Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier: S+l2lVQJesliC6mMFNdRuaRLjFjEKw7O999W9oHVuOE=
Subject key identifier: DE:38:80:B7:2C:B3:BF:53:92:22:B8:C9:5F:42:88:31:30:AF:F3:11
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer: /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial: 019A0035039415C7CF4FA108662D2A8193A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number: 0B63
Signing time: Mon 20 Oct 2025 06:01:05 +0000
Manifest this update: Mon 20 Oct 2025 06:01:05 +0000
Manifest next update: Tue 21 Oct 2025 06:01:05 +0000
Files and hashes: 1: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: 0peGwUoiEYon6GPaHMVum4TmfrLPrDZsHljbhFMLczI=)
2: ogliIW3uJqaM5LS-fzkMZKt_cLk.roa (hash: LLZA+4CzPtqrtq7hIsuRZwdNW4zECVbIb6kWURR2Rw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:03:94:15:c7:cf:4f:a1:08:66:2d:2a:81:93:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Validity
Not Before: Oct 20 06:01:05 2025 GMT
Not After : Oct 21 06:01:05 2025 GMT
Subject: CN=de3880b72cb3bf539222b8c95f42883130aff311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:3b:01:25:62:ca:5a:2e:13:44:0f:9d:cf:
ff:e2:bc:da:9f:52:6a:f5:d4:29:b1:72:f7:17:51:
50:d9:8f:ea:66:83:fe:02:ce:a2:e6:05:98:81:7a:
6a:fa:2e:14:37:0d:d8:be:f5:9f:e0:26:18:c3:cc:
9f:56:c0:82:fb:e9:22:17:ee:67:6e:83:d2:03:70:
c5:76:5d:7c:0b:e5:d9:01:fb:fc:41:49:b1:23:af:
bd:15:7a:f6:03:07:89:af:fa:2a:d8:fe:1a:f4:b7:
11:a6:75:cb:d9:c3:e4:cb:ff:57:01:5b:cc:d7:85:
5d:9e:ef:ce:e5:a4:2b:48:8d:ff:35:a5:fa:64:19:
fa:75:d1:d4:8d:1f:9e:65:45:c4:69:3d:d3:8e:03:
dc:98:29:98:97:b8:5a:a5:24:1e:2f:f2:1b:0b:bd:
4f:50:4b:ab:36:c5:f4:0e:20:40:09:22:4c:55:dd:
bb:5d:a4:c3:e1:b8:7b:2e:8b:54:eb:9f:59:b8:61:
27:43:53:f6:a0:d0:bb:1d:e3:10:b3:2d:ef:71:bb:
1c:23:fb:4a:9d:0d:24:ff:41:4b:cc:88:10:39:38:
2d:c6:ed:07:f4:43:14:8a:f8:bd:d1:1c:88:7f:ff:
47:50:13:1b:3a:82:23:f3:bc:6e:f5:2a:7e:b7:91:
e7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:38:80:B7:2C:B3:BF:53:92:22:B8:C9:5F:42:88:31:30:AF:F3:11
X509v3 Authority Key Identifier:
keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a9:02:ad:12:5a:19:63:ea:21:ba:b1:24:b3:62:8f:39:3c:
7e:e7:d2:2a:a6:65:7b:ad:f7:58:f1:e6:dc:ea:5a:1e:67:8a:
59:8f:89:11:ab:d3:85:29:24:16:bb:00:50:cc:f2:6d:1b:2a:
6e:e2:06:62:6a:6e:9d:d3:df:99:59:0e:84:7d:31:da:59:a5:
d2:e0:f7:be:bd:48:35:d0:f8:5f:6f:0b:5d:6f:70:0a:b3:7e:
a0:83:dc:bf:e4:0b:7f:70:ea:50:6c:a1:01:f9:ac:44:be:49:
66:e3:3f:6a:e8:42:bf:1d:a2:a1:0c:19:7a:31:de:17:8b:17:
3b:9d:23:31:04:03:d4:01:3f:fc:30:3f:52:ce:93:95:60:30:
e2:cd:bc:fb:ca:94:ca:32:c0:01:d2:d0:bb:3d:e0:eb:2a:a4:
d3:64:11:7c:46:e0:1e:09:e7:70:13:51:29:af:d0:fc:6e:a0:
18:36:9a:7e:0f:27:ba:1e:8f:90:af:c8:25:d3:e3:63:d2:7f:
be:e6:19:3f:43:3e:5e:62:78:27:d8:3c:02:a0:94:0d:60:ad:
15:b2:f6:0a:c8:02:4b:bd:32:71:86:4b:2d:51:bd:85:28:83:
53:85:60:8a:0b:b8:9e:2e:b7:48:68:dd:f4:be:b7:4b:d9:c6:
9d:0d:24:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:06 2025 by rpki-client