Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: 7W3Ytxa374EoZV0+Ku0PrL1ezpTTQJ3sUqQXpEpLCx8=
Subject key identifier: 01:44:DA:7E:0F:7E:58:96:16:F3:93:FB:24:FB:8B:54:29:52:5E:AD
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019A4E4F6DDFD64FE3DC7A904F3B45D9574D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 10A7
Signing time: Tue 04 Nov 2025 10:00:19 +0000
Manifest this update: Tue 04 Nov 2025 10:00:19 +0000
Manifest next update: Wed 05 Nov 2025 10:00:19 +0000
Files and hashes: 1: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (hash: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=)
2: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (hash: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: WKxjyI8WniUPYzzQzXSwezekwkpc809AdcEXl1RqzBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:6d:df:d6:4f:e3:dc:7a:90:4f:3b:45:d9:57:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Nov 4 10:00:19 2025 GMT
Not After : Nov 5 10:00:19 2025 GMT
Subject: CN=0144da7e0f7e589616f393fb24fb8b5429525ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:70:15:71:e5:32:74:fb:20:82:44:77:c4:89:
27:96:4c:42:80:c4:0f:39:f0:1b:f8:09:48:26:e3:
a8:bc:68:97:76:82:96:87:5a:e6:1c:2c:60:1b:73:
b0:db:29:12:37:ea:1f:99:e3:d5:0a:90:3a:92:35:
33:d5:89:2a:eb:94:b5:6b:b8:a8:e9:06:8b:9c:53:
5f:e5:fe:f3:79:4b:4c:7e:fa:7e:07:22:dc:d0:f1:
d3:6f:11:32:5c:1d:4a:be:a5:66:82:ef:32:0d:49:
59:12:69:d0:b6:8b:c4:28:95:78:66:8c:29:3a:c2:
7f:14:7e:10:32:2e:26:f6:34:8c:28:9a:b2:e0:bf:
52:50:0a:c4:7d:9f:e8:39:25:0a:87:99:83:56:ee:
ff:d6:bc:6f:b9:40:64:a6:ad:fd:7a:6a:66:41:64:
12:d0:e4:7f:f8:73:72:d6:40:48:71:a5:0f:9e:48:
ea:47:bb:5d:1c:b9:eb:7c:70:27:4f:e6:d4:bb:b9:
76:07:ba:c1:47:fd:ef:f4:d5:ed:8a:67:7d:2f:d9:
a2:c9:5d:1d:e9:f7:97:ae:5b:f2:72:b9:b5:c8:ec:
27:ea:24:8c:3b:e0:53:66:a0:17:d3:8e:9a:f7:eb:
39:19:39:d6:d7:16:bb:3c:2c:5e:28:ae:14:f8:bd:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:44:DA:7E:0F:7E:58:96:16:F3:93:FB:24:FB:8B:54:29:52:5E:AD
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7b:9e:40:43:ed:8d:c6:ca:21:d8:c7:c6:de:64:87:22:22:
0a:04:e5:54:95:1d:80:42:10:6c:52:c7:1e:19:e6:d1:5e:ba:
16:b6:77:4c:ee:ff:5d:07:e3:31:41:06:c2:33:65:28:c1:c7:
98:52:a9:81:15:3a:99:83:b5:b1:8c:6d:2c:ff:9c:eb:6b:65:
64:3c:12:04:b0:2e:bf:25:be:f6:c0:aa:3d:3e:22:a6:76:7a:
b2:6a:af:42:8f:0b:db:5b:8c:32:8d:2f:f3:99:70:2c:43:64:
ca:bf:06:2d:40:14:2d:ee:16:44:4c:ce:e3:a0:ce:f3:0e:83:
ab:56:ea:5c:70:07:b2:b5:25:e6:77:ec:5a:6e:b5:76:b8:79:
bf:58:e3:e8:12:9d:ba:25:6e:77:03:d5:39:4b:a2:72:09:ed:
bf:61:9b:54:fa:62:9a:d5:2f:95:7b:09:61:7a:86:2f:6b:df:
6d:7b:33:38:16:5f:6c:33:8e:16:6f:ad:a9:40:6c:25:e8:59:
6b:4c:51:3f:1b:7e:66:8e:3d:dd:c3:38:e6:97:f0:7d:bc:d9:
58:34:a7:80:28:6f:f6:e8:e4:c5:a7:b9:0b:12:6e:41:e9:0b:
25:c5:5e:33:bf:35:90:55:d7:90:4e:ab:a0:57:03:21:5b:ac:
bb:49:8f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:53 2025 by rpki-client