Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
File: G2t-l-0j1mqR-4qRv9nGdxEpsas.mft (raw, json)
Hash identifier: F0vAt40/njqbMorQIiP6SFgs9KOUnzL2oi1sMlkED0U=
Subject key identifier: 42:12:EB:D1:12:44:A8:86:56:69:F7:EA:D4:F2:60:4C:0D:23:1D:FD
Authority key identifier: 1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB
Certificate issuer: /CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab
Certificate serial: 0199FC5892763DCCB981D9DF89CA3610CD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
Manifest number: 0FDB
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: G2t-l-0j1mqR-4qRv9nGdxEpsas.crl (hash: ukT4vWIeu9HY5cBvAC2ztfXPVprwycsnsEB8t5AF7Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:92:76:3d:cc:b9:81:d9:df:89:ca:36:10:cd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=4212ebd11244a8865669f7ead4f2604c0d231dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:62:0e:8d:7b:19:5d:17:be:ca:03:8d:e4:
5c:cf:12:e5:71:6c:a9:f4:64:9b:f2:e9:d9:c2:0f:
92:84:01:7f:bf:60:dc:d9:bf:77:f5:4a:ee:c2:58:
21:32:88:4c:c0:72:57:23:c7:7d:ea:b5:48:b4:9e:
98:71:19:b3:45:c1:35:9c:d1:cd:4f:94:f6:e1:ba:
6d:3f:df:71:67:bb:28:b9:f9:05:e0:74:9e:e8:eb:
36:22:6b:ff:20:4b:15:6d:ed:44:98:4a:d5:3f:2d:
b9:8a:bf:fd:34:dc:8d:70:3b:c8:09:f8:fe:fc:8f:
8a:18:8c:2a:2f:ab:7d:14:be:0a:85:f0:2c:8f:b2:
f1:29:89:6b:7e:f1:b0:83:35:fc:21:62:40:61:1e:
24:5e:a7:56:18:ba:6a:f6:1a:9e:2a:f9:97:d7:ed:
d8:d1:5f:cd:10:9b:b5:29:91:80:76:c5:f4:74:fd:
a3:57:8b:fb:99:6d:3f:9c:0a:df:a2:d1:bf:d1:e4:
b7:11:48:6d:6d:50:87:ff:1b:32:07:db:04:0b:17:
22:52:e7:69:c6:76:49:46:c0:6c:61:83:9f:b0:1b:
d7:da:a6:fb:cd:4c:a6:db:e4:d7:e4:19:7b:c5:f7:
9d:7e:90:18:04:de:a5:57:1e:70:9f:a8:26:0f:71:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:12:EB:D1:12:44:A8:86:56:69:F7:EA:D4:F2:60:4C:0D:23:1D:FD
X509v3 Authority Key Identifier:
keyid:1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3d:72:d1:c5:4b:a9:75:a7:0e:3c:f2:95:3e:8f:13:a3:e1:
a2:d3:fd:82:49:e7:fc:4b:29:ed:27:08:30:b7:d4:15:35:32:
cd:36:81:e4:75:0f:fe:da:31:cd:cb:4d:0d:3f:e5:5a:76:02:
b0:97:5e:fc:53:ce:98:b8:8c:9c:76:1d:54:7a:31:1d:9f:18:
78:90:b3:f6:dd:d6:28:8c:0a:2a:2d:15:78:38:c2:92:57:48:
55:a3:b8:8b:bf:ce:38:05:be:5e:ea:f1:bd:8a:f2:e0:6e:39:
e8:1e:0d:33:54:0f:cf:9b:26:c6:18:9c:d7:b4:d6:02:80:2c:
a5:50:39:e3:95:07:81:c8:9f:a6:f9:d9:04:8a:da:e6:ee:f0:
2f:35:6f:a9:4a:e8:ec:d2:f8:2e:bb:61:3e:31:10:04:c6:c6:
b1:3b:11:94:a3:0c:ca:72:87:5c:32:ad:83:68:42:85:e1:26:
f4:3d:f4:87:6d:63:5d:92:b2:64:ee:7d:5c:02:64:d8:f2:79:
b1:3b:32:7c:2f:ac:e0:57:42:6d:1d:8b:4a:68:f6:d6:00:95:
76:5e:c7:18:95:a7:a8:63:e1:f6:aa:e0:e9:54:48:23:d8:8b:
32:21:61:6b:91:fc:ec:10:a6:21:64:08:08:d6:8c:6b:f3:91:
8c:02:04:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:47 2025 by rpki-client