Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
File: G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json)
Hash identifier: jQ1/szf7ogDqU5f2eMH52wZqv+AZuJ4Xkwzt3g/flWE=
Subject key identifier: 8C:A9:50:C3:EC:BB:02:98:9C:FB:04:2F:83:42:0F:1D:7A:63:B0:BD
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial: 0199FD34204B166328E34CD293B921C789AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
Manifest number: 06B7
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: 66D5GH85kpdoRl5xE-EYGnJIu7s.roa (hash: FRI0FnMjIpTP/o+NpM2rBO+2noxEcPY4kmpjzIRRmcw=)
2: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: ttLHP1ocCMi13WbR319MtjhGm3XCTYV4MzBs1zDm7TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:20:4b:16:63:28:e3:4c:d2:93:b9:21:c7:89:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=8ca950c3ecbb02989cfb042f83420f1d7a63b0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:5d:f7:30:3b:06:d7:db:d1:cd:f3:58:48:
f9:10:cc:10:ca:09:96:42:8b:38:98:30:15:53:b5:
83:51:19:93:2f:88:93:ad:7e:1a:90:12:db:3f:85:
03:e5:a5:a6:95:fc:be:13:63:e2:44:10:30:ec:60:
6d:b3:ee:77:20:de:af:e3:09:65:33:5c:ca:4e:ad:
2d:af:64:03:8e:be:1b:9f:0f:6e:c3:d9:72:aa:eb:
3d:b1:97:26:4b:bb:f9:e3:e4:95:c1:db:03:7a:86:
d1:78:51:40:17:71:34:d1:90:04:2b:f4:91:fb:60:
b2:5e:fc:73:c6:5c:b3:25:31:1a:24:87:67:01:33:
bd:73:64:9e:16:b7:78:6a:b1:20:ab:70:46:83:16:
ab:f6:6f:fb:f0:7c:21:e4:48:16:61:c4:f9:cc:79:
d5:1a:9e:48:1b:77:6f:95:af:5f:c2:ae:23:c9:7a:
b4:6f:d4:62:8a:06:ed:e3:9b:61:1c:67:da:4f:94:
7e:32:4c:4c:29:1f:f3:96:96:1a:25:a5:f7:43:76:
2d:1c:29:28:02:24:28:fd:0a:3c:d3:d6:f2:83:be:
79:4e:c1:5d:79:14:26:42:2f:0b:a9:1a:38:1e:e6:
e3:3b:3d:ad:2d:42:06:3c:3b:94:5d:d6:1b:92:21:
d9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A9:50:C3:EC:BB:02:98:9C:FB:04:2F:83:42:0F:1D:7A:63:B0:BD
X509v3 Authority Key Identifier:
keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:71:7a:4f:f8:3b:ee:86:46:2b:fc:e1:aa:0d:68:04:a8:02:
0a:c2:40:1c:99:7d:a0:82:1f:f5:ed:80:3e:09:18:66:41:56:
fa:c2:a1:06:9f:5d:ea:74:51:4f:cd:7a:5d:0f:f8:4b:b3:f6:
04:a4:ea:11:2e:f5:3a:e7:4d:94:ed:4c:c8:d3:7d:60:24:1f:
78:37:d2:f9:20:bb:c9:0f:b2:2e:27:24:ca:d6:2d:6c:d6:b0:
bf:76:cd:a7:ac:2a:62:41:dc:8e:77:20:cd:82:af:9e:0a:c1:
34:7d:e9:b9:c4:f4:6b:62:19:2b:65:65:1a:49:1a:c7:78:82:
27:fb:53:f5:2a:e6:2e:03:75:26:1e:17:48:17:f9:05:97:b1:
22:90:b5:b5:9e:d0:bf:3e:17:fa:00:b5:a5:6b:8b:be:b5:84:
f9:1f:24:60:27:b7:3e:2f:fc:fc:ec:9b:5c:b7:fa:cf:03:ce:
ea:72:58:9c:c1:99:ad:20:93:82:cb:a6:0d:a8:25:19:4b:bb:
b5:b1:9f:c1:dc:6c:60:de:f9:56:ff:de:44:63:62:09:de:fd:
a2:2a:66:2b:30:3e:b3:8f:10:a3:37:c5:b9:2b:c4:ab:c2:e7:
cf:fd:92:4a:75:24:73:a2:a5:95:93:72:06:23:22:cc:13:01:
e0:59:a9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:41 2025 by rpki-client