Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
File: G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json)
Hash identifier: CYMTvT38E+o02TInmgih8PhU7asBSpXQUz/DA3iCuHM=
Subject key identifier: 38:80:81:B5:90:46:B9:90:8C:00:0D:A3:A8:98:D1:AC:00:A6:7F:46
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial: 0199FB7CA3A6723114CBBB342B667A9D73A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:13 +0000
Manifest this update: Sun 19 Oct 2025 08:01:13 +0000
Manifest next update: Mon 20 Oct 2025 08:01:13 +0000
Files and hashes: 1: 2iBSszmMQqmiQ3uytPa6Rj5usVw.roa (hash: uKmKRGw9bMp+kTA7Ddvynf7WAl8sh27c2GAtM3UsdJQ=)
2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: mU5yIwohOsL+kcLwkhsp/pojg16JC6mnoGOMbhpoL54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a3:a6:72:31:14:cb:bb:34:2b:66:7a:9d:73:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
Validity
Not Before: Oct 19 08:01:13 2025 GMT
Not After : Oct 20 08:01:13 2025 GMT
Subject: CN=388081b59046b9908c000da3a898d1ac00a67f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:97:a9:54:77:7f:ee:2e:6d:d9:3d:a7:b9:a4:
c6:25:c3:91:14:31:4f:6d:25:9b:d4:3a:34:98:8e:
b9:fc:18:85:e3:6d:a2:97:f2:28:a4:12:dc:93:d9:
fa:88:97:68:ec:4d:73:2d:31:67:1c:cc:bd:e1:d0:
07:ed:3f:06:ad:93:b1:da:50:05:6a:da:e7:99:69:
9b:56:ff:b9:14:9b:4f:24:0e:c3:b4:68:df:29:e6:
05:76:5c:9d:40:5a:b9:68:30:67:ca:6d:17:c8:e4:
57:07:1f:87:cc:6a:ce:d7:f2:71:8e:d2:58:bf:b5:
12:41:d5:b5:ac:cc:47:90:9f:13:67:e6:a3:dc:c6:
3d:3b:96:71:4c:30:ab:85:a2:a1:ed:7e:ba:e1:74:
14:91:dc:f0:fd:f8:6a:57:18:a7:16:60:56:e1:7c:
92:b8:84:ac:91:0c:38:16:49:69:cd:2a:23:b3:8f:
8e:17:86:03:23:86:ff:d0:6e:0d:74:00:b1:d1:5b:
01:ae:97:1c:b3:1f:03:ac:0b:d5:a1:ec:60:69:a9:
c7:21:9b:59:2d:66:c5:0e:73:f0:8a:08:ad:fb:78:
77:c0:14:86:1a:47:05:f9:9a:49:2c:68:40:f0:ff:
4d:94:5d:b8:60:90:ff:9f:6d:b1:59:f8:29:dc:1d:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:81:B5:90:46:B9:90:8C:00:0D:A3:A8:98:D1:AC:00:A6:7F:46
X509v3 Authority Key Identifier:
keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a1:b9:01:62:71:eb:bb:0b:71:0e:d5:85:44:36:04:48:d1:
98:ec:78:75:a7:f1:c7:bd:98:33:0f:c0:6e:fd:51:27:49:be:
de:c0:35:19:08:ff:61:f0:56:a2:90:3e:ea:62:4f:81:53:08:
0b:55:4f:2c:b4:6a:64:a1:66:3c:ef:91:6a:6a:5c:f2:c8:fb:
c5:c6:5c:01:45:2d:0c:27:da:e1:01:fd:a8:46:62:12:db:f6:
6f:18:be:22:3d:ee:9d:6e:88:69:a6:b3:aa:45:37:91:c8:53:
64:db:6f:48:ae:10:21:00:8b:c5:10:4d:12:41:95:7d:c7:40:
e6:fd:77:d3:d0:5d:97:8d:93:f1:cf:9d:cf:d2:45:7b:b5:c4:
a0:ff:88:8c:a4:9d:63:5d:66:de:3f:15:d8:f6:40:02:21:5d:
85:e9:38:33:df:14:ac:c2:e1:c2:e7:b2:81:43:6a:aa:cd:90:
d5:f2:c7:1a:df:e8:2d:42:58:c2:34:78:9a:16:8b:0d:9d:71:
cc:55:db:7b:41:c5:20:3f:a5:46:43:35:ce:4b:da:43:2b:13:
34:80:bb:02:9c:de:48:3c:fd:61:03:f2:16:bd:d4:74:b5:7b:
db:f5:ec:9f:a9:50:92:c5:c1:0b:bf:d6:43:00:19:f4:38:2e:
15:07:48:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:30 2025 by rpki-client