Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: /YhzYdHY6GNesdkSCMdKaFbUlOkq66DEjZwluWjxuHc=
Subject key identifier: A8:CA:08:FB:2D:D5:62:43:91:7C:7E:36:83:3F:79:F5:FD:B9:C8:05
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 0199FCFD347511544EA1E69AD161EE5F0C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 0A83
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: ZhUqeVB5TKq8sTOFbYoDD99JejO3iDD4yTTTxoOkTWQ=)
2: wPGOwnLGHizewOcMftfXF8XjPas.roa (hash: 7WgPxVLEmp7JJINNiBOoOLbQjqXgGitoBvWY+g1dgIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:34:75:11:54:4e:a1:e6:9a:d1:61:ee:5f:0c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=a8ca08fb2dd56243917c7e36833f79f5fdb9c805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:5e:7a:4c:94:8f:b4:8f:52:9b:e5:e9:00:
82:b5:4f:b6:d1:d5:54:46:47:a4:ec:e8:70:7c:f7:
da:fc:54:1c:c8:cd:55:ed:0e:cc:86:30:46:cf:63:
58:b5:5b:32:69:3e:fc:cf:be:6a:30:1d:02:ac:c8:
d7:7b:db:f8:09:c2:33:f1:32:5e:58:33:ea:b8:ae:
ef:03:68:b3:4f:5e:75:dd:be:ad:01:9d:79:2d:cf:
fe:11:8c:4e:98:1c:e0:eb:07:d0:5c:81:ad:b8:ce:
48:fd:be:e7:65:fb:35:a9:64:e4:d7:b2:e8:b8:f7:
69:cc:0b:bd:26:bb:a2:a4:f2:3d:9f:84:87:b4:0e:
87:8b:6c:ff:e0:04:6b:14:5d:62:02:66:01:fb:6c:
35:80:1b:25:e0:ad:d2:c7:81:31:f4:b8:46:b7:05:
20:b3:9c:d0:21:e0:11:84:92:42:6f:e9:25:51:45:
a6:95:81:a6:a2:be:f6:a0:8f:20:25:60:8e:ae:53:
fd:13:30:c2:ad:9b:38:17:27:ab:68:f9:b2:8c:9b:
8a:28:07:4d:7d:ff:76:6a:c9:dd:1a:89:f1:5a:eb:
b2:ad:7a:d0:b7:d7:41:28:02:b1:7e:ab:10:f5:4a:
11:9a:65:7f:21:76:d5:14:b4:93:7f:66:65:0f:ba:
bb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CA:08:FB:2D:D5:62:43:91:7C:7E:36:83:3F:79:F5:FD:B9:C8:05
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:98:86:ba:2d:03:36:30:0a:36:b1:ca:62:a9:4e:1e:2e:dc:
60:47:7b:10:6e:16:ef:16:48:85:6e:34:1b:d0:e8:c6:f4:ee:
c2:bb:48:d0:53:b7:0f:f5:c1:24:05:07:0f:41:ce:fe:6a:36:
0e:82:6e:c0:71:c7:d8:d3:b3:28:f9:ed:a2:2e:58:63:49:7e:
05:53:f7:61:97:fa:19:04:45:95:8e:96:8e:bc:de:5b:87:a8:
36:f2:7b:c6:ab:ab:52:1b:6a:91:0e:e3:31:48:2a:34:0b:c2:
ad:aa:5f:f2:27:0c:8f:88:74:37:e6:ca:18:d5:7b:b5:9b:c3:
31:42:35:9b:fe:98:5d:f4:0d:7b:ae:7f:22:ba:8b:26:b5:9b:
07:99:62:6f:34:15:cc:13:f1:51:25:6c:39:c8:be:82:51:e6:
40:0b:a9:a0:ed:8a:a0:4e:78:92:65:dd:95:d0:ea:bb:2f:eb:
50:29:5b:0c:b5:9d:f4:f9:d3:a4:47:5c:f5:1e:9c:ae:ad:e5:
5f:83:29:00:a4:25:de:71:3b:1e:2f:48:fd:fe:22:96:55:ab:
c3:f1:3e:0c:fb:88:cf:5b:5c:e1:8c:85:68:f2:cd:70:5c:7f:
68:33:0f:e6:43:9f:d0:03:80:36:b8:4d:0b:85:66:f6:9b:f1:
6c:7f:9d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:57 2025 by rpki-client