Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
File: G9LUY64VNG1e3Xk3uL-o4JsUN20.mft (raw, json)
Hash identifier: HDe0rNtgRIpsUMfXfVBESeWDdvt2MAYwH5cv5LLfNeE=
Subject key identifier: 4C:95:0A:C5:21:46:6F:CE:20:FE:BA:3B:42:9A:5D:41:AC:D2:89:E0
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Certificate issuer: /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial: 0199FC58D25BE21D32D5BD996AC668492774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
Manifest number: 11C1
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: 61pqBezJLAJE5VLA7yrYYgA1x4Q.roa (hash: wkbkRNJ1tewUM/PlCjzz6x80lWa3MJj4NI3f+PnCsBo=)
2: EpJyeK5l3AFsANhOcZBiUOqM9nk.roa (hash: jEvX43x9SqA5MKvP91NPr1LUmWhpxkfIrUnmrmVabWE=)
3: G9LUY64VNG1e3Xk3uL-o4JsUN20.crl (hash: z8immaXxKWilIdSRHF2h7HaT7vO6HVEfE8m9AKctjxE=)
4: XyfRuc4kupwWuvivIxyG_eB9gmg.roa (hash: KYzWwUCDT/C8f7tzUEGe7k72yVFrK9hL5A1TsIJ1sdw=)
5: jLqRq9df1G6zlawXTbhxNybx_aU.roa (hash: U7jgU6c2HeS0w5bhwmU3yd/cT+TakYFUUagP3qrZf9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d2:5b:e2:1d:32:d5:bd:99:6a:c6:68:49:27:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=4c950ac521466fce20feba3b429a5d41acd289e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:f6:47:ef:72:01:5f:32:a1:95:8d:ea:5e:
1e:2c:fd:1e:d1:8b:bb:93:2c:98:fb:28:bf:70:26:
9b:4b:44:16:a6:1b:c3:fd:2a:08:6b:78:72:b4:08:
67:67:c4:b3:4a:c8:9a:39:74:33:53:4b:02:9f:9b:
80:cc:9e:99:5c:28:2a:b0:ea:6d:b7:30:5e:8f:d2:
f5:03:89:74:88:89:20:ef:86:e2:cd:b6:be:95:d4:
62:e4:71:5e:a2:3b:55:29:22:3f:32:39:18:50:4c:
29:cb:4f:be:7b:09:b9:60:5f:7d:44:08:81:aa:da:
f1:4c:8f:8a:65:7a:34:ef:65:e5:82:cc:f7:d9:03:
7e:19:ac:ad:3e:68:03:d4:46:a6:5f:c0:f5:a3:9b:
bd:30:de:45:e5:ce:7f:c3:98:ab:cd:65:c2:ef:e4:
ba:0c:54:c6:71:19:eb:cb:49:50:d1:47:4a:33:e6:
0d:68:e7:b0:14:39:04:6b:7d:3d:93:ef:2b:a2:16:
08:b5:b5:8e:1e:1a:7d:f2:31:94:50:21:b4:2f:8f:
e6:55:c9:52:ad:87:1e:60:2b:f7:13:6e:55:83:82:
16:58:66:78:22:9d:dc:5b:4e:fb:77:7f:a3:33:e4:
70:d8:19:2f:ec:b2:83:24:f7:6e:ba:bc:ef:15:12:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:95:0A:C5:21:46:6F:CE:20:FE:BA:3B:42:9A:5D:41:AC:D2:89:E0
X509v3 Authority Key Identifier:
keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:58:a7:66:5d:26:96:0a:0b:7e:7f:eb:bc:c1:c3:f1:6f:d3:
ff:db:e7:a2:63:36:35:c9:8c:e1:2e:f9:aa:74:7f:5d:3e:33:
81:2d:15:e9:c6:4d:11:ba:f9:68:47:5e:25:38:57:97:8e:8a:
77:13:04:ad:c6:d4:2e:75:68:a8:21:19:93:40:41:de:1c:76:
2f:71:c8:84:85:ae:d1:0e:8c:b4:ed:8f:5e:fd:08:1a:62:b1:
a5:bd:96:bf:94:21:00:99:2f:75:e6:29:c0:d1:0a:5e:2c:6a:
11:01:6e:c4:88:8c:1a:51:f9:cc:62:89:4e:12:fc:c2:49:ff:
d3:12:12:0c:47:d4:5b:50:f9:cf:3f:f1:4d:61:70:5d:5d:b9:
d5:d7:ad:b6:4d:0f:be:7a:f7:d5:1f:62:b0:e6:d1:aa:ca:98:
8c:af:f3:85:e0:44:29:69:97:93:b3:e9:3b:b2:d5:99:2b:64:
c9:d4:a6:cc:20:78:82:8f:d8:f5:57:a9:b2:8c:3e:e8:d5:fe:
e9:c3:90:2e:ab:bd:81:50:e9:17:41:db:f5:82:72:70:af:e5:
97:28:f3:b1:9f:19:97:a2:4c:40:81:b1:ec:d3:45:1b:1c:fa:
6f:c8:8b:ef:db:af:22:99:cb:5c:3e:1a:70:8f:6e:5d:bb:21:
81:c6:3a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:35 2025 by rpki-client