Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: mfdAw/IeYjGRjqFn8QaU+/9viUP5lLuXFCbw2z7DvGE=
Subject key identifier: DE:8D:F8:62:E4:DB:6A:71:B4:34:A0:81:AD:BE:6C:AD:A9:CD:71:96
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 019A71B93211B384B2876E8DF7847C60A059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:33 +0000
Manifest this update: Tue 11 Nov 2025 07:02:33 +0000
Manifest next update: Wed 12 Nov 2025 07:02:33 +0000
Files and hashes: 1: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: pmhbFEx0CNikjGfkRQ6GN4P8VtPV9g/BqEt/CUJ5gW8=)
2: hwl_pJftKoYgWaDLkyi1NUP4Iqo.roa (hash: zD6uA78lx0+tAtyuIqfvTt4SALf3UDD47V0kgwtFI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:32:11:b3:84:b2:87:6e:8d:f7:84:7c:60:a0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Nov 11 07:02:33 2025 GMT
Not After : Nov 12 07:02:33 2025 GMT
Subject: CN=de8df862e4db6a71b434a081adbe6cada9cd7196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:c2:8c:92:82:8c:bd:74:2e:59:51:5d:91:
05:55:e5:9d:80:96:8f:8d:1c:9d:70:90:7e:d5:9a:
0a:64:a6:6e:58:f2:46:93:ea:54:9b:8e:ff:c3:99:
e5:f3:f9:6d:42:69:dc:71:fd:e3:f4:b5:a4:e0:c8:
1b:ba:86:cd:13:5d:15:8e:09:41:41:fe:0a:36:ef:
fb:b6:0c:99:d4:6e:1d:6a:5b:ab:90:55:cd:09:34:
d2:5f:10:30:6b:cf:7b:9e:10:5b:ed:32:30:e0:1e:
1d:93:03:d3:b5:ee:35:f9:ff:a7:90:aa:dc:9c:14:
71:16:ce:6b:00:2b:f8:0c:d2:60:c5:96:7a:44:ca:
a7:99:e5:1e:b1:d1:3d:82:44:53:23:14:7a:92:16:
d8:46:c7:90:36:d2:13:e8:c8:ac:01:cf:68:d3:91:
69:2c:5b:d0:37:4e:88:01:ee:8b:05:6d:dc:11:11:
1e:d0:d7:95:12:ea:ac:e1:55:62:5d:05:9d:3a:22:
f1:bf:27:bf:6a:3b:8a:91:23:d6:72:73:0a:ba:f5:
d8:15:d8:c0:e0:32:66:8a:36:b3:ae:19:e4:9f:b8:
8d:67:2a:8a:74:e7:1f:a2:e8:08:20:81:9e:f5:fd:
89:ea:e4:46:ba:dd:67:28:00:e1:71:00:6c:7d:21:
34:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8D:F8:62:E4:DB:6A:71:B4:34:A0:81:AD:BE:6C:AD:A9:CD:71:96
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0c:fc:cd:5a:4c:f0:4d:7e:d3:eb:aa:53:e0:29:c8:bd:6f:
1e:42:a9:fe:c0:a5:9a:b0:a4:bc:b7:0b:6d:05:56:36:63:79:
5a:02:b8:14:b9:ba:d6:34:9c:5f:f1:31:59:61:6a:63:52:a5:
dd:83:ba:26:32:7a:38:79:11:99:16:4c:e6:7c:f1:23:b1:59:
5d:b0:b7:8d:0d:20:23:ce:c8:fe:40:5d:71:c4:01:84:2e:54:
d6:9e:f6:4a:fc:ec:61:92:dc:1c:55:0d:0b:bf:e8:c9:d5:86:
57:e4:61:f9:a6:4b:76:b6:8b:a1:5c:e6:76:6c:16:90:78:e1:
44:7f:4e:63:15:e1:2b:8f:c8:cf:b0:61:bf:9c:3b:f7:60:4b:
0a:62:e9:a7:ef:05:88:22:f2:29:74:27:15:24:30:11:0d:68:
08:e3:6d:01:56:98:f8:90:7f:2e:f2:66:55:c8:07:dd:27:66:
f0:7f:e5:0c:ea:6d:22:41:90:9c:56:39:e9:9f:9e:e2:1b:c8:
c6:ad:c0:e5:b4:6c:df:52:7b:80:0e:52:6e:13:9f:ff:ed:f5:
c6:7b:17:83:89:61:02:9d:a5:ff:4d:ca:2a:93:cb:a8:37:27:
62:03:99:c8:0a:b9:78:84:20:75:fe:e4:d6:25:4d:1c:ca:36:
ec:42:0c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:29 2025 by rpki-client