Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
File: G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json)
Hash identifier: WSNoMDCWyKYS8alCLCygZGgieqDCkm6KfJ4ekwYnBNI=
Subject key identifier: 27:A2:C6:78:40:BB:1C:71:1A:D2:B5:78:0A:39:F9:DB:E7:50:12:5B
Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
Certificate issuer: /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Certificate serial: 019A71B77F9774742F074CD0990364DF728E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
Manifest number: 15FF
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: J3geQlVbJ3r7bLtAG+wKfEl54ZTaXpkS4teqM0YCTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7f:97:74:74:2f:07:4c:d0:99:03:64:df:72:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=27a2c67840bb1c711ad2b5780a39f9dbe750125b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:ba:f6:87:cb:1e:65:02:60:7b:a0:30:5b:
e3:c2:84:4f:71:8e:0a:e0:8a:87:5f:17:5b:d1:9c:
9b:c3:5f:29:39:d0:d8:ce:d9:35:c1:c6:98:b0:44:
2e:49:26:5b:f6:a2:0b:be:a9:ae:de:25:98:dc:d1:
61:aa:58:0e:91:24:5c:12:60:c7:cb:ec:27:c1:90:
21:be:02:81:3c:2e:9e:6a:7c:8f:9e:e0:8e:20:fc:
29:12:8a:85:b2:00:46:49:3e:3c:71:09:03:f8:05:
21:68:35:14:19:1f:15:b3:2f:89:eb:49:94:dc:e9:
8a:9f:bb:d3:b7:f2:6d:3b:30:ae:72:7c:17:ac:78:
91:63:d3:ff:91:75:51:51:d2:0d:99:62:5a:21:ab:
3a:42:c4:04:d3:82:49:f2:14:99:51:56:ad:47:2f:
4b:49:ef:d2:a2:94:4e:9b:88:33:cf:93:5b:12:bb:
4c:71:c2:f7:18:0b:54:81:fc:94:91:03:d9:d8:b9:
02:c9:80:18:8e:c5:a5:a1:c8:ac:cb:e8:14:2d:7c:
3c:79:4a:74:9d:4c:52:8a:5d:45:6a:8c:81:79:d1:
75:b6:73:62:4e:fe:57:f9:6a:a3:9d:ae:d6:dc:bb:
9b:9e:a5:bf:07:60:52:b8:3d:0b:53:cd:cf:4c:2c:
be:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A2:C6:78:40:BB:1C:71:1A:D2:B5:78:0A:39:F9:DB:E7:50:12:5B
X509v3 Authority Key Identifier:
keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:59:45:fe:ef:cd:3c:48:aa:ef:e4:be:56:f9:b0:50:4b:d8:
c6:83:5c:0b:15:64:c1:13:9c:52:79:d9:28:6e:25:28:11:82:
15:de:ff:f7:24:79:f7:ce:3a:e9:51:3c:12:03:c4:21:1e:02:
d0:65:5e:54:24:fd:b2:e4:ee:43:3f:60:e6:59:69:e0:06:bd:
87:44:d3:25:01:b3:67:14:75:f6:48:d3:43:e6:e3:4d:ff:e6:
1c:56:a0:d1:5c:35:68:5b:fc:40:bf:ca:ca:71:3c:3c:51:14:
f3:2d:11:4d:ae:5a:d5:86:b7:06:97:af:fa:e7:0a:46:b5:b6:
48:fd:b5:55:93:50:86:3c:6a:d2:85:fc:e4:b0:29:16:fc:92:
f1:97:42:d5:d6:8e:53:a8:3c:89:c4:69:d5:74:ce:80:99:01:
de:99:7c:4e:af:6d:ae:db:d4:51:92:02:1c:91:1d:2a:27:c6:
f6:c7:a0:75:1b:10:15:47:4d:dc:56:51:1f:55:5f:29:e3:45:
7a:3f:0e:86:46:b9:cf:f8:b6:db:89:0a:e0:83:92:f8:4e:7f:
20:72:65:81:4c:95:7c:ca:99:cb:08:80:19:a0:9f:95:5b:8e:
dc:cf:1f:16:b6:7c:13:40:3c:ba:81:67:99:77:05:a5:8d:83:
4f:1a:87:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt3+XdHQvB0zQmQNk33KOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWJiYmJlYjZlOTIyMzE3NmNhNWExZGYxNDk4OTg2MDE3
ZThlMjgwHhcNMjUxMTExMDcwMDQyWhcNMjUxMTEyMDcwMDQyWjAzMTEwLwYDVQQD
EygyN2EyYzY3ODQwYmIxYzcxMWFkMmI1NzgwYTM5ZjlkYmU3NTAxMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziG69ofLHmUCYHugMFvjwoRPcY4K
4IqHXxdb0Zybw18pOdDYztk1wcaYsEQuSSZb9qILvqmu3iWY3NFhqlgOkSRcEmDH
y+wnwZAhvgKBPC6eanyPnuCOIPwpEoqFsgBGST48cQkD+AUhaDUUGR8Vsy+J60mU
3OmKn7vTt/JtOzCucnwXrHiRY9P/kXVRUdINmWJaIas6QsQE04JJ8hSZUVatRy9L
Se/SopROm4gzz5NbErtMccL3GAtUgfyUkQPZ2LkCyYAYjsWlocisy+gULXw8eUp0
nUxSil1FaoyBedF1tnNiTv5X+Wqjna7W3LubnqW/B2BSuD0LU83PTCy+HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeixnhAuxxxGtK1eAo5+dvnUBJbMB8GA1UdIwQY
MBaAFBvru7626SIxdspaHfFJiYYBfo4oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84MzlmZDgtYzI4Yy00MTEyLTk3OWEt
N2VjNDAyZWNmYjVjLzEvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS84MzlmZDgtYzI4Yy00MTEyLTk3OWEtN2VjNDAyZWNmYjVj
LzEvRy11N3ZyYnBJakYyeWxvZDhVbUpoZ0YtamlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1lF/u/N
PEiq7+S+VvmwUEvYxoNcCxVkwROcUnnZKG4lKBGCFd7/9yR598466VE8EgPEIR4C
0GVeVCT9suTuQz9g5llp4Aa9h0TTJQGzZxR19kjTQ+bjTf/mHFag0Vw1aFv8QL/K
ynE8PFEU8y0RTa5a1Ya3Bpev+ucKRrW2SP21VZNQhjxq0oX85LApFvyS8ZdC1daO
U6g8icRp1XTOgJkB3pl8Tq9trtvUUZICHJEdKifG9segdRsQFUdN3FZRH1VfKeNF
ej8Ohka5z/i224kK4IOS+E5/IHJlgUyVfMqZywiAGaCflVuO3M8fFrZ8E0A8uoFn
mXcFpY2DTxqHZw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:57 2025 by rpki-client