Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: tCJK26CrkILIf43ubehTi715BzBNQPK5VqJ/xlDIpRU=
Subject key identifier: F0:06:18:A5:D1:19:07:84:32:51:52:03:46:A0:DC:8F:37:EA:8C:AC
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 0199FDDA123A869515AC3D4E6307C8AB8444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 0E67
Signing time: Sun 19 Oct 2025 19:02:31 +0000
Manifest this update: Sun 19 Oct 2025 19:02:31 +0000
Manifest next update: Mon 20 Oct 2025 19:02:31 +0000
Files and hashes: 1: 1-6tgApGzi84jUfnnO4hR3VcZnhw.roa (hash: HVjUDSjbZacQo7V9+9zKGEkK9aQQLCss0l6qBdFGXKw=)
2: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: hcxMAfgjTN8XgmbB/2Zm2ykoPNtGByeBPsdvCrEd9Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:12:3a:86:95:15:ac:3d:4e:63:07:c8:ab:84:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Oct 19 19:02:31 2025 GMT
Not After : Oct 20 19:02:31 2025 GMT
Subject: CN=f00618a5d11907843251520346a0dc8f37ea8cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:eb:6b:3a:55:7f:95:4a:ac:cb:d0:ab:84:
33:76:39:a7:58:ed:68:01:40:e2:87:3e:92:4f:4d:
1c:1d:51:d3:ef:ba:6c:cc:28:bf:55:f6:77:d1:e7:
97:41:0d:9e:02:2a:0f:63:7f:4a:ec:46:4a:2f:75:
16:c9:0b:7a:15:23:3f:c6:fd:f1:1c:15:ea:8e:a1:
5c:df:33:0a:0e:50:5b:65:ce:f6:93:2a:17:cc:88:
f0:97:b9:89:25:2d:bf:4d:7d:b8:87:e4:5d:75:a4:
50:dd:84:35:23:e2:4b:cc:ad:ee:55:da:72:9f:e5:
47:b3:56:95:a9:8e:e3:b0:ee:47:49:50:4b:52:43:
23:a8:8a:27:2a:96:61:df:d9:7d:9a:16:7e:17:6e:
ce:d0:07:8f:24:77:9d:6f:92:86:ba:26:96:9a:b4:
c3:d0:ec:0c:7f:a5:44:ce:d3:ee:0e:fe:75:7c:a9:
ed:c0:14:cf:d0:93:c6:c1:b3:ca:b5:8c:fa:89:a1:
a0:48:6e:cf:bc:70:31:e9:19:90:5a:16:f3:79:7d:
90:4a:32:0a:81:a1:b2:9b:ac:67:a7:93:44:44:e1:
91:55:ff:51:83:d2:ff:a4:27:a8:cd:a7:25:83:21:
c7:8c:9e:99:d4:76:bd:b9:2a:7c:03:40:17:33:37:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:06:18:A5:D1:19:07:84:32:51:52:03:46:A0:DC:8F:37:EA:8C:AC
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:48:4b:6c:3c:b5:12:cf:cc:8d:6a:04:dc:91:9c:8e:ce:62:
98:f6:c9:f0:51:42:0f:fd:d8:50:49:58:4a:c0:2e:dd:37:73:
5a:07:89:8a:2c:93:b2:26:a7:1d:fe:9b:23:c1:f7:12:f8:ec:
29:14:c8:c8:13:13:9d:ec:ac:68:5e:9d:81:3c:77:a1:00:d4:
c7:ab:ba:5c:a0:f7:26:60:b9:1f:1e:be:b6:2a:db:98:92:b8:
db:2f:57:78:d7:88:ee:5c:f7:06:7b:d5:0a:47:56:20:8a:80:
a5:63:c5:dc:b2:81:a0:87:a7:af:4b:61:40:5f:2c:63:8a:57:
5c:71:93:b5:31:38:11:d3:90:a1:93:00:2f:fd:bb:78:5b:91:
8b:48:ed:90:5b:d4:eb:cf:cf:ca:6e:1b:dd:c6:72:3b:ae:b7:
0e:af:1b:00:e2:2e:0b:e2:e5:2f:3e:ee:55:9a:b9:5f:10:e7:
88:5b:80:77:3b:58:07:7f:c5:e7:3f:7a:30:dd:f8:38:e0:77:
e2:e5:a0:12:e3:ef:8f:3f:91:af:52:c9:df:55:3c:56:88:39:
49:2b:6b:28:b5:c3:9e:01:e5:89:7b:98:33:63:7c:95:2a:3a:
b9:f3:1f:34:01:25:fa:cd:2d:53:7a:05:65:f1:b5:e4:5d:21:
8e:9f:59:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:17 2025 by rpki-client