Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier: D8E+c3RaR7tXuDBz8B2lbPx8/vbBNLhg3pIFB+5ZLqo=
Subject key identifier: F8:5D:6A:6C:91:7B:E4:D7:E1:5F:AF:79:58:AB:BD:E8:FD:45:FD:1F
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 019A0591B6BBC71068A947F2AB1AC8AC11DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number: 16E9
Signing time: Tue 21 Oct 2025 07:00:26 +0000
Manifest this update: Tue 21 Oct 2025 07:00:26 +0000
Manifest next update: Wed 22 Oct 2025 07:00:26 +0000
Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: GgQc7phgiU0iETHasALyBoOAgKMcBd9OoODWjEFFjg4=)
2: xIsbgd-1jNIqLfaxvWsXTolM4hw.roa (hash: IbSWm3FdPDBzLYRsZr3IBY9SNHNxrtPl7LMS9I121XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:91:b6:bb:c7:10:68:a9:47:f2:ab:1a:c8:ac:11:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Oct 21 07:00:26 2025 GMT
Not After : Oct 22 07:00:26 2025 GMT
Subject: CN=f85d6a6c917be4d7e15faf7958abbde8fd45fd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:8a:79:19:23:05:d7:27:cb:35:ee:0e:3e:
d5:ed:2f:33:e0:ce:33:e2:81:5f:f4:f3:8b:43:12:
b2:6e:b7:bc:7a:30:8c:ef:3b:36:0d:29:82:e0:c6:
b1:10:20:1f:9c:92:12:bb:b4:09:7c:86:24:4e:33:
57:8e:57:c2:db:0c:b2:7f:05:33:43:24:84:73:8d:
f7:e0:b2:53:11:25:c3:22:9f:b7:4b:68:1d:2c:0e:
a0:37:5a:4c:a8:0b:91:86:1d:7b:44:4c:8e:f3:25:
27:fa:4d:4f:d1:e5:1d:3e:22:73:c4:f2:5b:2d:c0:
92:72:98:79:f3:08:7e:3d:2f:fd:a0:0d:94:21:8d:
a5:08:04:61:88:ce:8d:73:46:9e:a0:af:03:fd:a7:
81:ab:e3:ec:81:9c:c2:b6:39:87:5c:af:02:19:0c:
1a:b6:60:79:d2:8e:cd:4f:64:49:b8:da:92:8f:98:
45:46:5d:81:9e:c2:5a:c2:03:e2:33:32:58:9c:92:
83:bf:be:d7:ce:f8:8c:26:15:ae:98:7f:fd:bf:c6:
a1:41:db:df:48:0c:4a:4f:cc:7a:13:f9:47:b1:4b:
29:54:a8:30:e2:05:1f:c5:27:c2:31:12:e8:70:b5:
ed:05:bb:2a:3d:2a:2d:0b:59:3b:91:8e:52:8b:17:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5D:6A:6C:91:7B:E4:D7:E1:5F:AF:79:58:AB:BD:E8:FD:45:FD:1F
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ac:fc:ce:2a:e0:00:e5:ae:0e:a9:5f:3d:e5:ef:85:b6:22:
5b:d5:d0:91:be:9f:7a:f5:25:2d:63:26:0d:b0:cc:10:e3:c8:
ee:9e:15:c4:29:94:89:9d:33:43:17:e4:44:aa:4a:54:b3:24:
58:42:c7:30:d6:32:c7:1e:29:1e:b5:e0:5a:ff:58:cd:50:b6:
55:5c:b6:f0:e0:9d:1a:76:66:46:df:9c:54:a0:04:d3:5f:dd:
6a:1f:c1:c8:eb:08:c9:47:e4:c8:6d:3d:9d:da:2e:24:07:64:
b8:e6:3d:b8:07:41:42:98:b8:83:b8:65:42:fe:77:de:f2:a8:
d0:e0:3f:5c:f6:95:06:24:50:dc:c3:5a:2f:2a:a3:ba:d2:fd:
64:ec:19:27:ab:11:e6:94:36:35:34:22:41:08:db:68:ac:b9:
08:aa:c2:b1:89:c7:04:70:38:ff:a2:e7:6a:20:66:3a:ba:f6:
e2:c1:21:b8:34:e7:81:03:20:bd:ce:30:af:5e:9d:f1:94:eb:
28:b8:4f:aa:4d:f1:5f:1f:97:f9:b7:fe:aa:93:ed:9a:57:07:
39:62:c7:a9:0c:a8:ef:d5:9f:a4:dc:44:b0:33:7a:6d:de:71:
b6:0f:a2:af:0c:86:e7:36:3b:8b:d2:1e:ea:79:88:ec:93:8e:
b5:e0:bf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 15:10:02 2025 by rpki-client