Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: 32HnMCXWOd+Gj6Xy/6aEvXBzkkorXRJRHDxKeuTs/1k=
Subject key identifier: 18:A4:8C:FE:4E:ED:AE:55:55:5A:8F:CE:5A:2C:93:61:31:39:CF:FC
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 0199FBEBCBFDBB5B40F7D6ED2C8185689532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: irzz8RDs7yvyJ7P/wLB+moJRmaLsqB6Eh5sD9Npraxs=)
2: a6z9s2B5USpArv-yW1XShxJdtpo.roa (hash: hfVnswmh8KT0yGpguvtRDoEqQ95xhx5KsIsgaJn/9yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cb:fd:bb:5b:40:f7:d6:ed:2c:81:85:68:95:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=18a48cfe4eedae55555a8fce5a2c93613139cffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:bd:77:8b:16:7e:ef:30:c0:a6:7e:bf:4c:
6a:b7:63:72:7e:5a:79:42:2c:53:6d:89:73:ca:41:
82:c3:3c:cb:49:0f:a1:80:4e:09:ca:d0:4e:08:cd:
97:6f:c8:b0:8e:a7:68:d8:4e:78:66:5f:ea:3e:0a:
29:2e:81:81:0c:ba:ac:8d:a7:fa:5b:fe:9b:e6:86:
09:7b:3a:f6:54:d3:eb:57:b6:f6:79:32:1c:de:6c:
56:47:f7:ce:5d:07:9e:55:bf:f1:49:9b:a7:c6:49:
3e:6f:a0:5a:36:a4:d3:82:45:ba:df:ce:ce:69:3a:
aa:8d:67:a4:29:cc:ea:1b:b9:33:4b:46:31:f0:7a:
d3:c6:cc:c0:69:3e:09:d3:96:af:8b:d5:2b:83:ba:
79:dd:30:9c:67:01:1a:de:5f:34:34:29:b6:1d:e7:
d5:2f:d1:7c:a9:0f:65:87:85:3b:5b:fd:3c:03:4f:
4c:a8:e1:6c:68:97:16:c2:95:4e:8c:e5:63:fe:92:
8f:06:c9:87:e3:7f:2b:71:10:5e:cf:29:24:fc:ea:
e1:2c:3b:0f:cd:a0:51:2e:bc:bf:7b:a4:8d:b8:94:
39:78:96:03:88:58:e2:1d:66:11:f3:88:b6:2b:bf:
fb:76:e8:99:64:70:93:7a:6d:16:e5:b3:75:7f:26:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A4:8C:FE:4E:ED:AE:55:55:5A:8F:CE:5A:2C:93:61:31:39:CF:FC
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d4:e4:59:c2:bf:8e:2d:b9:15:29:29:c1:4b:b4:18:5e:d5:
9c:e0:a3:93:ee:5b:92:ab:74:f8:8b:11:94:bb:3e:83:12:7e:
fd:e3:d3:d3:e0:a3:94:24:0d:57:f8:76:b4:89:a8:71:41:7b:
1d:83:0d:2c:00:2b:a2:54:be:b2:7a:a8:0d:95:3e:bc:6a:91:
74:45:89:96:3a:68:27:5b:17:10:7e:36:55:a1:78:2a:18:95:
2f:08:47:b1:29:89:c6:ff:c3:41:aa:66:8d:cf:d4:07:92:d5:
7f:ee:98:f9:14:9c:a2:b7:fc:2d:8d:40:8c:2b:0a:63:7e:d9:
8a:37:df:51:55:37:82:0d:2b:d4:cd:1d:aa:e8:05:ad:88:17:
91:3e:b8:56:38:4b:9c:f3:a2:99:e6:18:a3:12:a6:2f:f6:f7:
53:3e:bd:be:91:d9:29:9b:45:18:b3:01:61:26:e2:dc:65:82:
7a:27:8b:f4:a2:3d:ae:a3:19:ff:3d:b3:6f:3c:a8:d1:9b:fa:
34:d1:94:44:a6:a8:ef:e5:a5:b2:da:68:54:c2:e0:c9:75:85:
c2:f5:30:39:4e:29:9e:6c:de:3f:61:e9:7d:7e:44:81:77:a1:
0a:6d:e1:03:06:80:0e:f4:c2:9d:ba:96:37:f7:b6:8f:d4:15:
c1:7c:e6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:46 2025 by rpki-client