Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: FHPlhCqK7mZ4/Kgxb5cynrpYgi3pT2qajHshC9JSOhU=
Subject key identifier: 90:E8:B5:DD:08:68:57:F6:82:E1:9A:30:90:DA:AD:1D:FF:C3:1C:96
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 0199FC21B490778E8E242A8B64C69C81C0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 08E4
Signing time: Sun 19 Oct 2025 11:01:31 +0000
Manifest this update: Sun 19 Oct 2025 11:01:31 +0000
Manifest next update: Mon 20 Oct 2025 11:01:31 +0000
Files and hashes: 1: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: wfI9CoKJ+4SQT0dD84SOD7A0g99kd63bdM7t7joLHKQ=)
2: j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa (hash: qcMICYRSrbrQRjk9ZR+9VL6T/3wI6mHE1uL2fvOP8p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b4:90:77:8e:8e:24:2a:8b:64:c6:9c:81:c0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: Oct 19 11:01:31 2025 GMT
Not After : Oct 20 11:01:31 2025 GMT
Subject: CN=90e8b5dd086857f682e19a3090daad1dffc31c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:74:44:53:d5:54:08:9d:d7:26:a7:83:64:
d1:d1:22:f5:78:36:bc:f7:33:fc:4a:6d:e7:1a:52:
79:36:cc:70:03:63:1b:e1:0f:9b:cb:04:ff:0b:7b:
e3:b9:ce:dc:82:59:4f:a8:d2:c8:b8:59:c1:9c:2c:
c0:53:a6:99:12:92:f2:c5:53:8f:d9:64:3a:bf:29:
7d:18:7b:a8:d0:ed:74:7c:56:1a:a1:a1:8d:b0:3c:
dd:dc:cb:d9:15:f5:29:27:5a:cb:c1:70:c6:b6:c8:
ca:4d:ec:1b:87:39:10:b4:85:bf:39:c7:6b:39:35:
ea:46:c4:3c:e4:08:d2:36:71:4a:73:f0:4a:f8:b5:
eb:27:47:be:32:f0:76:2e:f8:4d:37:0d:b2:b5:2f:
74:ce:ee:98:61:f3:e9:01:a1:c6:6e:8f:de:f8:d7:
7b:5d:ec:00:82:0d:0d:27:24:d5:36:0c:d1:de:05:
a5:f8:b0:e8:3d:ed:0c:c3:4b:79:d8:d4:46:8f:2c:
b2:33:c3:d3:1c:a8:7c:ee:6b:3f:bc:c3:06:cb:8a:
a1:a5:34:36:a6:df:9e:0f:20:f1:5f:1e:d2:d4:76:
b2:73:9f:5a:61:8e:63:b8:98:7f:21:ea:29:c9:05:
95:b6:6e:15:3e:3e:b8:d2:19:ee:73:0a:da:93:72:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E8:B5:DD:08:68:57:F6:82:E1:9A:30:90:DA:AD:1D:FF:C3:1C:96
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b9:f5:28:1f:60:0e:ac:49:a4:09:21:da:78:29:79:c5:5b:
27:cb:82:11:1c:16:60:17:63:77:f0:08:cb:3f:4a:a1:6b:1f:
03:f0:e4:b8:f7:ea:6c:da:5e:cc:4b:0d:29:15:a9:e5:f8:27:
55:dd:e6:06:fd:13:1e:3b:3b:6a:55:2f:3d:38:4d:95:77:db:
48:9c:89:75:74:1d:a7:56:b2:d6:91:8a:1c:e5:00:6d:8d:da:
71:33:37:85:76:78:95:82:bf:7c:30:c4:e4:3f:cd:b1:d3:91:
1a:68:5d:78:4e:25:41:18:05:de:f2:11:7e:54:d0:58:b2:18:
81:16:30:7d:a9:32:e6:54:74:66:55:48:c6:c7:fa:98:67:ca:
72:23:b0:27:90:4e:b7:d3:9d:93:f1:7d:13:aa:16:dc:a3:67:
b1:3e:38:73:c1:81:71:30:d2:33:99:db:25:8a:36:50:09:c6:
e9:29:d8:10:b1:62:c2:83:d5:81:19:84:00:1e:18:2c:ff:b9:
7e:81:c1:85:83:eb:cd:3f:f0:8d:19:cf:82:84:55:b7:28:62:
27:01:f5:70:a0:be:d1:c4:77:e3:d2:32:34:6a:b6:79:e4:bc:
21:35:00:84:ec:bb:db:fa:01:30:86:cc:da:a4:cd:c7:53:1d:
d1:63:a9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:22 2025 by rpki-client