Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
File: G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft (raw, json)
Hash identifier: pfg1pz2m2ZsMUrEHwqywkI35meCTx5mK1JUh01YjxX4=
Subject key identifier: D4:32:43:08:CF:BB:40:24:47:4A:1F:D3:D6:94:E0:5B:39:BB:4C:74
Authority key identifier: 1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
Certificate issuer: /CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Certificate serial: 0199FBEBB428DDA52668F47B9562AC568786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl (hash: lnHpXaH3qLRdnVmibMAgHnnTqWinyegyeD3QuVI6IqM=)
2: h-vjilG4zsTOTFr8jyiuNr7YOYQ.roa (hash: J1qho6qvh9PzDmhMh26kyKPFY1m2ydeARTE83gY+gJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b4:28:dd:a5:26:68:f4:7b:95:62:ac:56:87:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=d4324308cfbb4024474a1fd3d694e05b39bb4c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fd:e3:dc:6a:aa:0e:fb:3a:f4:aa:17:7f:4e:
e1:51:df:0f:09:5c:27:c6:9e:ae:86:9d:b4:9d:e0:
48:0f:64:b0:a0:eb:f5:6d:e8:27:ed:d7:ff:bf:f1:
05:b0:9d:7b:9c:72:43:a8:a1:4e:47:7e:92:15:ea:
f3:1a:91:9e:ac:0a:24:a0:1c:c0:a7:7a:31:90:74:
41:50:f1:2c:6e:81:c6:c3:f6:6b:02:65:17:d7:53:
70:c9:b6:9c:4b:3b:05:7c:c4:70:00:22:63:bb:f0:
a0:fc:e5:98:b0:99:1c:3f:4c:06:33:86:8a:a1:6a:
20:0d:35:4d:26:ec:e2:6b:e9:e0:95:70:eb:0b:71:
7d:a5:46:a5:b8:bc:1b:e2:d9:06:56:46:dc:2d:f9:
50:3b:93:47:44:19:17:55:2e:bb:a1:d3:45:7a:62:
6a:e5:60:05:06:c4:c5:7a:57:2d:bf:11:1b:6d:72:
49:72:2f:a2:c3:d6:ec:a7:03:84:3d:40:34:a8:ee:
0a:cb:af:e8:1e:1c:46:f4:3c:2c:75:dc:71:49:5f:
c0:26:0e:d3:ec:f0:04:ae:b0:b2:e8:77:ac:b8:a8:
42:4b:d8:4f:75:73:0a:72:25:c1:1b:a9:59:9f:61:
f9:42:23:79:77:2d:d3:d9:6b:14:26:ab:3e:8b:b5:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:32:43:08:CF:BB:40:24:47:4A:1F:D3:D6:94:E0:5B:39:BB:4C:74
X509v3 Authority Key Identifier:
keyid:1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a8:a0:21:41:3c:35:89:b0:ce:97:60:a4:15:59:a5:6e:ce:
8d:32:6b:ad:ac:53:82:81:a0:e7:d6:e2:ef:ee:17:b9:31:0d:
19:05:53:6a:cd:11:f8:16:e8:67:a2:fb:50:b3:35:90:cd:47:
84:ce:83:64:fd:7b:75:d8:79:97:2c:be:02:fe:2e:5c:fe:b8:
fd:d4:f4:8b:4f:78:79:a5:4a:ae:24:e5:59:43:d7:a5:1b:57:
df:58:26:57:64:05:8d:43:d2:fd:2d:04:bb:01:dd:bf:e5:cb:
20:2e:8c:49:0e:30:6e:6b:31:36:34:30:9e:98:14:09:ce:cf:
fe:8c:3a:03:e2:bd:02:8c:eb:e1:e6:de:0a:f7:fd:2f:61:15:
a6:e0:16:18:bc:47:60:8e:1a:52:e2:5b:1d:df:71:15:e2:a3:
f2:2d:69:a6:33:d1:d7:23:0b:3e:93:29:1b:14:43:56:c6:0e:
fd:c2:b5:88:75:16:35:70:cb:f3:28:ca:50:9c:75:ea:48:91:
2b:81:06:de:28:be:10:aa:40:df:d7:f5:01:17:74:69:b1:cb:
73:b2:61:fd:bd:8a:f8:d3:50:39:99:f0:ea:63:c3:91:28:f2:
e9:50:85:35:8c:5b:0f:9b:1e:89:ad:df:7e:1f:0d:8e:c2:e9:
1e:1b:bf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:20 2025 by rpki-client