Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
File: G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json)
Hash identifier: 5DXeeFYXz8T2mhXqlDwAFjAMp/n3qQSMKwJZA37DjqA=
Subject key identifier: 42:04:50:3E:6A:E8:29:89:FF:C1:AA:E1:87:D1:0E:CB:4C:0B:23:D3
Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
Certificate issuer: /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Certificate serial: 0199FC58580129E4EBEB4771749E608D1085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
Manifest number: 1590
Signing time: Sun 19 Oct 2025 12:01:12 +0000
Manifest this update: Sun 19 Oct 2025 12:01:12 +0000
Manifest next update: Mon 20 Oct 2025 12:01:12 +0000
Files and hashes: 1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: oqg9xkN0aLnOS9d8tMu/xXW5cwsLKKQMFcM+Oi7rgv0=)
2: uDXgZr4d7paw0tQnlQAuxTAiQJ4.roa (hash: ZLVG9qnKbapzUcUyG3vXPFRhsGi/6YqVmyuunmvWt4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:58:01:29:e4:eb:eb:47:71:74:9e:60:8d:10:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Validity
Not Before: Oct 19 12:01:12 2025 GMT
Not After : Oct 20 12:01:12 2025 GMT
Subject: CN=4204503e6ae82989ffc1aae187d10ecb4c0b23d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:91:13:6b:ec:fb:52:91:68:b8:b4:0e:d7:
50:74:57:59:86:3e:90:e9:c0:2d:3a:0c:49:df:a4:
f1:ad:b9:0f:b6:09:c7:f0:a4:9b:ef:01:4c:dc:6a:
c7:25:b4:82:8e:6c:bd:80:a4:d9:78:0c:f0:0a:30:
7e:c8:f1:5d:e5:21:57:fe:07:7c:7e:ad:7b:a3:0b:
6d:a9:a6:2a:ea:51:23:9c:b5:10:7d:47:ea:9e:62:
11:15:e9:d4:bc:d1:33:8c:14:f7:a6:0d:d5:bf:00:
07:26:9d:38:b4:39:3d:28:5b:72:af:18:0f:dd:67:
af:58:b2:07:89:e4:f5:bb:f1:75:e0:e9:eb:03:4d:
49:da:0c:01:c6:92:42:7d:e1:9c:de:36:6f:09:0b:
1c:46:c1:dd:0c:82:7a:20:69:fd:d4:f8:1f:bf:4b:
f9:b9:40:8c:69:77:c1:d4:92:0e:14:94:b8:e0:5c:
ab:98:20:c8:47:7a:00:d8:63:04:3d:89:93:ce:7a:
19:99:96:a2:9b:b9:ec:8f:c6:28:5d:1b:a3:99:a8:
8e:fc:2a:b5:ae:55:57:b8:7c:2a:6a:b3:24:f0:29:
24:e2:bd:c2:b9:6d:4a:fa:c0:ea:f4:a6:97:83:c2:
f8:b8:82:65:3f:cd:35:70:72:54:44:f3:26:f5:93:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:04:50:3E:6A:E8:29:89:FF:C1:AA:E1:87:D1:0E:CB:4C:0B:23:D3
X509v3 Authority Key Identifier:
keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:09:76:86:e2:72:f3:c9:37:31:2f:87:e6:b7:8e:c9:52:ff:
e0:6b:3c:4c:fa:44:34:23:5f:24:e6:63:16:5f:9c:18:03:55:
d1:73:d2:20:d2:2e:6e:f7:ba:8c:3e:e9:95:a6:d3:83:a4:8c:
51:4f:95:e7:70:cd:61:ce:58:29:b4:d7:23:ca:2f:49:d1:20:
2b:28:ec:8b:82:42:39:03:79:22:86:8e:a1:cd:fe:a4:9a:d3:
75:7a:5c:b6:1d:fa:92:66:30:47:84:b7:b7:ac:cd:6e:ca:47:
cf:4c:3c:a6:85:aa:94:ab:ef:f0:8b:d2:c3:89:7d:37:a0:1f:
e2:1d:f1:88:8d:c0:68:8c:c7:bf:a6:38:a2:fc:34:69:38:a1:
e5:50:b2:16:ad:e2:5a:5b:2c:28:e6:56:51:1e:6a:87:b6:48:
ca:c9:9d:6a:bd:95:34:2b:11:02:3f:14:96:81:41:b4:d1:5a:
7c:ba:3e:34:e4:f6:86:e8:6b:37:17:7d:1e:3a:49:93:69:9f:
63:3b:ac:7c:23:e6:3a:63:e5:12:3f:11:18:16:11:c1:f8:c0:
04:46:5d:78:4b:95:5e:99:ea:0c:3b:f7:e8:19:44:ea:df:5a:
2a:f2:33:03:ce:08:41:37:b2:0a:54:f3:df:4e:c1:99:c3:ec:
ca:06:f9:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WFgBKeTr60dxdJ5gjRCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWU0MTdiYjllY2IxYWNlOTQ5MWViYzI4MjNiYjc4OTM0
YjJjZGYwHhcNMjUxMDE5MTIwMTEyWhcNMjUxMDIwMTIwMTEyWjAzMTEwLwYDVQQD
Eyg0MjA0NTAzZTZhZTgyOTg5ZmZjMWFhZTE4N2QxMGVjYjRjMGIyM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+iRE2vs+1KRaLi0DtdQdFdZhj6Q
6cAtOgxJ36TxrbkPtgnH8KSb7wFM3GrHJbSCjmy9gKTZeAzwCjB+yPFd5SFX/gd8
fq17owttqaYq6lEjnLUQfUfqnmIRFenUvNEzjBT3pg3VvwAHJp04tDk9KFtyrxgP
3WevWLIHieT1u/F14OnrA01J2gwBxpJCfeGc3jZvCQscRsHdDIJ6IGn91Pgfv0v5
uUCMaXfB1JIOFJS44FyrmCDIR3oA2GMEPYmTznoZmZaim7nsj8YoXRujmaiO/Cq1
rlVXuHwqarMk8Ckk4r3CuW1K+sDq9KaXg8L4uIJlP801cHJURPMm9ZO7OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIEUD5q6CmJ/8Gq4YfRDstMCyPTMB8GA1UdIwQY
MBaAFBueQXu57LGs6UkevCgju3iTSyzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2Qt
ODFlZDEyZGRmMTc1LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iZGZlMTctOTFhZC00ZjMxLWFlY2QtODFlZDEyZGRmMTc1
LzEvRzU1QmU3bnNzYXpwU1I2OEtDTzdlSk5MTE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwl2huJy
88k3MS+H5reOyVL/4Gs8TPpENCNfJOZjFl+cGANV0XPSINIubve6jD7plabTg6SM
UU+V53DNYc5YKbTXI8ovSdEgKyjsi4JCOQN5IoaOoc3+pJrTdXpcth36kmYwR4S3
t6zNbspHz0w8poWqlKvv8IvSw4l9N6Af4h3xiI3AaIzHv6Y4ovw0aTih5VCyFq3i
WlssKOZWUR5qh7ZIysmdar2VNCsRAj8UloFBtNFafLo+NOT2huhrNxd9HjpJk2mf
YzusfCPmOmPlEj8RGBYRwfjABEZdeEuVXpnqDDv36BlE6t9aKvIzA84IQTeyClTz
307BmcPsygb5/A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:20 2025 by rpki-client