Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: zIKqjI9USQ9D5wp2pFOAh61vj6kyP78Gl64gltl09fg=
Subject key identifier: 1E:1D:E5:16:38:71:D0:AB:96:BC:CB:BA:ED:95:88:E3:DA:60:8D:35
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 0199FBEAAC34C3FFD072FE3209DF88C48B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: DzHf7DTIh3JXQPIAWVti3Hxe++9V4KC1pZdp8VYujsE=)
3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ac:34:c3:ff:d0:72:fe:32:09:df:88:c4:8b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=1e1de5163871d0ab96bccbbaed9588e3da608d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:00:2c:ca:08:79:92:d5:75:75:e5:33:83:
00:73:5b:f5:4f:14:f7:70:df:1a:ff:6d:b6:ba:79:
44:c8:87:29:cc:0a:fe:36:99:d6:6c:18:96:ab:fa:
3c:e7:99:f2:fc:89:62:a3:68:ab:f4:07:7b:8f:8e:
8a:e0:05:ed:1a:32:6c:64:03:03:02:d4:1d:fb:20:
a7:7e:69:02:57:f4:83:fc:d7:5e:ed:25:8e:0a:c4:
8a:99:92:98:28:fe:40:d5:66:d9:f3:32:ba:b0:9b:
2d:18:1f:99:04:ee:60:40:b4:08:b4:87:9a:c4:23:
2b:e2:e4:d0:41:fb:62:c7:eb:c2:e2:d9:eb:fa:3d:
82:d7:97:c3:c0:68:ae:13:99:3f:c3:7f:54:1b:0d:
4e:b1:87:72:07:77:af:5b:28:20:cb:38:ba:34:f8:
04:14:39:fb:ed:ff:58:a8:77:6d:c4:75:4f:9a:4c:
b9:dd:c6:77:f5:24:d3:4e:21:59:f7:10:58:ca:6d:
cc:24:8d:ee:5f:5f:40:6e:c8:ee:7a:51:4e:a6:a9:
7f:68:9f:57:8c:a1:a2:4c:fc:88:73:93:bf:22:94:
be:8a:cd:90:03:d0:81:1d:34:29:e3:4f:98:ac:21:
89:b1:aa:52:ee:1d:17:06:7f:5a:4a:b4:06:97:56:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1D:E5:16:38:71:D0:AB:96:BC:CB:BA:ED:95:88:E3:DA:60:8D:35
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:52:e5:79:b6:4b:d3:4a:f7:c9:1f:b2:b6:06:cf:7b:bc:bc:
4f:93:09:b3:07:4c:f5:e5:89:cd:88:44:6e:0e:d5:3b:7c:8a:
85:74:b5:a4:f7:4e:fd:3b:cf:28:37:ce:79:86:1f:80:b7:90:
19:54:1d:8a:5e:32:ce:b5:51:a5:21:83:1b:cc:0f:2b:ae:db:
f9:33:66:c7:1b:e5:95:06:83:eb:c9:f3:15:85:53:95:ed:b4:
31:7a:9a:b5:92:38:71:de:9b:49:34:81:bc:50:dc:69:8f:a2:
bb:d8:e6:5e:89:77:1f:6e:1c:31:e6:b0:89:00:0b:ed:7c:f8:
66:00:9a:10:14:ad:fd:2f:98:fb:8b:01:cf:20:bb:a5:ee:d8:
e9:f7:63:2c:02:95:03:04:9b:02:43:2f:50:a2:52:45:84:6b:
c8:70:87:1b:de:b0:5f:98:bc:24:61:92:9b:f5:cf:ad:a8:c1:
7d:ab:34:b9:18:44:3f:1a:ce:d2:82:b0:b5:59:01:63:76:c7:
1b:13:b3:a9:85:53:27:33:84:2a:f4:c1:8c:a9:c9:1a:7b:a9:
a0:80:78:37:f7:b5:48:1d:a7:53:83:01:80:f8:30:05:7b:a4:
cb:02:8b:8e:33:7b:0a:79:cf:14:75:47:aa:be:33:2c:3c:32:
50:d1:a6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:21 2025 by rpki-client