Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: nLO92Nt2l5ODTjd1OMX3dMKhW9TbWti/jzB3/Ax/AgA=
Subject key identifier: 1F:29:47:01:C2:17:42:9B:37:B5:32:5C:52:F8:B1:7E:DE:55:26:C7
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 019A269D1055945967790B915D36D4DF644F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 0F1F
Signing time: Mon 27 Oct 2025 17:00:18 +0000
Manifest this update: Mon 27 Oct 2025 17:00:18 +0000
Manifest next update: Tue 28 Oct 2025 17:00:18 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: DvKqGnF1M/57eK/ZLQKklGkXrrRQUXdZ6kOCHtovmY8=)
2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:10:55:94:59:67:79:0b:91:5d:36:d4:df:64:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Oct 27 17:00:18 2025 GMT
Not After : Oct 28 17:00:18 2025 GMT
Subject: CN=1f294701c217429b37b5325c52f8b17ede5526c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:dd:c8:75:81:8b:07:dc:43:8a:a9:5c:40:
70:bc:94:10:f8:8f:54:98:b6:db:85:fc:a4:fe:b5:
4f:29:b3:92:a8:2c:7d:e5:f3:b5:a5:f8:f6:e1:1c:
fa:76:89:f2:36:1e:da:c4:1a:56:8c:22:64:e7:15:
33:97:e3:e8:9d:05:63:6b:00:08:f3:f7:b3:3f:c0:
c0:ec:d3:f2:e2:8c:d9:95:a0:17:cc:2c:16:46:5c:
17:55:99:dd:13:56:ee:f9:ec:a8:ff:74:4c:10:4f:
f9:89:e9:09:1c:dc:86:6e:a6:97:33:ae:35:11:7a:
8d:ce:29:0e:f2:e2:2f:d4:cc:d6:e5:9c:74:c1:fa:
8a:75:cc:26:8a:e3:c6:87:34:32:20:fe:18:a6:ee:
66:85:2f:ab:34:04:e5:87:5e:71:4c:6c:65:08:22:
9e:ce:f8:48:1b:73:c2:a7:c1:55:a8:df:72:8e:74:
94:2b:c1:66:03:d9:1a:43:49:80:55:3f:7b:4e:66:
5b:b1:09:aa:89:0d:53:44:12:3e:e4:7a:ad:e6:6c:
c4:85:e6:8a:7d:79:e3:7e:71:ac:c2:bb:1c:7c:9e:
b0:ae:0d:d9:a9:36:df:ba:a6:b6:81:77:e1:7c:1b:
55:df:eb:a0:7f:cd:77:8c:08:f6:05:53:d8:cf:3d:
53:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:29:47:01:C2:17:42:9B:37:B5:32:5C:52:F8:B1:7E:DE:55:26:C7
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8a:93:18:32:08:00:b9:31:3e:0c:1d:b1:65:dc:2e:50:d3:
51:60:f4:92:20:9e:66:03:e5:18:2c:28:eb:cc:33:00:bd:a4:
28:b5:5b:0f:cb:fa:74:2e:b1:d1:91:72:66:57:67:f6:6f:ad:
3c:0a:41:d0:e2:22:f1:5f:ef:cb:8c:8b:95:94:b0:27:ee:8a:
ec:00:63:97:7b:ea:b4:5f:aa:9d:ac:41:f1:09:a7:b8:24:ca:
a3:0b:b1:95:05:a2:f7:a0:e1:67:3a:46:da:d7:9f:7f:e5:66:
e1:27:c0:ce:00:d0:20:e6:70:d5:dc:f3:45:67:2d:24:69:48:
1b:80:9e:65:1d:4d:58:dc:ab:f1:9a:a0:31:54:9d:a9:de:32:
91:6c:25:f6:66:8d:77:cc:7d:d8:52:0c:aa:4a:a6:5a:b2:c5:
6c:64:03:11:af:6e:90:d0:e6:cd:6c:7d:f5:11:c7:04:ff:0c:
d8:f7:0b:3c:50:87:b2:f4:74:33:0c:64:c0:04:f1:27:ba:30:
96:b6:8b:64:2a:c3:af:70:50:c8:10:b5:f5:f9:73:1f:c4:b7:
bb:43:a5:0e:e1:af:0b:8d:f5:17:17:0c:6b:dc:87:42:49:0e:
25:9f:ba:be:9e:69:07:16:9c:57:33:16:1b:2d:1c:8a:f7:2a:
c4:70:5a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 00:00:38 2025 by rpki-client