Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File: G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier: 6/oig4+2kCHYZjw41QSzfCWwESynYVHGnah/O7jjVFU=
Subject key identifier: 17:1A:6B:49:46:C0:04:45:FE:B5:2E:69:B8:57:8A:C5:9C:16:CB:C9
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer: /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial: 0199FEEB888C1A3193D885184D11DB4D906F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 00:01:12 +0000
Manifest this update: Mon 20 Oct 2025 00:01:12 +0000
Manifest next update: Tue 21 Oct 2025 00:01:12 +0000
Files and hashes: 1: Csk8FW5y7YJBzT_KmLLv1t_20_E.roa (hash: v8gWLbfcXD73mmO4K/7j3PoZmZQLB/oP8z7Xeflu12k=)
2: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: fgqAJ5q//L8RtQY+LJC6T0WxOSOsRx6aOZ5s94am37o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:88:8c:1a:31:93:d8:85:18:4d:11:db:4d:90:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Validity
Not Before: Oct 20 00:01:12 2025 GMT
Not After : Oct 21 00:01:12 2025 GMT
Subject: CN=171a6b4946c00445feb52e69b8578ac59c16cbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:15:fd:e5:3a:1b:60:28:d5:12:be:e3:3e:
42:0f:8a:b6:56:c3:e1:7e:80:2d:db:c1:fe:c1:07:
d8:cb:b8:59:18:a4:e8:96:52:be:4a:5d:56:4b:50:
36:25:7e:5b:a4:8f:05:cd:dd:89:2d:61:05:d3:3c:
d4:1f:49:96:06:f3:bc:0d:2e:06:8d:2a:db:87:d2:
c6:83:06:66:c4:70:df:d3:c4:b5:ab:a9:94:da:98:
6e:77:a3:95:7b:57:79:1a:05:b4:6b:09:da:d4:3d:
a4:70:d3:a1:f5:33:f0:06:bf:93:c2:a5:f6:3f:af:
c3:7e:57:7d:5f:e0:fe:fd:30:16:92:ed:b4:4a:99:
7a:53:3d:51:d5:9e:cc:22:f1:fb:52:9d:a2:de:47:
ed:f8:47:cb:86:70:49:6a:a9:1c:b4:06:01:ea:ec:
e7:43:5e:e9:a6:2c:4e:67:ff:9f:b9:c8:24:95:b3:
0d:cb:c2:ff:fc:11:a5:3b:ae:4e:cb:00:82:cd:e1:
5a:aa:60:20:03:74:6b:ec:35:a0:ed:a4:a3:2e:56:
82:8e:3e:7f:c9:8b:03:6d:be:71:d7:30:b8:f8:05:
0c:35:11:9a:f8:01:64:3c:4a:6f:84:0c:b2:51:de:
27:23:8b:6a:d3:27:28:42:48:e5:24:03:7e:60:02:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1A:6B:49:46:C0:04:45:FE:B5:2E:69:B8:57:8A:C5:9C:16:CB:C9
X509v3 Authority Key Identifier:
keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5e:4a:a4:b5:43:5d:5e:63:fd:27:5d:22:30:13:18:d9:1d:
61:da:19:d5:c4:fc:dd:80:98:81:98:fd:86:dc:8b:f1:5e:31:
44:9a:47:07:02:68:7c:a8:e1:18:fe:a7:b5:24:34:81:81:f1:
ef:b5:66:78:3e:cd:3b:e2:d6:cc:d8:e9:cf:5c:80:18:c2:5f:
8c:ce:20:49:a2:cf:3f:30:a4:bf:40:84:48:f3:40:a2:4f:0f:
b2:00:39:d9:06:7e:b8:4b:f2:a5:21:52:bf:a1:8b:86:57:76:
c0:67:53:30:1c:87:41:57:7a:07:f1:2c:bf:b9:fe:1b:64:f5:
a4:e8:3f:f3:c3:1c:26:d3:7d:38:da:4f:ba:4f:c3:19:7a:2c:
9c:32:b4:77:aa:ee:0d:a9:56:34:9a:fa:d4:1f:53:9e:dd:35:
7d:d3:3e:14:74:41:79:e6:f9:5d:60:62:b9:ac:d2:a1:b2:e7:
bb:a2:f1:1e:1a:7f:fb:41:75:c1:0a:43:3d:4f:e2:46:09:c9:
b0:3c:66:4e:7f:23:17:e7:48:70:a5:ea:08:c2:03:3e:4c:68:
9a:4d:b6:d0:d5:f0:4c:22:f3:50:98:d3:3d:2c:0b:ae:fc:7a:
36:32:a3:f9:eb:f4:97:87:54:8f:ec:b3:e5:a2:26:cd:a4:1f:
94:d7:5e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:23 2025 by rpki-client