Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
File: G_GA7KTkQF6Heotjkjp1iNd-OdI.mft (raw, json)
Hash identifier: eUqJ4pqGrbONXf4RkBV4pKLU8JxWF3VklMrACMqfme0=
Subject key identifier: AF:36:B9:79:76:3A:FC:30:72:57:03:DD:B2:CA:A6:E6:15:93:0E:3E
Authority key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
Certificate issuer: /CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Certificate serial: 019A706E3A68D26B7E492C000EB784C8DAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
Manifest number: 0675
Signing time: Tue 11 Nov 2025 01:01:03 +0000
Manifest this update: Tue 11 Nov 2025 01:01:03 +0000
Manifest next update: Wed 12 Nov 2025 01:01:03 +0000
Files and hashes: 1: G_GA7KTkQF6Heotjkjp1iNd-OdI.crl (hash: 7Qtb3UlRwVrZTn3O7k1vUCYmPqTS26iq+D5iep10i0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:3a:68:d2:6b:7e:49:2c:00:0e:b7:84:c8:da:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Validity
Not Before: Nov 11 01:01:03 2025 GMT
Not After : Nov 12 01:01:03 2025 GMT
Subject: CN=af36b979763afc30725703ddb2caa6e615930e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:d4:54:07:ff:f7:cb:f4:64:cd:55:6a:8c:
42:ae:5c:54:eb:4f:9a:c7:29:c5:33:fd:10:38:8b:
eb:02:03:53:30:dc:77:d2:0f:05:96:5f:bf:73:ee:
8f:6d:ff:b4:4a:88:74:ff:d8:55:01:98:a8:dc:33:
0b:3d:3b:23:2f:df:e5:0a:a2:8f:87:b6:d3:2f:4a:
52:22:80:e1:e0:09:f6:78:6e:37:f3:8d:8c:a6:57:
d7:2c:39:c0:0e:ce:da:85:31:f1:ac:d0:dd:f1:41:
44:7f:72:2d:33:49:19:0d:ef:ef:08:9c:fa:92:4f:
98:9c:fb:d6:9f:f5:c4:c4:8b:25:5d:4c:52:4a:aa:
49:c1:3f:db:55:f0:a0:55:8c:61:7a:b1:6d:8f:59:
2c:60:27:aa:5a:5f:c7:fa:a7:02:c3:fd:b3:42:bc:
2b:81:40:4e:5c:6f:69:d3:cb:95:f1:c5:bd:21:5f:
68:54:d1:01:3a:a7:d0:c0:9c:4e:da:35:42:19:00:
54:20:b9:79:f5:62:33:77:df:ef:c0:e2:72:f1:47:
c4:29:df:74:7a:75:98:be:0a:aa:cd:a7:0e:f4:d0:
06:50:12:be:88:4d:63:b0:dc:3b:81:41:f9:6d:32:
7b:f6:e5:35:5a:6d:55:08:86:5a:a7:99:b1:87:d4:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:36:B9:79:76:3A:FC:30:72:57:03:DD:B2:CA:A6:E6:15:93:0E:3E
X509v3 Authority Key Identifier:
keyid:1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:83:b6:31:c3:59:51:f7:e2:4e:bb:08:ce:54:61:cb:ac:ac:
b3:64:2c:92:47:b7:82:7b:12:fd:98:c5:1b:fc:02:c6:03:7b:
59:64:f4:73:0d:81:9d:79:3d:56:ea:0b:9a:0d:a1:53:30:57:
52:ec:cd:65:15:b1:15:32:d1:ea:b4:ef:9f:97:92:46:af:a1:
32:fb:ba:aa:11:fa:5f:94:ac:a7:42:20:80:66:f2:1c:33:6e:
c4:4f:68:8a:e0:c8:cf:be:70:01:4c:fe:8a:89:b2:b9:54:ff:
a2:47:f6:9e:fb:c8:b3:bd:5d:62:3d:29:3b:f9:70:7a:32:ab:
7e:a6:40:60:bd:8f:70:c1:48:c3:fa:1b:6b:fc:70:30:3c:70:
21:cf:2b:8b:8a:1a:5b:cd:4c:45:2b:90:8d:16:cf:64:b4:93:
ed:5a:56:d0:a2:93:96:e8:fe:e9:27:fd:18:bf:ea:9c:26:4e:
a4:ed:4f:5c:ad:36:06:26:fb:67:a3:78:b1:c6:b2:80:b2:d6:
b7:fa:7d:b7:f6:02:ea:99:5f:78:0b:e7:38:5a:8d:16:03:47:
70:1d:a1:63:da:89:3b:d5:2a:b4:9f:27:e6:cd:6d:b7:6b:0f:
c5:af:b3:fc:40:0d:15:00:7c:e5:25:e4:f3:8f:fa:7e:5c:71:
b0:f8:d6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:46 2025 by rpki-client