Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
File: g4dr-7WujP4Ra7X18oZKEWITqk8.mft (raw, json)
Hash identifier: gNtAxkCQXlrA9ydvNgq/jt2khvb2DJSCcFZJy2d8vYM=
Subject key identifier: 64:F2:7C:19:6D:E6:C0:D1:27:49:6E:6D:6C:62:4A:4E:46:B3:1E:CD
Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
Certificate issuer: /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Certificate serial: 019A70DBE7FA7EC25E948B77AC00B67E1598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 03:00:51 +0000
Manifest this update: Tue 11 Nov 2025 03:00:51 +0000
Manifest next update: Wed 12 Nov 2025 03:00:51 +0000
Files and hashes: 1: g4dr-7WujP4Ra7X18oZKEWITqk8.crl (hash: Xw+JBLmdPbpeSn/gfYKubkBtDAzAGxjunjTRAgc/6dQ=)
2: on6c4T5uruUZ19cPvyYxdOa3Uo4.roa (hash: DzOTGbti7Ycex9SFmllizCyD+Zg7ddBWN0hhpKZi1gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e7:fa:7e:c2:5e:94:8b:77:ac:00:b6:7e:15:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Validity
Not Before: Nov 11 03:00:51 2025 GMT
Not After : Nov 12 03:00:51 2025 GMT
Subject: CN=64f27c196de6c0d127496e6d6c624a4e46b31ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:3f:01:38:a0:2d:49:ab:5e:e0:a6:70:09:
5c:ff:2d:b1:f7:59:d0:26:6a:64:e3:82:43:82:07:
41:28:fc:66:a2:0f:ff:90:3b:f8:95:b6:67:a0:ce:
9f:28:b0:77:f8:0e:d2:64:32:63:1f:97:b5:b8:0e:
eb:8a:be:2f:d4:fa:00:7a:cd:17:ed:56:b8:82:53:
62:c7:77:f7:65:a5:34:9c:94:be:f4:32:43:65:b2:
a3:fd:31:5f:8f:7b:5b:93:b4:4c:54:23:73:51:6d:
92:ca:61:b1:53:24:8f:16:8a:2f:a8:02:59:ed:9c:
0d:0a:50:78:8b:3e:6b:cd:1b:7a:d2:50:35:45:49:
d7:a9:47:91:3c:5d:87:7b:51:5f:47:d5:4f:ec:48:
fb:47:99:ee:f4:33:b3:6f:76:1f:f7:25:3f:dc:38:
70:67:c7:ed:44:88:7c:5e:99:85:e2:28:8e:32:6a:
56:56:a7:1a:6c:00:22:74:d9:88:ea:1d:89:6e:77:
b4:e2:6d:4c:26:23:87:0d:b9:86:74:f9:7f:63:ea:
57:5c:b9:7f:a5:ff:83:25:c5:50:42:66:9d:0e:40:
19:c8:0f:62:b8:4a:17:87:f3:ca:67:88:21:a0:59:
72:11:3b:86:20:27:24:48:fd:93:dd:89:f4:63:b4:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F2:7C:19:6D:E6:C0:D1:27:49:6E:6D:6C:62:4A:4E:46:B3:1E:CD
X509v3 Authority Key Identifier:
keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:26:c7:35:84:6c:d1:13:9a:28:1e:bc:a9:d0:1d:bf:f0:92:
71:a2:25:82:7d:46:9d:e0:7a:d7:5c:ba:40:ea:9f:88:1d:eb:
d7:71:84:f3:cf:0d:84:ba:ae:94:90:72:5f:7d:32:18:fa:6c:
92:45:26:65:7d:63:a6:c3:7e:49:a2:63:de:64:9b:dc:3c:a2:
31:84:1e:22:d2:90:bd:d8:89:cb:6c:74:cc:22:5c:f6:70:ec:
50:5d:b4:28:47:09:ff:0a:42:35:94:aa:e6:b2:57:3f:64:27:
4c:d0:27:5e:11:32:3f:98:d3:bf:d8:dc:eb:51:cd:3f:59:c6:
33:b2:c8:27:1b:43:b9:28:16:c9:c5:d6:de:17:4f:51:31:4e:
70:ef:e1:5b:3e:46:db:cb:ec:c5:ab:f7:bc:1c:84:ae:42:8d:
3a:b1:e9:eb:e3:31:2b:27:a2:ec:99:70:ec:30:b6:5a:75:a3:
2f:00:6a:ba:2c:c0:ed:07:e8:07:66:62:47:f0:fb:c5:d9:16:
16:1d:a5:0e:f8:d0:bb:de:04:91:fe:97:2d:cd:5f:21:a0:a2:
09:3c:57:28:83:d4:9b:f4:c5:1d:70:ec:db:4d:e6:e3:a9:da:
31:80:1e:6f:37:4f:cb:a9:af:c7:b2:25:45:52:b1:63:c2:48:
98:f0:f7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:38 2025 by rpki-client