Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: a/yfwniYsZEtaT0nuUVwTAiXMtBxfsTbk3ix+oNDXM8=
Subject key identifier: 3B:60:0A:67:E3:3F:5B:0D:97:06:27:24:CB:3E:C8:33:EA:54:61:17
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 0199FFC7AF890507249BE0BD4A802CB9FD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 04:01:40 +0000
Manifest this update: Mon 20 Oct 2025 04:01:40 +0000
Manifest next update: Tue 21 Oct 2025 04:01:40 +0000
Files and hashes: 1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: +z3Pcs/eneoUP+1NRXfjyqFUrLhlTAQ+npcHCeRIPBw=)
3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:af:89:05:07:24:9b:e0:bd:4a:80:2c:b9:fd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Oct 20 04:01:40 2025 GMT
Not After : Oct 21 04:01:40 2025 GMT
Subject: CN=3b600a67e33f5b0d97062724cb3ec833ea546117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:84:8e:0d:2d:2a:e6:ce:55:e2:70:9c:34:
96:de:8b:d7:ca:3c:62:de:c7:ed:d2:4a:b9:cc:d8:
03:49:41:13:4b:11:8e:eb:b1:31:b8:55:2f:96:62:
14:22:86:54:ad:98:ad:cf:8a:c1:d4:dc:ab:67:e4:
88:93:f2:53:48:75:e4:11:51:92:10:72:6d:2b:98:
76:31:a1:94:fd:d6:6d:7a:44:22:7f:ef:52:b8:54:
55:a3:76:6f:8b:c6:85:33:7c:b0:30:d4:b6:21:9c:
f2:5d:72:2e:d8:5b:01:d2:38:27:0d:b7:3d:94:29:
1e:e5:c7:78:62:24:0c:18:4a:9c:bd:c7:2b:95:79:
c3:a2:b1:9b:4b:ac:e3:87:ef:6f:1d:9f:2b:68:e8:
45:bb:67:4e:67:0b:0a:0e:a8:dd:bd:d4:65:7d:a2:
86:92:05:d0:45:21:0a:7c:9e:40:e8:8c:42:d7:2f:
0e:31:c9:e9:ad:d2:42:4e:ab:fa:05:e8:76:88:54:
6a:8e:c7:e0:39:ee:e6:04:dd:b7:dc:07:5e:61:22:
69:da:03:85:75:16:f6:c9:c8:56:3f:cd:8e:d2:46:
58:e5:ea:d9:3e:40:73:05:b7:9b:9a:2b:49:13:7d:
a4:9b:e9:6e:ea:6d:64:80:2c:6e:f5:58:f4:23:57:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:60:0A:67:E3:3F:5B:0D:97:06:27:24:CB:3E:C8:33:EA:54:61:17
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c3:22:c5:42:99:38:fa:9a:87:44:30:c4:cf:d2:45:47:40:
10:e5:3c:80:e4:82:5c:1d:58:2c:d2:1e:02:40:61:c9:ce:26:
75:17:eb:b4:15:a7:f0:bf:6b:4f:19:d5:5c:53:9c:ea:9d:bd:
ee:6c:11:ae:b7:a6:6b:c7:97:9a:86:dd:b9:1b:72:f7:9e:a6:
d5:71:47:1e:a4:fa:a4:03:01:19:28:89:48:c7:40:43:6e:16:
62:55:10:3c:80:ec:4b:0a:d7:4c:37:c9:ed:e3:6b:d5:4c:ae:
d9:0a:7c:ff:30:77:2d:d3:12:42:92:b0:59:48:b3:dd:db:a5:
e1:b3:6a:d1:e4:b7:e2:00:ad:1b:55:5a:50:ad:82:e8:51:63:
3c:b4:45:b0:9d:a1:2b:5f:60:a7:1d:f3:2a:93:81:b7:4d:69:
17:cf:e1:2b:7e:ff:3c:6b:ec:fd:09:b6:7d:87:79:22:ae:cf:
66:44:a8:29:a6:b3:68:f8:80:ca:0a:74:1f:e9:47:83:e8:f5:
41:87:1f:cd:7a:87:7a:d1:8d:48:98:f6:00:85:39:5f:f4:58:
e7:e9:0a:11:cf:4b:86:a4:14:e7:18:3e:8c:4a:f6:7a:90:36:
d4:42:d1:64:5e:53:d6:08:e4:1b:12:aa:b0:4f:b6:c0:25:ae:
1d:f0:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:07 2025 by rpki-client