Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File: g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier: LkqlxrHl2kKFQ+te9nPIBNrYGxARHr8I7BhzOf8b6Ts=
Subject key identifier: 7E:D2:38:A9:6C:30:C4:32:D8:AD:0B:9A:91:35:BF:BD:B8:9E:8A:54
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial: 019A52D26957E044619EC3B78C85D06B164A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 07:01:52 +0000
Manifest this update: Wed 05 Nov 2025 07:01:52 +0000
Manifest next update: Thu 06 Nov 2025 07:01:52 +0000
Files and hashes: 1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=)
2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=)
3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: s+LQVK7NzBqW6t+XuRAmIYyKI/2ZVJ207KfXfLnzQoc=)
4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:69:57:e0:44:61:9e:c3:b7:8c:85:d0:6b:16:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
Validity
Not Before: Nov 5 07:01:52 2025 GMT
Not After : Nov 6 07:01:52 2025 GMT
Subject: CN=7ed238a96c30c432d8ad0b9a9135bfbdb89e8a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:2f:0d:5d:9b:8f:df:eb:64:3e:c2:c1:05:
2b:4e:25:34:79:bc:f5:cf:ba:c9:34:72:66:ae:94:
20:30:42:b1:62:52:e8:7c:86:43:ec:bc:e1:a8:93:
52:c3:ef:af:9e:6d:9c:47:60:b2:15:e4:ab:f3:1a:
dc:f6:ab:22:81:7d:26:1f:55:c0:65:7d:49:9f:7d:
ed:c1:ef:c3:6e:c2:f7:09:00:0c:c8:d5:b4:20:90:
96:10:7c:9f:69:d3:a1:de:5c:13:89:6c:71:46:71:
d7:2a:d1:a7:eb:4c:ce:c0:6b:ce:6e:b8:e5:43:79:
1a:19:e0:f0:9a:d5:21:4f:39:2a:20:49:58:3d:ac:
1b:71:83:9a:b9:75:fe:8f:3e:fe:93:34:ea:9e:82:
6c:a3:14:f1:18:59:86:ca:5f:52:2d:d8:52:4b:15:
2e:87:0d:08:6c:b6:2c:49:05:af:16:ae:bd:de:2c:
44:03:fb:ee:5f:22:33:38:5b:f5:11:52:c1:c4:62:
8f:ec:f0:94:a6:6d:28:c6:1b:9a:e7:77:84:5d:68:
75:0e:28:38:aa:5c:e9:fa:22:b0:90:06:e0:c7:07:
12:d7:c6:4f:46:c0:15:c3:82:d2:31:25:74:bb:b4:
dd:26:de:81:e0:e9:36:85:51:65:13:51:6a:38:5e:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D2:38:A9:6C:30:C4:32:D8:AD:0B:9A:91:35:BF:BD:B8:9E:8A:54
X509v3 Authority Key Identifier:
keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9b:3a:34:ee:aa:79:b1:73:36:92:b0:38:3a:d6:27:7a:1c:
2a:6e:04:29:96:93:bf:1d:c0:53:ff:5a:4c:ef:29:8a:3c:51:
c8:33:67:69:b1:93:26:73:a8:2b:ee:bf:01:68:0e:f6:a1:d4:
9e:20:1a:81:47:da:5c:12:f1:b0:d4:21:81:3c:b6:80:22:1a:
9a:64:59:91:24:05:de:d0:2f:c9:1d:2b:8c:61:6a:5c:8e:d3:
b6:0b:55:76:00:08:fd:81:dc:e2:b2:44:89:ce:55:40:06:64:
6c:48:a6:dc:7d:c1:83:98:4d:87:a2:58:0a:ca:8d:f3:2d:54:
ed:76:9d:6a:cf:1d:27:76:62:93:aa:2e:3c:4c:15:f0:21:eb:
2a:67:74:3e:2a:16:e8:ad:52:35:85:be:17:15:04:0c:d8:d8:
7d:42:65:ce:49:af:d6:c9:f0:65:46:04:f9:09:24:a9:62:dc:
8e:6c:02:ea:11:22:73:a6:87:80:e3:cd:0b:9e:43:86:8c:29:
2e:e5:b2:79:8e:bc:53:fe:ba:ff:ab:95:df:79:9a:8e:e2:2c:
79:e3:e7:b5:d4:4b:88:5c:79:00:56:b1:8e:65:81:cf:9b:07:
53:b6:f9:85:72:06:a8:d3:18:5d:bf:43:6a:a1:81:d1:7a:d6:
68:ca:98:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0mlX4ERhnsO3jIXQaxZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjUyOGUxNTJiNmRjYmExNTcxMjQxYWM1NWJlNWJjZTAx
MTE4YjcwHhcNMjUxMTA1MDcwMTUyWhcNMjUxMTA2MDcwMTUyWjAzMTEwLwYDVQQD
Eyg3ZWQyMzhhOTZjMzBjNDMyZDhhZDBiOWE5MTM1YmZiZGI4OWU4YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg8vDV2bj9/rZD7CwQUrTiU0ebz1
z7rJNHJmrpQgMEKxYlLofIZD7LzhqJNSw++vnm2cR2CyFeSr8xrc9qsigX0mH1XA
ZX1Jn33twe/DbsL3CQAMyNW0IJCWEHyfadOh3lwTiWxxRnHXKtGn60zOwGvObrjl
Q3kaGeDwmtUhTzkqIElYPawbcYOauXX+jz7+kzTqnoJsoxTxGFmGyl9SLdhSSxUu
hw0IbLYsSQWvFq693ixEA/vuXyIzOFv1EVLBxGKP7PCUpm0oxhua53eEXWh1Dig4
qlzp+iKwkAbgxwcS18ZPRsAVw4LSMSV0u7TdJt6B4Ok2hVFlE1FqOF5lQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7SOKlsMMQy2K0LmpE1v724nopUMB8GA1UdIwQY
MBaAFINlKOFStty6FXEkGsVb5bzgERi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2Mt
ZWI5NDE1ZWM1NDhhLzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2MtZWI5NDE1ZWM1NDhh
LzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5s6NO6q
ebFzNpKwODrWJ3ocKm4EKZaTvx3AU/9aTO8pijxRyDNnabGTJnOoK+6/AWgO9qHU
niAagUfaXBLxsNQhgTy2gCIammRZkSQF3tAvyR0rjGFqXI7TtgtVdgAI/YHc4rJE
ic5VQAZkbEim3H3Bg5hNh6JYCsqN8y1U7Xadas8dJ3Zik6ouPEwV8CHrKmd0PioW
6K1SNYW+FxUEDNjYfUJlzkmv1snwZUYE+QkkqWLcjmwC6hEic6aHgOPNC55Dhowp
LuWyeY68U/66/6uV33majuIseePntdRLiFx5AFaxjmWBz5sHU7b5hXIGqNMYXb9D
aqGB0XrWaMqYCw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:01:22 2025 by rpki-client