Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
File: G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft (raw, json)
Hash identifier: 0e0/2o88M6fVGxZ9svkswyBj2yLh8alELbvOLgPZx/4=
Subject key identifier: EF:7C:52:D2:1F:07:BC:74:EA:FC:FF:54:B8:51:D9:F2:7C:5B:B1:90
Authority key identifier: 1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
Certificate issuer: /CN=1b934577cb49d8d231b74c550726f3387e026cf6
Certificate serial: 019A71B7DBE18308177B8219C9D7EA1DEBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:06 +0000
Manifest this update: Tue 11 Nov 2025 07:01:06 +0000
Manifest next update: Wed 12 Nov 2025 07:01:06 +0000
Files and hashes: 1: G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl (hash: xZNpOpgIOICDsfQ6Rnwp/oyGHvrZYTlVLo5n/WUPn9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:db:e1:83:08:17:7b:82:19:c9:d7:ea:1d:eb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b934577cb49d8d231b74c550726f3387e026cf6
Validity
Not Before: Nov 11 07:01:06 2025 GMT
Not After : Nov 12 07:01:06 2025 GMT
Subject: CN=ef7c52d21f07bc74eafcff54b851d9f27c5bb190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:13:8c:aa:fd:eb:d5:6a:33:16:d6:4b:bf:ff:
7c:b8:59:59:50:4c:a8:43:fa:ba:9a:ea:4b:26:51:
b3:2c:de:78:0c:42:e4:aa:89:cd:34:2f:91:74:ce:
fb:ab:4b:12:8a:f1:2b:24:c5:e4:30:cc:6e:fa:93:
c0:cc:ba:d2:c2:08:e8:92:5b:5e:10:53:0d:f5:ea:
90:2f:1a:f4:95:65:dd:41:2b:e9:ab:5e:c3:60:d7:
fb:5e:bc:ae:57:cf:43:c3:e6:cf:f0:a1:33:ad:49:
ca:f1:76:3e:fd:2a:19:d4:79:e4:4f:5e:99:03:c0:
80:e0:2d:85:ef:96:c9:fc:6e:6d:51:f4:08:61:9e:
5f:02:a5:ee:df:1e:48:51:33:83:98:1b:c8:8f:06:
7c:8c:f6:2b:61:75:28:c4:ed:a4:de:31:e1:e0:bd:
c0:06:d4:56:a3:27:96:03:30:5d:40:6c:e5:1c:12:
26:e3:b6:bc:d9:e2:6b:33:fb:82:62:98:d9:9f:fa:
ae:0c:a9:66:f2:32:8c:31:0b:16:b4:b5:32:e5:30:
08:59:62:b7:e9:d0:2a:14:80:08:cc:a8:5d:5e:26:
f5:d4:5b:6a:f3:bb:93:fe:da:d7:32:03:43:82:d3:
eb:c8:8d:09:2f:cf:59:34:14:5a:0c:70:7e:eb:a6:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7C:52:D2:1F:07:BC:74:EA:FC:FF:54:B8:51:D9:F2:7C:5B:B1:90
X509v3 Authority Key Identifier:
keyid:1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:44:b0:f1:d9:b0:97:89:51:bd:a7:66:df:85:13:fc:f4:45:
c5:f1:3d:9b:5d:dc:f4:0d:56:8f:04:3e:e3:94:63:60:4d:36:
ab:96:3d:69:5c:19:0a:75:3c:9d:55:bc:51:ca:b9:7b:1c:2a:
6f:98:78:92:0c:47:51:ae:f0:15:c3:d5:86:89:2d:60:e6:de:
2a:54:e4:85:53:6f:be:db:2b:82:85:2f:4a:c6:db:eb:34:c7:
ba:df:59:7e:96:d3:1b:0e:c7:f1:18:29:85:4c:45:43:f3:37:
28:2f:af:53:e4:a9:79:0c:3a:81:08:cc:da:87:3f:a8:03:e5:
64:a6:c2:a4:f3:4f:b8:d9:95:2d:a8:ed:f6:91:84:7e:20:9a:
9e:db:98:a3:76:67:4e:7d:59:78:3a:be:20:e1:f7:60:72:2f:
66:0a:8d:7f:7b:81:5b:42:d3:6f:65:af:68:1e:f8:62:e3:63:
e2:20:a3:82:00:65:12:9d:17:49:20:a6:6e:2c:12:33:a5:78:
df:86:32:76:3e:9d:64:8f:63:17:08:05:a4:e9:eb:3f:89:e2:
32:33:36:cb:95:0e:b9:6d:83:51:ba:fc:09:a3:e8:70:29:ef:
31:a5:f5:ca:97:90:ff:09:5e:3f:9e:20:13:60:93:e1:40:c9:
42:c1:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:03 2025 by rpki-client