Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
File: G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft (raw, json)
Hash identifier: QJV5QIf9hcv33G7AhbB10PjGj8I+mVIv2YTvnIaQKUw=
Subject key identifier: 7B:29:9D:44:E5:CE:2A:6B:91:D6:CE:D1:6B:65:C2:CC:92:B7:F6:DA
Authority key identifier: 1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
Certificate issuer: /CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Certificate serial: 019A0110E37A8AFB4942CA2A83C32DD80BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
Manifest number: 101B
Signing time: Mon 20 Oct 2025 10:01:15 +0000
Manifest this update: Mon 20 Oct 2025 10:01:15 +0000
Manifest next update: Tue 21 Oct 2025 10:01:15 +0000
Files and hashes: 1: G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl (hash: EvV6pEefzAcwe4qPb4jDbkzhng7MjNPpfV//DHLtlJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:e3:7a:8a:fb:49:42:ca:2a:83:c3:2d:d8:0b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Validity
Not Before: Oct 20 10:01:15 2025 GMT
Not After : Oct 21 10:01:15 2025 GMT
Subject: CN=7b299d44e5ce2a6b91d6ced16b65c2cc92b7f6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:1d:6d:58:15:d1:de:d2:f8:cb:4f:2a:e1:
04:95:05:1b:72:c5:5c:26:45:ae:df:c7:1a:f5:45:
e3:12:a1:ac:2b:a2:8b:40:66:8d:66:3d:10:2c:cb:
b8:2c:09:84:28:9c:0a:f6:7a:37:25:80:96:81:64:
dc:20:81:c5:e2:6f:37:fc:c9:91:43:e6:d8:b5:b7:
b4:3d:12:8a:56:91:17:6e:fc:0f:e4:21:e6:87:07:
22:76:72:01:99:13:0a:b0:73:74:4a:ac:8a:03:8c:
a9:77:88:ae:0f:f8:28:fb:9b:85:2e:ef:16:73:d2:
a1:1f:cd:3b:81:a9:f6:9f:85:63:e3:5f:cf:db:d8:
1d:71:4c:e4:ee:ec:c6:21:eb:3a:a9:c8:77:a3:7f:
75:97:b4:fc:01:41:86:ac:f8:52:0c:e7:42:76:e7:
0c:cf:66:a0:5e:28:b1:b9:40:fd:18:c3:f6:a5:4f:
5d:ea:11:15:e3:73:7c:b0:31:bf:90:bc:80:21:3c:
72:29:ce:08:fb:ba:4a:a8:41:17:99:69:8d:58:e4:
f4:a2:82:f8:35:c6:1a:0c:96:b4:22:28:e4:14:af:
fa:4f:e0:69:24:e7:7a:b2:04:2b:76:5b:eb:99:3e:
a9:b2:98:fb:6f:e0:52:7f:5f:c0:6f:b3:21:20:cb:
a9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:9D:44:E5:CE:2A:6B:91:D6:CE:D1:6B:65:C2:CC:92:B7:F6:DA
X509v3 Authority Key Identifier:
keyid:1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:59:2b:01:86:0c:9e:50:4d:c7:b6:b0:dc:89:ea:90:25:03:
d9:4c:ce:23:83:77:27:d7:da:0f:2b:9b:da:98:3c:3d:66:82:
f8:63:33:6b:c5:c5:b4:de:48:da:0a:ac:f4:7d:8a:3d:be:83:
49:6b:ee:e0:52:60:c8:ef:0c:4e:fa:96:97:7e:de:86:ce:b7:
b1:79:76:d1:e2:86:04:a1:27:ce:b4:28:cb:14:dc:2e:cb:6b:
9f:01:99:55:db:04:e3:50:99:25:a6:eb:13:50:fe:18:7b:dc:
2d:32:73:77:76:2c:bf:e9:b2:f8:ce:ef:bd:59:61:75:e9:ae:
c9:9c:5c:fc:6d:b9:65:5f:ba:20:c1:4b:e0:94:48:ac:d6:16:
1c:04:86:43:ce:fd:e1:30:9d:16:8c:30:31:db:f8:14:75:d4:
8d:b2:b2:f8:7b:42:ea:64:c0:a7:06:e9:57:19:0a:71:3a:dd:
15:9d:94:1a:1d:60:63:ee:d0:9a:e5:d1:be:a6:18:2b:17:4a:
ef:4a:49:f2:0a:29:10:ad:a0:4d:62:b2:8e:4a:98:b7:bd:2c:
80:f6:05:10:2b:d7:ac:b2:49:ba:5c:40:90:04:1f:1f:2e:30:
7a:7f:20:ca:f9:f8:00:63:35:76:19:1b:cb:8a:66:0f:c9:a0:
f0:2b:bc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:02:13 2025 by rpki-client