Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
File: g-k154ofll0QiRUhXQ8Et2tzPlg.mft (raw, json)
Hash identifier: 6z2m3NynBh3giZnAqbnIdryxal4ArhrtXEzlv+D+KOA=
Subject key identifier: F2:D6:3C:A3:F7:3B:62:EC:49:1B:AC:83:8A:F2:D2:22:FC:32:B0:04
Authority key identifier: 83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58
Certificate issuer: /CN=83e935e78a1f965d108915215d0f04b76b733e58
Certificate serial: 0199FBEB390A9EAFADCF6AE593DB14D69330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: g-k154ofll0QiRUhXQ8Et2tzPlg.crl (hash: MXMXFRhRFJNFcMwagoLAQl3ajavxgwbyd8W5xGDiVIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:39:0a:9e:af:ad:cf:6a:e5:93:db:14:d6:93:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e935e78a1f965d108915215d0f04b76b733e58
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=f2d63ca3f73b62ec491bac838af2d222fc32b004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9d:ee:ee:e0:16:93:46:17:e9:aa:ca:48:c9:
59:7f:28:27:d9:c2:c6:9c:c9:3a:41:c2:b6:72:88:
7b:3d:5f:ec:14:2c:f0:ca:66:7c:d9:74:01:e5:3d:
98:3d:83:15:36:4d:4d:9b:fc:02:9c:1e:17:4f:8c:
b7:43:0f:11:f9:90:1d:e9:2d:1c:11:c1:05:98:99:
1d:31:a9:72:e3:13:41:07:06:51:26:8b:a5:7f:64:
a4:e8:7d:cb:21:d0:0f:ce:80:be:75:2f:ef:05:07:
cf:ce:f5:ae:5b:da:66:9e:fb:2d:21:4d:9c:db:9a:
98:18:59:26:13:19:b5:84:21:2f:15:31:4f:6d:65:
72:fd:aa:eb:3f:8b:77:d4:88:e1:cc:24:2f:67:a9:
65:7c:f8:ae:1b:e9:83:1d:da:34:6e:c6:3f:7a:97:
89:68:14:5a:fd:0b:a4:d1:1b:ed:5f:53:89:34:25:
f1:8c:ed:5e:2a:63:0d:4f:de:4e:12:16:2f:48:50:
5e:45:81:2a:9a:de:0f:d0:05:b5:b8:aa:af:1f:00:
3f:75:15:b3:ae:47:3b:2e:16:80:47:35:1e:87:57:
00:65:36:0d:2b:31:75:37:4b:cc:94:53:f1:af:55:
f1:68:ec:92:34:c9:22:81:ad:4d:e6:c2:d2:b5:4b:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D6:3C:A3:F7:3B:62:EC:49:1B:AC:83:8A:F2:D2:22:FC:32:B0:04
X509v3 Authority Key Identifier:
keyid:83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e7:50:ba:cc:6b:31:a1:f0:31:a5:f1:b0:5a:4e:29:e0:ec:
0b:d6:62:ff:2b:24:e4:c0:cc:f9:ba:4a:74:d7:04:ea:a9:61:
72:42:80:5b:36:c4:ac:2a:d0:3c:2a:5e:d0:5c:d6:ad:a0:f9:
ec:6c:89:0c:a7:9c:96:d1:2b:69:d3:9e:89:29:8e:e1:62:3e:
a1:06:fe:67:82:35:c6:cd:87:49:f1:c1:62:e3:da:ab:03:ab:
bf:07:37:9a:ad:80:b6:dc:c3:5b:c0:94:7a:87:db:ae:22:71:
ea:aa:2b:5f:46:08:3e:cd:db:7f:44:e6:1f:2d:b8:88:db:e5:
16:09:b6:1b:e9:ed:00:51:6e:0b:5e:d0:89:df:2a:2a:4e:9a:
53:a7:19:a5:f9:21:24:a4:6e:7b:14:c0:e0:4f:55:ad:54:51:
6f:99:9f:24:a9:14:b6:cd:6f:db:47:1d:99:24:b4:16:3d:60:
c3:b0:b3:f6:57:e8:0c:e3:b3:70:d7:37:98:49:03:e9:56:50:
50:00:18:25:c9:05:76:f7:42:5f:83:cf:3d:fb:59:95:ee:be:
21:9b:5f:8d:99:2f:48:5e:00:d3:fd:7e:0f:54:6b:0c:9f:71:
94:24:dd:db:2c:4d:cd:84:4c:4a:33:0b:3f:f9:bb:8e:9e:02:
db:e3:a2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:57 2025 by rpki-client