Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
File: G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft (raw, json)
Hash identifier: 469Qt/4UqWhrjHE6vldiVdz3BX1PzgZZHnJNXJyDZzQ=
Subject key identifier: 4B:05:62:0F:E5:F1:72:5F:3B:40:5E:7F:B5:B7:E4:03:FD:AF:C8:BC
Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
Certificate issuer: /CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Certificate serial: 0199FCC64035B82E4FBDD22D4D3D83DDDBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
Manifest number: 0D77
Signing time: Sun 19 Oct 2025 14:01:14 +0000
Manifest this update: Sun 19 Oct 2025 14:01:14 +0000
Manifest next update: Mon 20 Oct 2025 14:01:14 +0000
Files and hashes: 1: G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl (hash: TC1USGBWPTm2I2F41ZCuj01MGFinrI9ajsa89YW5+KY=)
2: j_n9Kg39TCshbmu8W1dk2NVjcFI.roa (hash: 56S9svTLKP+1FymtE0skXNThCYHX7pM3o2tRL4nBuW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:40:35:b8:2e:4f:bd:d2:2d:4d:3d:83:dd:db:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Validity
Not Before: Oct 19 14:01:14 2025 GMT
Not After : Oct 20 14:01:14 2025 GMT
Subject: CN=4b05620fe5f1725f3b405e7fb5b7e403fdafc8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:0d:d1:7a:55:20:71:1d:f9:90:7a:ce:d0:
38:0b:58:c2:76:92:36:8f:39:6a:8d:b2:a1:1e:cf:
3a:ed:25:b1:5e:ea:8a:48:22:52:2c:b0:04:20:ff:
e0:7c:b1:43:30:48:0a:e8:33:03:67:cd:0a:83:d9:
f1:8a:95:72:db:de:48:0b:e1:f3:08:1b:0a:32:aa:
86:7b:2c:ac:bd:70:95:e0:f0:fe:60:bc:b0:7b:f0:
ad:8d:80:35:99:41:b0:90:06:27:26:2d:86:c6:6c:
8c:1f:82:9c:0f:23:e0:5f:c2:5c:be:a7:4b:a5:4c:
9e:5e:92:c6:6c:a7:e3:ad:93:f5:48:95:95:aa:48:
9f:b7:43:17:9e:92:24:92:3a:c1:7d:37:c8:fc:35:
af:5b:81:12:74:c7:5d:d6:dc:3e:b0:65:fd:98:a4:
d4:c7:ff:07:72:c8:0b:bf:8a:0e:6a:9c:b3:1a:ce:
0b:85:7f:77:d9:82:61:ef:9a:bd:33:b2:4f:ed:0c:
7f:b2:16:91:ff:ee:2b:c3:52:b7:33:b8:ec:32:67:
e1:52:03:99:ce:4b:58:5a:e8:f3:8c:96:9e:70:80:
ef:9d:32:f1:38:bc:4d:37:94:b3:f4:d5:88:47:7f:
58:dc:16:c3:33:d4:92:74:cb:bb:75:0b:14:cf:c8:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:05:62:0F:E5:F1:72:5F:3B:40:5E:7F:B5:B7:E4:03:FD:AF:C8:BC
X509v3 Authority Key Identifier:
keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ef:60:36:2e:0e:ae:57:c0:f6:30:78:9b:98:f2:dc:ec:07:
e1:f7:71:9b:24:01:1f:86:79:68:49:23:56:29:fe:63:72:e4:
03:b6:45:66:22:3a:2c:ca:9f:2b:b4:8d:a5:6d:cf:af:1a:10:
44:06:27:b8:75:92:ba:ca:b5:36:58:12:05:0c:38:3b:d7:eb:
ba:96:78:88:bb:cd:06:f3:83:0a:c0:f2:dd:64:36:84:00:c6:
83:15:c8:dd:d9:54:f4:c8:cb:99:b2:ae:a6:f9:df:3a:0d:a3:
71:8b:5e:96:a4:0f:ee:f4:73:ca:53:f8:72:57:38:6a:61:0f:
4c:b9:b6:5a:62:a8:06:47:dd:33:0f:63:0b:af:0f:f0:df:63:
a8:65:59:0e:37:5d:65:e5:55:03:f2:12:3b:6e:e9:e7:0f:6b:
67:93:24:d7:45:b1:77:6e:5d:c2:94:00:a9:7c:5a:4d:ad:74:
1a:27:c0:f8:99:28:1c:05:a0:ef:93:c2:97:f4:bf:ae:a7:fd:
5b:f1:c0:5b:1c:fe:6c:ef:5f:be:11:74:b5:8e:1f:9c:f4:6d:
4d:4e:7b:19:35:58:21:ff:12:89:36:cd:94:6f:7e:01:10:18:
36:96:c3:e4:c5:1a:c0:f4:82:87:19:3f:f8:be:a9:75:12:c8:
2f:3a:b7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:49 2025 by rpki-client