Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: QG3XIcZljEg4ORQwP4JxWNTOI1V78Th31nVc+m/vZUA=
Subject key identifier: DE:59:16:25:FB:3C:7A:F9:61:0D:2B:8F:C5:FD:D4:49:DA:AF:FB:02
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 019A73A6DDE5D485911DF6C38201D1AF0E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0C2B
Signing time: Tue 11 Nov 2025 16:01:46 +0000
Manifest this update: Tue 11 Nov 2025 16:01:46 +0000
Manifest next update: Wed 12 Nov 2025 16:01:46 +0000
Files and hashes: 1: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: p4Q+ZegC22CWAg4XLXweWMhazebaFP8ANkCd2p/vSz8=)
2: TRfMCYgQom2qb1ltkPZ8pDFMPbw.roa (hash: B/bZzAE30Cbi1NKH6O3ZfRrv6UmAF6KTnp6VWp5movg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:dd:e5:d4:85:91:1d:f6:c3:82:01:d1:af:0e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Nov 11 16:01:46 2025 GMT
Not After : Nov 12 16:01:46 2025 GMT
Subject: CN=de591625fb3c7af9610d2b8fc5fdd449daaffb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:81:f9:78:30:1b:4b:75:01:d1:96:08:d9:
04:d8:8c:aa:8e:1f:fa:23:dc:90:70:ed:a9:fc:a3:
80:49:ec:08:1d:dc:d7:ae:76:c8:cd:f2:0a:41:79:
39:eb:d4:5c:6e:03:9b:f0:37:46:7e:b8:54:51:83:
b4:9b:1b:e3:02:e7:d1:bf:71:7b:e0:00:76:1c:61:
e2:c1:dc:bb:7f:0f:79:f6:a5:30:77:d9:82:cb:9e:
a2:d0:37:70:b9:81:06:5c:28:77:a6:d4:93:ad:af:
43:f9:df:c9:72:78:d1:86:cf:04:56:16:14:75:11:
22:fa:8d:8c:cb:72:01:98:49:b6:e0:08:5a:50:2f:
56:59:0e:cc:d4:f9:f5:74:38:96:e0:0d:dd:26:53:
dc:95:d3:c9:c2:74:9e:e9:39:aa:f6:fd:ef:63:a1:
ca:db:7e:af:1b:81:bc:c2:31:31:55:f2:71:13:d3:
c7:13:ef:6e:b6:a4:29:ec:32:3d:8b:a8:09:44:0d:
8b:d5:ed:1f:d2:f7:fb:fd:89:21:f6:46:f1:8d:86:
24:33:e0:7a:5e:38:bb:05:65:e4:1b:62:2d:62:ea:
99:3d:b3:4e:3e:a8:02:39:ed:e3:14:77:db:0b:4f:
21:be:1b:7a:7c:4a:8c:a2:f7:fd:6c:9b:59:64:75:
b5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:59:16:25:FB:3C:7A:F9:61:0D:2B:8F:C5:FD:D4:49:DA:AF:FB:02
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:04:0a:1c:14:e0:d8:19:57:5f:df:f1:76:ab:97:70:9f:a0:
a3:13:5b:58:72:a4:2d:98:78:73:ac:e4:1a:54:86:77:3f:6d:
2f:7a:32:ff:0b:d0:91:ac:a5:f4:e2:cd:17:eb:be:9d:26:b2:
d2:14:fe:62:c3:a6:b8:db:fa:ef:f3:54:fe:2e:bb:21:6f:0d:
31:5e:c5:56:d8:2a:51:fd:ea:c3:e1:4f:3a:0e:a7:c4:32:e7:
96:61:e4:98:62:6b:eb:43:85:27:10:6b:57:09:8a:6f:c8:04:
9f:70:98:22:29:3b:08:d3:6b:e0:a2:3e:2a:26:6c:c5:fb:ce:
dd:f8:c0:24:84:7e:c4:e4:19:c3:02:1f:06:cc:73:d3:fb:35:
b3:f2:2f:e3:c8:8f:f9:02:21:94:d9:07:7b:aa:ee:b5:af:00:
cc:f0:80:c8:dd:7c:80:9f:e1:7d:f1:9d:04:85:1f:dc:9b:4d:
a2:4d:07:47:58:94:b7:2f:7d:45:98:44:ea:62:71:0e:51:aa:
2b:78:eb:94:1e:5d:6a:23:94:22:8b:a6:6b:1a:22:17:28:2b:
29:03:ff:6a:d8:1d:c2:ae:2e:a1:13:01:6e:d9:11:aa:a1:80:
c1:82:88:82:79:b6:bd:3d:b4:51:b7:ad:ba:7f:ac:c7:31:4b:
6e:a9:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:23 2025 by rpki-client