Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
File: G8qoP8mkEL2z4P0thIcgE0dxvs8.mft (raw, json)
Hash identifier: BHDSIzjP9u1blBldfCekI+H/z18KrhtVtk8jgy4Gm/s=
Subject key identifier: 90:88:DB:D6:57:14:3E:25:D0:0E:05:61:B7:CB:23:18:A5:C9:F3:B8
Authority key identifier: 1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
Certificate issuer: /CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Certificate serial: 019A00A2D9EE4F5163DE8C3F765E9B69C174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
Manifest number: 1672
Signing time: Mon 20 Oct 2025 08:01:03 +0000
Manifest this update: Mon 20 Oct 2025 08:01:03 +0000
Manifest next update: Tue 21 Oct 2025 08:01:03 +0000
Files and hashes: 1: G8qoP8mkEL2z4P0thIcgE0dxvs8.crl (hash: q8W+P8MtzQj5NZu0QGPCzlqOSel5U3FCXrBSWsoqdBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:d9:ee:4f:51:63:de:8c:3f:76:5e:9b:69:c1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Validity
Not Before: Oct 20 08:01:03 2025 GMT
Not After : Oct 21 08:01:03 2025 GMT
Subject: CN=9088dbd657143e25d00e0561b7cb2318a5c9f3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4c:68:06:43:4d:d9:41:62:a9:1d:82:d2:e2:
0a:29:28:6d:86:55:08:32:e3:63:94:93:99:dc:95:
9c:b0:b2:25:b0:c8:91:a4:f4:72:0c:ab:90:18:94:
12:da:07:32:fa:2b:96:db:f3:73:26:80:db:b0:a4:
46:66:94:04:e5:1f:96:47:4d:c2:56:85:a2:5a:36:
2f:77:6e:7f:36:3a:ee:85:3a:33:f5:12:58:e0:41:
15:4c:56:91:6e:6c:bd:f3:5c:1a:75:1f:d5:4f:b6:
38:26:b0:8c:ce:37:58:82:fd:a1:c0:e4:55:86:39:
3f:f1:b0:30:d6:0d:0d:b0:b7:06:a9:58:e1:f2:dd:
34:1e:ad:6b:b8:73:41:a3:df:e3:9f:fa:d3:cd:26:
93:45:cd:95:2c:31:26:b6:4f:71:bf:9e:fa:b1:a9:
bc:ba:c4:28:95:00:08:ae:f2:53:6c:48:4a:f7:bf:
3c:9b:3a:a7:81:f7:8e:af:c9:eb:a6:4c:13:3a:a0:
ae:0c:7b:ab:ac:c3:cd:c4:6a:23:69:46:f6:88:f0:
58:ce:d3:da:b1:e5:c2:a1:17:01:53:2f:9c:bb:4a:
b1:fe:ac:bd:5f:aa:c2:b7:ac:fd:81:c2:27:f4:38:
d2:3c:39:76:d4:67:22:41:86:cd:2a:c2:2d:2c:22:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:88:DB:D6:57:14:3E:25:D0:0E:05:61:B7:CB:23:18:A5:C9:F3:B8
X509v3 Authority Key Identifier:
keyid:1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:30:02:e7:2b:c6:98:ef:53:0b:ad:a6:5d:8f:8f:9e:c1:d1:
9f:0c:2d:b2:d1:8f:68:7f:cc:30:44:a8:b1:89:18:12:9e:8b:
45:e8:a6:7f:f1:65:fd:1e:d2:f0:f9:63:ef:53:49:79:c4:a7:
e1:65:80:cd:50:f5:0e:91:e5:76:98:59:5a:c2:49:31:66:a1:
05:cc:da:c1:df:92:35:e9:66:ff:31:8b:3d:e0:18:88:aa:12:
42:ca:5a:1f:e7:4c:96:b5:b1:8a:b1:bc:c3:2d:5a:03:d7:62:
86:aa:a5:66:c8:3f:ca:e1:7e:ac:7c:08:d9:e5:ca:ec:80:ab:
a0:96:32:6e:73:25:07:67:e8:b2:b7:72:af:d2:56:f1:f1:f3:
d7:42:07:e7:ef:c8:c7:bf:9f:f1:0a:9d:47:97:a2:cb:e9:a2:
db:9e:d7:d3:31:bc:17:f7:01:95:0b:c2:a2:a7:f5:f5:6c:d8:
4b:85:87:64:5a:a2:5d:3e:98:a1:52:42:f5:89:1e:a4:76:99:
41:57:c5:c0:8d:bd:72:ae:40:d0:12:a8:6b:f7:8d:f6:1c:44:
7c:a5:63:52:9d:70:78:d7:df:b9:2c:5f:30:05:54:09:43:1f:
68:4e:54:6c:ec:e9:94:21:37:0d:43:d6:77:14:1f:8d:69:e2:
64:89:3e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:39:19 2025 by rpki-client