Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
File: Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft (raw, json)
Hash identifier: MnaLT+0LISWKG+MjLKhIwCvrdpXSulhSpjteqfr8LzI=
Subject key identifier: F5:48:29:19:67:B2:81:46:11:44:80:A6:F9:F8:72:48:EC:BC:BD:C9
Authority key identifier: 1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60
Certificate issuer: /CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
Certificate serial: 019A729386A7B3F5FE6A68555248A6872E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 11:01:02 +0000
Manifest this update: Tue 11 Nov 2025 11:01:02 +0000
Manifest next update: Wed 12 Nov 2025 11:01:02 +0000
Files and hashes: 1: Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl (hash: FLNTVXaqcx3i08QqBgrJf4tS8gLHl344Ws6etx1kzjs=)
2: kWjhD15-ZoWva0lEp7OiEph-8ds.roa (hash: Wxf7YJjEdXTZXm4jCO3HEdDpnmTwoG36OiWMBmcqP2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:86:a7:b3:f5:fe:6a:68:55:52:48:a6:87:2e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
Validity
Not Before: Nov 11 11:01:02 2025 GMT
Not After : Nov 12 11:01:02 2025 GMT
Subject: CN=f548291967b28146114480a6f9f87248ecbcbdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:50:0d:f0:42:ca:39:53:ed:54:75:ed:ed:ab:
14:dc:81:15:3e:15:21:56:00:26:6e:5f:b6:84:51:
3b:f3:ba:69:36:68:c0:a7:19:25:b3:22:6a:8c:1a:
1a:fe:c2:fa:54:8d:34:2d:96:31:66:28:c3:51:37:
c0:0a:6e:82:90:06:78:83:10:7a:ca:3d:e1:9f:d3:
c9:27:50:15:89:35:59:11:20:56:63:6e:60:09:75:
31:45:bc:92:40:6d:79:f3:49:66:17:f4:18:eb:82:
30:b3:c1:2b:25:89:03:89:75:50:2b:aa:b4:38:37:
10:71:58:c6:9e:8e:15:f9:9a:6e:8a:50:69:31:6e:
bd:09:31:29:fe:cc:66:6b:03:86:c6:85:b3:c9:6c:
02:22:6d:ba:11:b8:10:91:5b:a8:19:d8:e9:58:30:
a2:d1:c8:58:54:f4:a6:44:59:37:de:65:71:d4:4b:
ab:f4:38:84:50:17:8c:40:d7:0e:cf:81:a1:f5:bf:
eb:11:83:60:67:a2:8d:9b:47:01:65:06:0a:25:c3:
5b:62:60:49:35:b1:7f:a9:9c:d7:0d:81:c4:bc:e3:
7e:2c:dc:1a:ef:a4:2a:38:d6:48:39:a2:5c:08:35:
0a:fe:dc:8c:bc:35:90:3d:49:17:ad:1c:73:fb:16:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:48:29:19:67:B2:81:46:11:44:80:A6:F9:F8:72:48:EC:BC:BD:C9
X509v3 Authority Key Identifier:
keyid:1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a3:7b:dc:ac:eb:4a:c6:80:9e:77:92:c4:07:fb:db:f4:50:
55:9c:7d:31:ea:ed:8b:af:b8:c2:97:7d:e1:88:6f:59:b6:5a:
a3:06:fe:06:60:c3:60:ac:ed:80:a5:30:9b:3c:b8:01:3c:f2:
f7:1b:ea:94:2e:fd:04:30:f0:87:a6:50:39:41:39:6a:4a:54:
64:38:32:8d:03:93:ae:02:1e:d6:92:57:b4:79:60:8d:73:8d:
e8:ff:09:e8:77:37:50:bf:fe:d3:38:0f:86:08:cf:38:e1:58:
52:1e:96:b8:48:c7:c6:5c:b5:48:7a:51:4a:1f:6f:f9:6a:c0:
ce:fe:6d:b6:c3:20:0b:a2:78:ba:16:c1:10:76:0a:42:23:08:
f6:91:27:07:c9:89:f6:20:ce:64:40:a2:4a:99:96:63:bb:25:
cf:1b:cc:42:a6:4b:9e:b5:48:4d:a3:e6:36:00:a1:fe:ff:ce:
02:73:12:0f:6f:32:86:45:ba:3a:d6:57:4b:89:e7:5b:5a:6f:
91:5f:d5:c2:ea:f2:14:a8:5f:66:78:47:e6:f5:07:10:08:69:
0e:83:de:1a:41:5b:22:9e:0d:98:c0:e0:71:00:a4:f0:d1:23:
cb:39:f3:cd:de:e3:f5:9e:0b:5d:7b:bc:a0:68:e4:38:1f:ab:
fd:4b:c1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:27 2025 by rpki-client