Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
File: G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft (raw, json)
Hash identifier: a/MdxaWYtFJ9fNirpYPhC9QySQ5fOCZ9KK0P9Im3SkA=
Subject key identifier: AF:BC:C9:28:4F:DA:F9:F5:58:4B:04:03:46:20:BB:C8:54:F0:8F:DD
Authority key identifier: 1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38
Certificate issuer: /CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
Certificate serial: 019A725C9EEB264FFB903EFB50F979F9BF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
Manifest number: 0805
Signing time: Tue 11 Nov 2025 10:01:03 +0000
Manifest this update: Tue 11 Nov 2025 10:01:03 +0000
Manifest next update: Wed 12 Nov 2025 10:01:03 +0000
Files and hashes: 1: G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl (hash: 7Ee4CLorGGjspW1kgYRmioW3Hk3j7Sxo1p7bRoaY8vw=)
2: m-RL63I77tnbUHaZReiKcRHtR58.roa (hash: VHqfyzr+g1S2KroF/o4QYcY/QOnFZTun+jLqscdqvBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9e:eb:26:4f:fb:90:3e:fb:50:f9:79:f9:bf:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
Validity
Not Before: Nov 11 10:01:03 2025 GMT
Not After : Nov 12 10:01:03 2025 GMT
Subject: CN=afbcc9284fdaf9f5584b04034620bbc854f08fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:a8:0f:b6:d2:41:e7:f4:e9:ba:5f:b9:ab:
7a:a0:e4:cc:ab:50:2d:40:91:68:35:1d:85:4c:00:
81:90:fc:86:73:31:b5:d9:90:15:bc:a9:6d:e7:75:
4e:11:79:7e:e6:0f:69:af:51:ae:e8:22:5b:99:0f:
8e:8a:b3:eb:ae:ff:d1:a2:86:fd:bb:9e:a1:37:35:
e9:06:d5:45:2b:01:4a:5d:01:11:7f:20:bb:b6:0d:
2c:62:aa:32:d5:a8:57:40:01:14:7f:93:e3:28:4e:
73:7f:6d:f0:11:d2:7d:71:86:a6:fa:30:0a:ad:16:
34:01:3d:5f:1f:2d:70:33:00:be:01:00:a9:19:4a:
f5:12:9d:17:91:29:3e:82:b7:b3:09:21:52:6a:63:
70:d5:42:1f:c8:a7:cb:5e:22:87:a6:38:03:d5:ac:
60:32:69:77:35:ba:c5:49:1e:28:26:44:60:75:97:
6f:91:c9:b4:aa:19:c5:a0:2b:c3:99:da:12:96:a7:
4a:bc:0d:60:a4:21:3f:18:01:a8:b1:c2:a9:61:06:
00:0f:95:a2:06:23:1f:33:f8:6c:99:f2:19:d8:ca:
11:39:79:28:d1:0a:b3:d8:32:00:6e:a6:59:f6:fd:
3e:96:a1:38:28:03:de:6a:48:3d:d8:eb:10:27:45:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BC:C9:28:4F:DA:F9:F5:58:4B:04:03:46:20:BB:C8:54:F0:8F:DD
X509v3 Authority Key Identifier:
keyid:1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c3:35:53:58:8f:74:9b:e6:89:2d:e9:c4:f0:7b:be:23:cd:
71:1a:9a:c7:84:70:ed:52:e7:86:59:fe:2f:e9:1d:f5:be:05:
ab:3f:75:64:70:d0:b7:ef:66:be:28:d1:ba:d7:4a:3f:71:fc:
37:ef:6c:f8:fa:6b:de:84:51:dc:ec:35:ee:2e:76:16:ce:6f:
f8:78:84:5b:4e:3b:a3:74:cb:46:e3:d6:cd:35:19:a1:8e:b0:
36:bf:7c:84:bf:47:7c:07:b2:15:c6:df:aa:e5:3d:1d:b7:de:
27:1c:8a:8e:12:9b:3c:a7:dc:8b:ad:4a:60:c0:da:c0:4d:af:
f6:39:7c:b0:b1:be:59:c3:a3:59:2c:b8:19:e4:d9:3b:fd:64:
23:1d:87:ba:6d:0a:6c:6a:94:5c:3f:91:b8:21:a4:33:7b:1c:
b5:ba:94:de:0f:e6:d6:ea:d6:75:8b:00:54:a7:2a:fb:b7:89:
bd:c8:dc:c7:a9:84:fc:19:54:2a:40:39:3e:56:73:63:f6:d8:
ec:bb:46:34:f1:cf:75:22:1b:ee:b4:9e:1a:bf:26:d1:b4:96:
74:76:ff:6b:19:ca:2d:ce:b4:6d:60:6f:20:15:82:0e:d8:62:
bb:86:e2:ed:c3:6c:8d:f4:71:59:a4:8c:61:b2:cf:ad:6b:17:
8d:99:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:31 2025 by rpki-client