Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
File: G7gLSjMnxYOuzbA87z9k8zvVmwg.mft (raw, json)
Hash identifier: /fG3MlwkHz3qDAASfeN8Zi1mxyPEg/Ub1XfN1EbLMPo=
Subject key identifier: AA:9F:A3:62:9B:93:CF:81:C4:D1:7C:E7:BD:49:07:8C:2E:E6:F7:C6
Authority key identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
Certificate issuer: /CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Certificate serial: 0199FB45D0E9A434ABEE1C59758FB736B517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
Manifest number: 0C05
Signing time: Sun 19 Oct 2025 07:01:20 +0000
Manifest this update: Sun 19 Oct 2025 07:01:20 +0000
Manifest next update: Mon 20 Oct 2025 07:01:20 +0000
Files and hashes: 1: G7gLSjMnxYOuzbA87z9k8zvVmwg.crl (hash: ODlJ0Jp9+RVohfmSPa27s2DJ/7IUNvv0AUwQeG6e/G4=)
2: f9_4yHGEiJhxZligkSR6T3R3EKU.roa (hash: zpcNNRByx6ZecO+EUAONqKSkYOomMoB7CmsUhShj7mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d0:e9:a4:34:ab:ee:1c:59:75:8f:b7:36:b5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Validity
Not Before: Oct 19 07:01:20 2025 GMT
Not After : Oct 20 07:01:20 2025 GMT
Subject: CN=aa9fa3629b93cf81c4d17ce7bd49078c2ee6f7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:9b:ab:f0:5c:be:f8:00:a6:a5:c7:db:95:
8a:3f:82:a0:9c:5e:aa:cb:71:d2:c7:2d:0d:20:79:
ce:7c:67:76:dc:cc:72:8d:d1:f3:54:7d:44:2d:bb:
1f:c6:48:e1:68:9f:47:1b:da:28:ed:58:79:b0:81:
22:36:3b:c1:e2:05:43:9a:ef:21:b5:34:1f:f8:fa:
87:a3:f5:7b:13:2b:c6:f0:d0:97:22:c4:25:3a:46:
17:2c:dc:ea:9a:82:89:47:65:dd:8d:eb:9e:b0:ed:
60:8e:e1:90:d0:6f:c8:43:c0:4d:65:e0:ff:39:80:
9d:de:23:a2:3c:a2:90:b1:b1:cb:97:71:19:c7:7c:
0c:82:77:df:3a:a1:8a:1b:b6:70:97:8c:b1:33:d3:
ea:7e:09:3e:c3:a9:48:ff:fd:51:4c:13:f1:50:42:
1d:af:73:37:dd:aa:38:21:69:7b:fd:53:de:cc:f0:
8b:a5:e9:9a:0c:e2:ab:df:68:ec:92:48:22:17:f4:
44:e9:c6:38:88:60:4f:a0:81:2f:0a:f5:69:95:2c:
b8:d6:e4:6f:10:79:9f:87:e2:17:0e:22:0a:e2:bd:
dd:c6:f9:2b:d9:73:5d:ba:c5:32:a9:98:e5:16:7a:
83:c2:87:05:2f:20:47:f8:cd:3b:1c:94:dd:56:ee:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9F:A3:62:9B:93:CF:81:C4:D1:7C:E7:BD:49:07:8C:2E:E6:F7:C6
X509v3 Authority Key Identifier:
keyid:1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:81:40:54:aa:a5:3b:f5:7d:1a:87:dd:71:90:41:a3:67:00:
a0:6f:eb:ce:3c:e4:e7:72:72:e6:ef:ad:11:7c:84:ce:d7:1d:
d0:e5:42:e0:93:9d:8f:9c:06:bb:ed:b0:93:ae:6b:98:3f:65:
4e:c9:08:b1:d8:9c:86:4d:c4:0a:95:1a:7a:5b:1b:2e:a0:33:
a7:e7:2d:71:b5:c0:42:9a:29:fa:e8:4f:4b:fa:9d:99:f3:a6:
e8:1f:87:d4:89:1c:d3:6b:c6:b0:cd:a4:0a:00:cc:f2:3d:de:
9e:3f:d0:6e:4b:ff:ed:eb:f5:4b:cc:db:94:7a:a8:d7:1c:3a:
a9:7e:79:36:5b:1a:2d:d3:d8:c4:85:e6:81:4c:b5:5f:29:9b:
fc:8c:59:27:72:c5:50:14:f9:79:ca:a3:9d:c2:a4:e6:c8:1f:
1f:09:04:bf:1b:28:c8:59:1a:84:ab:f3:cc:05:a5:1f:28:b7:
d8:e0:8a:da:a5:ca:fd:b4:60:94:00:10:76:1a:64:f8:e0:06:
a7:95:6b:ce:94:72:01:cc:94:18:1e:06:aa:02:48:00:57:80:
c4:01:29:fa:22:de:ee:f7:8c:a5:b6:ff:87:7a:fc:41:21:cd:
b8:63:70:65:91:a2:52:60:86:42:c9:58:59:e5:25:1d:28:08:
60:79:72:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:14 2025 by rpki-client