Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft
File: G-vsblSMHSxoMZyNKaNfwG0Fxco.mft (raw, json)
Hash identifier: fmukjIyW3nuKsGEifo0iDBzKMw06S3Ib5XI+8fcrpkg=
Subject key identifier: 3F:9E:0B:F7:EA:D4:37:6D:0D:AF:9D:D7:9A:85:22:A1:1C:4E:DE:A1
Authority key identifier: 1B:EB:EC:6E:54:8C:1D:2C:68:31:9C:8D:29:A3:5F:C0:6D:05:C5:CA
Certificate issuer: /CN=1bebec6e548c1d2c68319c8d29a35fc06d05c5ca
Certificate serial: 019A003541FBE3682FD1B91FC1D28F44CEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft
Manifest number: 0183
Signing time: Mon 20 Oct 2025 06:01:21 +0000
Manifest this update: Mon 20 Oct 2025 06:01:21 +0000
Manifest next update: Tue 21 Oct 2025 06:01:21 +0000
Files and hashes: 1: G-vsblSMHSxoMZyNKaNfwG0Fxco.crl (hash: UkgCTi+t2lku0SfjVk9B0oZvxYieJK7CskhofdBC9kY=)
2: gLxG9OBR-307s9i7CUzgsFayA0w.roa (hash: U9Hk3a/+dmVqWlPybJkT20UlsNmTcI0F5wchliR1XTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:41:fb:e3:68:2f:d1:b9:1f:c1:d2:8f:44:ce:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebec6e548c1d2c68319c8d29a35fc06d05c5ca
Validity
Not Before: Oct 20 06:01:21 2025 GMT
Not After : Oct 21 06:01:21 2025 GMT
Subject: CN=3f9e0bf7ead4376d0daf9dd79a8522a11c4edea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:01:59:41:e5:e5:94:21:95:5c:92:75:24:
39:fe:d6:86:6f:5e:6b:78:8d:5c:2a:50:5e:03:d5:
41:46:11:01:48:3a:75:6a:04:84:61:56:20:69:2c:
a0:fd:1e:98:7b:85:b4:a1:74:dd:aa:30:5d:b7:70:
c2:7d:e7:84:ea:c1:84:02:9d:38:d2:ea:7b:18:81:
14:8f:c4:e5:4b:89:6a:51:d0:b6:4f:86:76:ee:86:
56:e8:57:02:20:ff:54:29:ae:f5:af:27:57:23:6d:
8f:07:64:26:70:60:12:53:f9:32:b8:99:52:4e:82:
a1:63:3c:47:3d:67:e9:94:2b:6f:68:fa:2b:f0:6d:
4b:ac:9b:93:71:bc:aa:cf:0d:84:3e:48:a6:90:76:
b6:26:f8:ea:bb:d0:4c:1f:db:d1:e6:a2:11:f8:ae:
b6:37:1c:f9:e0:a0:3c:31:00:40:6c:34:7d:c4:42:
01:67:43:25:c3:a0:f0:23:26:87:e7:2c:b9:ac:95:
e7:7a:8d:af:32:52:62:55:79:d9:e6:15:96:51:4e:
91:6e:ff:4b:c6:d4:22:e8:35:20:a1:07:51:78:bd:
d5:37:03:e8:50:3a:7f:89:72:e3:d5:d1:ad:0a:79:
a7:45:5b:5b:f5:9d:5a:91:73:53:e2:93:2c:2c:da:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9E:0B:F7:EA:D4:37:6D:0D:AF:9D:D7:9A:85:22:A1:1C:4E:DE:A1
X509v3 Authority Key Identifier:
keyid:1B:EB:EC:6E:54:8C:1D:2C:68:31:9C:8D:29:A3:5F:C0:6D:05:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c0:ed:47:74:c5:8c:59:45:6a:76:7a:b0:f0:20:29:ab:3f:
8d:83:cd:21:64:44:01:56:c1:2e:b4:5f:c0:bc:2b:6b:7c:0a:
ac:55:e4:1b:67:32:03:0f:18:1b:a1:0a:33:db:85:c9:c1:ed:
7f:f4:d9:03:6f:e1:04:9c:1d:6e:79:e8:2f:88:d3:a8:7a:23:
37:3f:08:ba:aa:20:70:7c:e9:85:f8:d7:a1:39:cd:4e:74:9a:
f0:02:d6:5e:2b:5a:b4:4c:81:58:dc:93:e0:a9:db:1e:8b:a0:
f3:73:ba:63:bc:6b:ae:c9:30:cc:32:cc:60:1d:3f:76:9e:07:
2a:bf:ce:ec:f0:be:1c:60:d7:93:47:1c:4f:95:cf:98:7e:8f:
22:58:94:eb:78:d3:7b:2d:c3:44:bd:37:46:c8:94:a9:2b:e9:
6f:e2:f5:06:b5:95:9b:17:a6:9c:d8:4e:7e:ba:d2:62:93:17:
b0:48:72:cf:05:c6:2c:34:70:34:98:f0:c1:5a:cb:78:e3:46:
8c:5b:ea:3c:95:2b:2e:32:70:d5:3c:08:63:fa:67:48:ff:06:
db:6e:3a:9c:17:17:51:78:e9:d9:97:9c:fb:b1:b3:a4:1c:af:
13:b0:1b:98:0d:d5:27:d5:5d:87:25:9d:0b:25:4e:ff:9a:5e:
86:9a:a2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:13 2025 by rpki-client