Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: u0fkPTiwLPAQEmbuUn5cyfDPvuuFsRIy8xTfOOsldyo=
Subject key identifier: 7D:AA:43:B1:98:C4:E8:A6:20:3D:FA:99:E6:D0:D5:B7:97:56:3F:13
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 019A209B5CA47B361C06AE0487E21BAE7511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 13:00:43 +0000
Manifest this update: Sun 26 Oct 2025 13:00:43 +0000
Manifest next update: Mon 27 Oct 2025 13:00:43 +0000
Files and hashes: 1: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: 8e3USUF6AGSLbekRm8AwmoiFAwn+W7huL9jcSHf92kk=)
2: a6z9s2B5USpArv-yW1XShxJdtpo.roa (hash: hfVnswmh8KT0yGpguvtRDoEqQ95xhx5KsIsgaJn/9yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:5c:a4:7b:36:1c:06:ae:04:87:e2:1b:ae:75:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Oct 26 13:00:43 2025 GMT
Not After : Oct 27 13:00:43 2025 GMT
Subject: CN=7daa43b198c4e8a6203dfa99e6d0d5b797563f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:08:70:15:67:57:96:15:a4:6a:02:57:bf:
f0:d7:bd:8e:1b:0a:d7:05:a3:52:b3:3b:30:15:b5:
bd:f2:97:a5:14:51:62:3b:8a:51:07:2f:7d:86:4b:
06:b3:04:ee:e5:ef:9a:4c:49:bf:ac:b0:d4:be:3a:
14:68:95:65:5d:6c:1c:f1:1d:12:44:99:ea:31:65:
98:a7:7c:18:6d:83:1c:9a:56:29:70:c5:85:58:d4:
61:8f:af:21:91:51:d4:1b:23:ff:42:44:b8:4b:b8:
da:45:8d:88:4c:9b:a0:fc:0c:e2:15:33:30:37:5e:
b4:0e:a3:42:0b:7c:c0:6b:da:7c:91:8b:77:89:8d:
e7:1c:65:16:9e:7d:fa:47:54:f4:fe:72:42:e2:eb:
7c:b4:07:bc:d0:9f:bf:3d:45:a9:6c:6b:46:2d:ae:
15:80:aa:ea:d8:c2:c8:b8:63:cc:a5:52:b3:4c:62:
e2:bb:f8:19:ce:b3:b7:56:96:f4:56:d7:a9:b2:ef:
b5:43:b9:3f:bc:52:44:4c:f9:64:cd:26:a2:65:4f:
d4:23:8d:4e:cc:b9:7d:ed:7a:87:71:0b:f8:31:76:
77:85:79:60:26:b6:48:69:1f:62:a7:dc:0c:42:61:
c3:8c:43:4f:47:06:91:42:6c:74:2a:9c:b3:d0:c5:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AA:43:B1:98:C4:E8:A6:20:3D:FA:99:E6:D0:D5:B7:97:56:3F:13
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2e:17:0f:1a:3a:ef:b9:a0:9e:82:05:16:5a:b7:a5:eb:52:
27:2c:e9:26:51:bd:35:91:f8:d2:4b:d0:57:d9:05:a1:ee:cb:
75:5c:ab:a6:39:27:55:35:2a:00:2f:b2:19:56:e2:f8:7c:27:
3b:71:74:f3:3d:99:af:a1:c3:64:e7:cc:c5:ba:c8:14:d7:c9:
83:64:ce:9c:db:35:16:da:59:41:72:af:d8:83:87:54:83:1a:
d2:a2:92:88:7a:22:47:d0:a7:63:10:1d:2f:b8:50:d5:f8:08:
19:97:e4:d6:33:7b:61:bd:36:a5:78:af:0c:0c:af:92:68:64:
a5:1a:28:c0:97:6b:3b:12:d7:4e:18:19:f8:ee:35:ee:35:e1:
a0:2b:ae:62:72:b1:d9:f3:b9:83:85:e6:60:39:7f:18:dd:d5:
66:fc:5e:01:62:2f:8f:5a:5d:5e:28:07:78:7e:82:de:67:90:
3b:8b:c0:88:32:9d:a8:dc:3d:05:2b:af:a2:39:f0:1d:66:80:
1c:c4:58:3f:75:fc:c1:c8:09:0c:ae:60:a0:64:a2:9c:47:45:
22:1b:34:aa:6f:ae:7f:3f:3a:1d:82:b4:ce:50:c2:31:31:76:
55:61:86:7e:c5:2a:65:62:94:e3:1d:16:14:74:4b:16:c6:f2:
a2:80:b2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:43 2025 by rpki-client