f7:00:19:b7:91:e0:1e:7e:75:a0:
54:ba:62:d5:8d:15:c3:31:21:00:4c:3a:00:73:ae:
ed:c7:a0:b3:fa:c7:a4:0c:4f:d4:e9:01:4b:83:83:
a0:91:22:24:a3:36:98:96:88:c8:d6:a2:87:0b:45:
44:de:f4:6f:46:06:88:18:ab:0f:4a:fb:9c:a8:70:
c9:c7:dd:b9:6e:18:73:6b:32:7f:b9:1f:22:c3:46:
b5:7c:49:02:76:21:5c:fb:73:8a:80:84:64:30:f8:
c7:c8:82:d5:22:00:50:96:04:af:db:8c:28:7e:c1:
6c:5d:e7:d7:0a:02:8c:c5:a3:0c:e7:53:1f:fe:98:
31:de:50:5c:d7:df:32:36:0d:4e:fb:42:e1:c8:50:
35:2d:b5:3c:4c:ff:55:05:e5:c6:8d:ed:e2:6c:fb:
b9:d4:7f:13:7a:2f:22:0c:4d:fc:cc:be:f3:ef:28:
db:3a:47:7f:47:39:9b:6e:c2:52:95:8b:ab:2f:9d:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A1:AE:E4:74:EC:B3:F9:78:25:8A:11:9C:C4:B5:9E:97:7D:27:B9
X509v3 Authority Key Identifier:
keyid:1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:78:d8:48:07:8c:09:1f:61:ef:49:37:09:fd:c4:c5:dd:21:
1e:bd:66:c8:3e:4b:c0:14:ad:1c:32:ab:8b:41:84:08:6b:5a:
97:da:b5:09:5f:71:e1:84:33:24:bc:71:53:3d:0e:03:6f:28:
dc:8c:5b:17:b6:66:94:d0:f5:1a:ee:e8:a1:99:6c:29:a8:0a:
79:30:f4:ba:f2:53:2d:ed:42:3e:a1:16:03:f7:90:34:b8:e7:
87:1b:70:fa:c5:7b:27:59:06:7b:2c:b7:32:9f:b5:fc:73:2a:
57:f2:fb:7c:e2:e4:2a:7b:c8:17:b8:b1:46:92:7f:df:54:a6:
b0:6c:5a:b7:0f:28:6f:79:93:8d:b2:be:6f:89:3e:62:62:b5:
fb:62:63:09:4d:0d:1d:a6:64:72:32:48:81:55:71:67:26:63:
b0:ad:0c:07:53:81:64:5f:08:bf:2e:72:65:76:8e:c6:ae:b9:
f3:0e:06:fa:5c:22:2e:18:eb:5c:74:bf:55:16:d0:ce:eb:7d:
da:6a:dd:1d:59:18:95:1a:d8:4f:08:53:76:d8:54:db:68:dc:
53:b2:af:4f:f3:a0:21:e9:47:e9:07:1d:76:1d:64:80:e1:dd:
fb:d1:94:31:dd:59:ff:3e:9d:bd:a8:8c:20:1f:86:fc:4b:10:
82:9d:60:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:24:24 2025 by rpki-client