Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File: G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier: voDHkWGbMo8aBkHK8rHxd9563Jdczk4Z1YhVQWZLydo=
Subject key identifier: 69:99:B3:4A:0C:DD:F6:63:69:16:82:9B:93:C0:4F:4A:2E:0D:31:5C
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer: /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial: 0199FAA0B76C4ECA5B1E5C8C0A6EAAF3CE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number: 1181
Signing time: Sun 19 Oct 2025 04:01:00 +0000
Manifest this update: Sun 19 Oct 2025 04:01:00 +0000
Manifest next update: Mon 20 Oct 2025 04:01:00 +0000
Files and hashes: 1: BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (hash: /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=)
2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: 7KEhWyckpNeRTQaSSeB3hrTMMj4qCDHNYuZarXc2+e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:b7:6c:4e:ca:5b:1e:5c:8c:0a:6e:aa:f3:ce:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Validity
Not Before: Oct 19 04:01:00 2025 GMT
Not After : Oct 20 04:01:00 2025 GMT
Subject: CN=6999b34a0cddf6636916829b93c04f4a2e0d315c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:2f:87:85:2b:84:64:52:4d:1f:64:1e:4f:
56:05:06:f3:73:4e:9b:6f:79:57:0f:3a:d3:b3:87:
bc:1f:44:eb:9c:6b:d3:05:8d:bb:ea:f1:f7:a1:6c:
82:eb:d9:f9:b0:f1:e3:b3:cc:70:a5:87:16:3a:40:
db:dc:7e:15:c0:2f:5b:0d:bd:af:04:03:6b:e2:f4:
fc:82:e3:36:73:d4:1f:9a:e6:96:88:3e:fc:ab:26:
3e:78:33:27:c8:b2:27:5a:df:a3:f2:b7:48:c5:fe:
eb:3c:8d:ef:6a:4c:f7:7f:c5:fd:03:54:c4:2b:fa:
77:11:96:c9:9f:86:60:7f:9f:80:7d:8f:12:66:3a:
0b:b3:d8:9e:d9:5e:9c:2d:3d:5a:25:60:8c:48:6b:
0e:79:dc:3a:53:2a:ad:2c:63:b0:c2:1b:e7:18:14:
d1:4d:ce:9f:03:3f:cf:e8:02:bc:6a:ae:c3:f9:84:
81:54:39:f8:19:1d:3f:33:32:16:36:f3:42:b6:6b:
76:a0:91:d1:8e:0a:33:97:f7:38:72:89:29:6d:35:
36:b0:a5:20:42:7c:64:89:9b:71:cf:2f:cd:16:5b:
91:f8:4d:00:ee:4a:d0:40:07:b1:2b:c6:40:48:fc:
8f:f7:5f:7a:e3:34:32:a1:70:0c:81:e8:0d:23:09:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:99:B3:4A:0C:DD:F6:63:69:16:82:9B:93:C0:4F:4A:2E:0D:31:5C
X509v3 Authority Key Identifier:
keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:18:36:ab:06:46:fc:ba:54:b4:38:8c:78:9b:26:ad:17:63:
1c:9f:8a:70:7b:34:9d:9e:58:a8:98:e4:57:77:8f:3e:cc:db:
4a:ab:2a:2e:8c:b5:f6:bd:45:de:a1:c7:00:58:7a:48:46:2b:
93:16:0e:8c:d6:3a:9a:7f:ab:fc:88:34:2f:96:38:64:94:5a:
16:dc:b6:25:b5:5f:03:52:71:fa:96:a7:07:22:c6:9e:82:8c:
43:80:24:4c:62:85:5d:34:62:c1:d4:e9:cf:52:a6:f6:69:88:
af:16:18:56:b2:28:b1:94:7e:80:3f:30:f6:e2:47:ff:d9:64:
c2:16:ef:1c:13:b8:55:34:fc:39:61:7c:8c:7f:50:6b:b4:57:
d8:4b:58:8a:2f:6d:09:03:71:f4:4e:f8:67:c8:08:d0:4a:86:
42:c8:ad:4b:9e:b5:4d:0c:e3:39:8c:09:d6:fd:4c:4f:cb:ef:
43:68:c2:2c:21:e6:e2:26:1e:d0:b5:29:9d:49:2c:bd:75:0a:
74:45:dd:22:b5:f5:52:7f:10:0e:c1:59:71:8d:24:b4:31:f2:
e1:2c:a7:b7:93:5d:7f:f1:04:27:d8:a4:50:d4:11:94:22:af:
89:01:ef:c5:f0:00:8d:e7:d6:67:4c:f8:43:56:03:da:ad:f7:
1f:9f:d4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:44 2025 by rpki-client