Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
File: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json)
Hash identifier: WhjKYz+w4HXQUIUJHzGAayJrZydu5KwiHCYaYzp9zgI=
Subject key identifier: E8:B3:C9:B2:44:90:B3:44:02:F1:BA:1E:F0:28:B4:FB:B8:A2:B8:91
Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
Certificate issuer: /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Certificate serial: 0199FBEAA5390B2A2259DEFA2E69B198BB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
Manifest number: 0BA7
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: 2fmcGe2KYnAae8NTR6gV1GL7x9afRFK0o7G/zCg7iiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a5:39:0b:2a:22:59:de:fa:2e:69:b1:98:bb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=e8b3c9b24490b34402f1ba1ef028b4fbb8a2b891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c2:3f:8d:89:57:52:0c:3b:21:78:df:6d:f1:
a0:b0:82:c8:35:db:21:37:6f:32:95:a6:ea:7f:d9:
38:76:c4:de:1e:6d:76:6e:06:fd:87:fd:92:3c:0c:
de:bb:2f:49:ef:e9:04:f0:4f:54:43:63:5a:fb:47:
fe:7c:5b:0d:b2:fb:d5:f9:78:08:55:03:2f:67:50:
fb:e7:f0:35:5d:70:db:2b:36:1b:64:ce:de:18:34:
8e:d5:e3:33:d0:e9:b3:98:bf:0c:46:97:ef:3d:3a:
d1:24:c3:31:a7:45:4f:93:f1:db:d1:60:c8:3c:ad:
f1:ca:d2:04:6b:41:dc:0f:ff:9c:85:fa:81:84:5d:
ef:c1:44:73:3d:f8:c3:5b:17:06:e2:7d:cc:6c:a7:
da:7d:37:52:c0:69:99:09:9d:fc:61:40:79:eb:f7:
a9:79:f0:a2:d7:00:83:b3:07:78:82:b5:ba:3d:58:
da:7e:3b:c4:33:ca:31:93:58:55:e1:c1:9b:87:a0:
c0:5d:ac:c5:38:98:5d:64:e7:70:d3:cf:75:bf:72:
9d:14:fc:a4:da:35:01:55:16:39:f0:43:28:7d:4e:
81:bc:e5:2e:c2:37:22:dd:42:a5:78:1e:db:25:8e:
e8:1b:5a:2c:74:90:56:e2:41:0f:41:e3:97:44:2a:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B3:C9:B2:44:90:B3:44:02:F1:BA:1E:F0:28:B4:FB:B8:A2:B8:91
X509v3 Authority Key Identifier:
keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:27:d9:40:18:67:db:88:42:88:ed:6a:1b:17:23:20:77:b0:
09:6f:30:ab:09:db:72:3d:73:94:6d:29:6a:ff:8e:2a:2f:57:
0a:f0:c6:42:20:89:82:ac:e5:de:ae:6e:78:14:01:28:76:c8:
b5:9e:ea:0a:0e:55:2a:25:54:b9:55:ef:6e:78:68:bd:b0:c6:
47:bb:93:31:2b:c6:d8:04:28:ab:20:9a:a4:aa:11:20:d0:9a:
40:af:cb:0e:89:dc:1b:31:69:ba:5c:29:b6:3a:0e:0d:79:72:
37:9c:02:6a:1a:7c:3c:d8:fd:f2:11:df:7a:84:fb:a2:d2:73:
6f:66:5a:ea:94:ff:82:08:77:3c:9f:50:07:e2:dd:70:5a:10:
8d:43:de:ba:e2:cf:42:ed:28:e7:7c:3e:89:f8:29:b6:63:c1:
de:30:aa:26:ae:1d:96:a5:25:3e:01:3b:aa:7b:e3:07:f2:ba:
a9:1f:2f:7f:3d:30:e2:9b:88:70:2e:37:fb:b1:89:ca:92:f9:
70:7e:0a:39:97:27:c9:46:2d:aa:da:b2:0a:35:27:b0:79:be:
5e:d0:58:5c:99:0d:d3:c7:fe:1f:7b:84:bc:5e:54:ba:87:9e:
1d:fb:a1:83:27:3c:82:23:d1:3e:9b:5f:75:7a:1c:5c:66:9a:
78:20:9b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:50 2025 by rpki-client