Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
File: G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json)
Hash identifier: 7BUzEmbxezClA3V34yxOb9hiN8Y85z9SdH0arG9brag=
Subject key identifier: AC:22:0A:A7:50:D7:3A:F6:A3:BE:0C:C6:A4:D2:06:71:71:37:07:D8
Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
Certificate issuer: /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Certificate serial: 019A7112A5694B13174DFEDF5E3B8A33B90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: kUCQQiKN92JBvMOcfNNIE91g2Ud46wE8+tMG+7uC/F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a5:69:4b:13:17:4d:fe:df:5e:3b:8a:33:b9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=ac220aa750d73af6a3be0cc6a4d20671713707d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:11:4f:a9:61:6a:66:be:cd:9d:8a:2a:20:
50:7a:ff:8d:c9:84:07:fd:21:48:2e:53:23:1f:8f:
f9:6c:f7:e0:a7:7c:17:64:af:70:23:2d:55:ef:0a:
83:df:64:0e:57:30:44:d3:69:1d:ce:bc:83:b8:9a:
a1:98:93:51:1b:46:7c:16:3b:c8:8a:28:71:73:62:
4a:5b:63:06:d4:c7:d6:22:4a:bd:b0:ba:85:f7:c9:
7e:28:c6:43:11:6d:eb:35:a7:cb:7c:45:84:1a:b7:
63:c5:95:82:8c:42:95:b8:2e:fa:0f:2c:e4:8c:e1:
44:bd:1e:41:c2:fa:47:0c:79:7d:50:b6:a7:82:12:
57:18:24:b1:c0:18:db:a8:59:43:28:ec:3d:dc:13:
24:b5:e4:96:0a:a5:bc:81:0c:4a:8d:18:10:71:d1:
19:07:e9:54:e7:26:25:8d:f8:46:74:e0:47:01:c0:
0c:99:3d:9c:a2:35:24:d3:f2:72:11:ab:11:e2:5f:
f0:db:59:9c:5b:90:4b:da:27:77:a6:95:94:a2:73:
52:d7:07:d7:4d:77:5c:38:10:9b:a5:a5:2c:85:84:
02:45:a2:00:09:dc:d4:a4:59:6a:2a:e1:a2:10:fd:
c3:3c:37:12:0c:29:93:19:73:c4:00:6a:24:ac:0d:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:22:0A:A7:50:D7:3A:F6:A3:BE:0C:C6:A4:D2:06:71:71:37:07:D8
X509v3 Authority Key Identifier:
keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:74:60:2e:9c:85:7d:9a:fe:3c:4a:9b:5c:e2:0a:97:ef:1d:
35:36:a9:bd:06:8f:fc:74:93:c5:39:af:b1:55:3d:e1:d0:1d:
f4:d5:68:d1:dd:ea:e5:70:18:30:c0:38:3c:c7:b1:98:0a:c5:
48:be:f6:ea:d6:75:c8:ed:02:94:59:b6:81:f0:41:75:6c:90:
c1:ef:0d:4c:3c:60:5d:8f:8e:28:f6:6d:c7:10:fa:25:8b:ca:
e3:56:f9:9f:fa:73:a7:8d:d4:70:64:e5:fb:70:ed:3d:97:27:
00:1d:d5:17:05:fc:fb:8e:07:ac:cf:8a:7a:94:4f:1e:ed:51:
27:98:69:d7:07:f9:ec:c2:02:c5:d1:4a:05:81:51:be:28:14:
a8:81:0b:d7:84:36:2d:57:35:af:b3:3f:39:58:d7:75:e8:84:
28:34:d1:1f:6b:fc:29:83:48:e2:20:5f:91:a0:4e:73:0f:5b:
3b:23:1e:be:1a:b9:6d:9d:8b:5a:ef:84:34:74:1a:7c:d4:c1:
5f:46:61:a7:6d:b1:fe:99:95:97:f3:d9:b3:8d:a0:41:39:9e:
77:00:e6:e7:ca:04:2b:09:a3:62:70:bc:8c:65:84:b4:85:93:
91:f7:33:9b:e1:65:3c:c9:ce:ed:eb:82:16:57:fd:4c:07:b4:
2c:6f:21:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:14 2025 by rpki-client