Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: okpRBpTzzWPw1ucnq7yv/FHKaICf40XEkdgXBQ3BZR0=
Subject key identifier: 94:E0:3D:BF:59:59:A8:B5:45:F5:B3:CF:5F:65:FA:22:25:A8:14:82
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 019A01B65D632BFC521B368B1B1B77CD460A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0BF0
Signing time: Mon 20 Oct 2025 13:01:59 +0000
Manifest this update: Mon 20 Oct 2025 13:01:59 +0000
Manifest next update: Tue 21 Oct 2025 13:01:59 +0000
Files and hashes: 1: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: VKQLQJLiN3WeF6CWWjxt1wZwf5s0TE8XPwY8xlFFEnU=)
2: TRfMCYgQom2qb1ltkPZ8pDFMPbw.roa (hash: B/bZzAE30Cbi1NKH6O3ZfRrv6UmAF6KTnp6VWp5movg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:5d:63:2b:fc:52:1b:36:8b:1b:1b:77:cd:46:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Oct 20 13:01:59 2025 GMT
Not After : Oct 21 13:01:59 2025 GMT
Subject: CN=94e03dbf5959a8b545f5b3cf5f65fa2225a81482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:bf:04:39:4b:90:cf:0c:27:60:98:b3:11:
a1:61:5b:87:9c:33:23:08:3f:3b:00:5a:53:c9:90:
64:23:40:ee:06:4f:d5:22:20:56:89:4a:fc:50:61:
47:65:5b:41:99:2c:d8:72:fc:51:92:c2:db:4d:fa:
2d:47:9e:ae:c2:9c:0e:42:18:3b:8b:bd:d0:6a:6e:
9a:c9:c3:24:02:44:99:3a:02:ad:c4:e7:fb:71:27:
fa:c7:7e:84:c6:4d:04:06:20:ec:52:6a:2f:40:bc:
e2:ee:15:f7:6d:a8:ca:3a:14:e1:51:d7:55:45:40:
8e:43:4a:69:f2:76:d1:f2:da:04:95:43:d6:d4:5b:
19:d3:48:9b:31:cf:91:42:96:93:ab:51:bd:5c:d9:
da:58:11:1e:2d:65:78:54:21:b6:90:df:60:cf:c3:
cf:82:84:b5:6c:d6:32:a5:8a:e3:df:f1:e0:ac:fe:
cc:d7:50:1f:dd:0e:44:cf:86:d1:79:a2:3c:6a:dd:
21:3c:11:43:1d:77:cd:fd:9e:15:b0:dc:24:ad:87:
1d:8d:e2:c9:46:55:6c:fb:dd:fd:c4:cd:b9:4a:bc:
ba:f8:55:39:df:20:d0:fb:80:fa:08:a2:61:59:d2:
2b:2f:29:db:01:ed:27:61:ef:57:21:8b:75:90:69:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E0:3D:BF:59:59:A8:B5:45:F5:B3:CF:5F:65:FA:22:25:A8:14:82
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:71:f6:4b:83:52:5e:cc:3c:ba:59:02:bb:51:2e:55:25:22:
8e:e5:29:db:b0:48:0a:45:70:a1:48:c1:8d:45:11:a5:b2:4c:
16:f0:df:3b:75:72:8d:63:87:b0:10:91:be:94:2d:d0:72:2c:
b7:39:d6:ed:f6:b1:d8:32:a6:d4:2a:50:b9:9c:45:60:a2:57:
9f:e6:69:08:b5:47:44:3d:2c:12:27:cf:a6:d2:e7:34:5f:25:
fe:be:3c:fb:24:65:31:02:99:4e:84:b5:63:f6:6c:c9:be:ca:
9a:26:c5:9e:81:8f:bc:9f:67:46:9c:98:a6:18:37:6c:6e:75:
ac:43:18:a5:dc:fe:7a:6c:ac:92:68:54:e4:92:92:8f:a8:92:
74:f5:08:57:f6:9c:80:c1:13:43:87:c2:d1:50:18:63:24:4a:
aa:18:cb:53:8f:6e:89:eb:e5:84:91:5c:ab:60:3c:4b:f0:2c:
cb:d1:7e:8a:33:0e:d3:1a:ae:6b:34:26:af:bf:8d:16:7a:02:
e9:6d:0b:e4:b1:83:7f:9f:8c:0d:bb:f7:3d:24:78:82:b4:9b:
b0:96:32:cd:76:58:8f:b4:b8:25:de:8a:69:e2:05:62:f2:bc:
38:67:2c:8e:a2:22:e1:ff:a1:3b:54:a5:79:dd:9e:20:93:f0:
28:9a:90:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:26:22 2025 by rpki-client