Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
File: G6UWeIg5f_nKqET1VP-DfP2_lyI.mft (raw, json)
Hash identifier: LHQM7azVSzp4deTJLe1qBh5rpp1EewKPlXUaEMaVl/U=
Subject key identifier: B2:84:48:49:6C:D4:5C:62:48:0F:90:38:A8:6C:A5:83:04:53:D5:6D
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Certificate issuer: /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial: 019A2CD6196F15C56EE38B8EB5A475DE6FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
Manifest number: 1652
Signing time: Tue 28 Oct 2025 22:00:19 +0000
Manifest this update: Tue 28 Oct 2025 22:00:19 +0000
Manifest next update: Wed 29 Oct 2025 22:00:19 +0000
Files and hashes: 1: 6AZTajZMqZoSwaR7hhqu_H7CdE0.roa (hash: xxeWZ0X7ua9pg1fHVRPX6E4scyCZRjZl/DRkbbQExWc=)
2: Be_FrvCQzJEE8AcZD48fTBBydhc.roa (hash: vmCJB59VLswrUqU073qVTINZ2vimvwz+QJwA8ddtgvQ=)
3: G6UWeIg5f_nKqET1VP-DfP2_lyI.crl (hash: YZEpzKHcKW/1EK4VHAUOVNDyh+6yQpvQPvnXRxzVZC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:d6:19:6f:15:c5:6e:e3:8b:8e:b5:a4:75:de:6f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Validity
Not Before: Oct 28 22:00:19 2025 GMT
Not After : Oct 29 22:00:19 2025 GMT
Subject: CN=b28448496cd45c62480f9038a86ca5830453d56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:b8:de:c0:6b:a5:11:da:59:b7:1d:a6:8c:
c9:f3:9c:5a:2f:57:45:64:d9:99:63:20:24:60:1f:
57:6d:17:04:73:ad:96:17:5a:0e:a3:56:e8:9b:46:
0b:9b:64:42:8c:ae:84:18:25:6b:90:bc:70:ea:0c:
c9:0d:1b:07:9f:38:4e:ef:e1:54:bf:45:b0:7f:96:
3a:37:57:2c:f1:0a:95:f9:d2:53:e9:45:eb:4b:c9:
93:df:42:c4:dd:5d:e8:8e:2d:0a:c7:d1:d8:47:fb:
ef:8a:1e:9f:f8:d7:10:c9:5f:49:ac:f5:cc:89:29:
b3:07:37:f1:11:f4:45:04:2c:23:9c:6e:2e:93:7a:
51:72:6f:d4:9b:4c:99:13:ea:2e:5c:78:6e:60:59:
22:86:85:3d:21:d7:36:72:40:8e:32:2a:ca:38:49:
a0:fa:25:1c:b3:cb:b2:19:a0:9d:97:5a:e6:24:7a:
9d:f0:02:f3:23:fd:60:af:5c:bf:dd:fe:16:f7:22:
5f:ab:a4:d7:71:ef:24:d3:12:a3:ed:9b:e6:e2:c8:
9d:8e:9d:3d:72:97:bc:f7:50:cd:aa:3a:2c:e2:e3:
81:38:82:a5:77:81:0f:61:fc:92:32:7d:9a:c1:2b:
c2:06:af:fd:4d:65:c2:bc:82:71:ef:e4:0d:27:b3:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:84:48:49:6C:D4:5C:62:48:0F:90:38:A8:6C:A5:83:04:53:D5:6D
X509v3 Authority Key Identifier:
keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6d:ce:12:53:54:9c:ec:b1:1b:3a:af:1f:f5:2e:8f:cd:a7:
d6:ed:c3:ee:c4:1c:0f:66:13:1d:25:f9:3c:a5:3e:e7:cb:05:
b6:da:a0:ec:f8:3d:ad:84:2f:1d:c1:31:7c:6c:ed:44:96:30:
52:48:8e:a1:35:81:29:30:0e:8d:e2:44:3f:c0:11:7c:73:d1:
dd:9e:8b:b8:39:7b:df:90:2e:9b:09:ac:bc:58:24:bd:3c:44:
45:06:e6:37:da:4f:14:d3:7d:e6:2e:94:38:a2:d2:7b:d9:81:
49:c2:ab:18:c5:e6:bc:1e:5d:49:21:00:9b:5c:8f:f4:59:20:
0d:ea:7b:de:cf:da:62:5b:90:98:84:7d:22:3e:fe:86:5f:94:
9b:ee:6d:4e:fb:c6:30:bd:ed:98:7b:42:ae:d2:0b:27:e4:80:
36:89:4f:82:28:a6:1f:f6:19:d4:3b:f9:82:6e:bb:cd:5a:70:
fb:05:fb:c6:68:1a:42:8b:d5:d2:cd:58:c9:b3:0f:7d:a3:d6:
a5:f4:02:ec:b2:5b:94:a8:63:a8:fb:87:31:49:e1:aa:4e:f2:
bc:62:d7:d9:b6:75:51:1a:e5:a5:64:7f:86:60:0b:1a:9d:aa:
87:7a:04:4f:f1:f4:69:ab:90:24:31:36:ee:15:0a:51:0e:87:
f9:83:62:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:43:18 2025 by rpki-client