Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: V9sWItAv08puJPfqsREf0A0emYY2a5rG725yAdy+olQ=
Subject key identifier: F9:2E:BB:48:56:EF:8B:46:36:88:DF:29:97:01:FA:EC:3C:18:F2:50
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 019A50E410AF7539993C72F1F7596FFCA787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 14E2
Signing time: Tue 04 Nov 2025 22:01:54 +0000
Manifest this update: Tue 04 Nov 2025 22:01:54 +0000
Manifest next update: Wed 05 Nov 2025 22:01:54 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: Ap74oecx0JnK4HuTrcUgfc4W95dPOYQ+Uxdie8UcU8I=)
2: wHiz844bSnAZ4Nug3ceKjQdatmc.roa (hash: /mOXe5EHXrP0fFZ7gg8le5T3+NCaa6O//12eYo5yKX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:10:af:75:39:99:3c:72:f1:f7:59:6f:fc:a7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Nov 4 22:01:54 2025 GMT
Not After : Nov 5 22:01:54 2025 GMT
Subject: CN=f92ebb4856ef8b463688df299701faec3c18f250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:19:72:4f:f3:b5:af:6b:39:5e:04:7e:57:
a4:70:09:12:6e:e0:8a:3f:ad:2c:3c:37:18:1d:8a:
bc:e1:9e:9c:66:95:5b:ae:0c:3f:2f:3c:4b:0b:84:
4c:39:20:f7:d7:84:74:13:0d:37:c1:a2:a2:96:73:
56:0d:3d:3b:3e:d0:39:8b:ab:0e:4b:2d:33:80:10:
e4:31:2e:9f:a3:b9:6e:64:ba:81:58:3a:ea:34:c5:
23:56:c6:bc:17:42:eb:95:df:1f:e1:59:e1:f5:01:
68:41:67:71:6a:20:80:b8:c9:63:03:2d:db:c7:b3:
0c:ac:d9:a7:fd:76:08:28:43:cb:9a:2f:41:d1:f9:
6a:a7:e6:f0:5f:36:ff:5a:2a:6b:08:0a:63:7b:0f:
18:45:d7:85:34:fe:a0:ba:28:cc:e8:79:ad:71:b9:
7b:0f:8c:2b:bb:8f:40:7a:4b:0c:4f:07:65:b1:6b:
21:8e:ce:83:01:c5:ef:94:d8:94:ae:c6:f0:d6:00:
fa:cc:bc:ce:e6:51:8b:0d:7b:11:cb:cf:98:0c:db:
d3:1b:3e:10:08:53:ff:6b:58:3d:01:38:6d:ff:16:
55:b5:45:69:3e:c3:ac:d3:6a:b3:a1:a8:f1:d8:27:
24:10:f9:d9:50:7a:c2:de:3a:f9:29:ec:77:8a:93:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2E:BB:48:56:EF:8B:46:36:88:DF:29:97:01:FA:EC:3C:18:F2:50
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e5:b8:db:40:fb:35:54:9f:44:8b:05:03:f2:63:6e:2c:73:
02:93:ce:a1:0d:14:1b:8b:b6:26:a0:c0:bf:fa:41:45:1b:d1:
9b:dc:fa:d5:22:ce:fc:ce:c4:76:fa:be:4c:a3:62:0d:f3:66:
f0:ac:3d:2f:3d:56:b5:f5:ba:f1:08:e8:50:e0:6f:83:06:3e:
e7:00:a6:1b:23:22:1b:67:a5:45:6f:ec:f4:b7:97:42:e5:68:
1a:3b:53:b6:39:60:ab:ef:0a:7f:66:aa:13:1a:67:52:7c:3f:
7e:e0:dc:2b:6b:af:c0:b7:54:e7:d1:0f:31:26:5d:c1:d9:bc:
a5:db:26:88:a3:ed:68:72:3e:ac:00:bd:04:48:06:db:dd:b3:
4c:72:50:ce:c4:66:d5:b8:f4:85:78:a0:cb:19:de:03:87:48:
cf:55:3f:17:56:a3:6d:d7:fd:cc:b0:0f:a3:88:d3:99:57:2a:
1a:04:23:8e:6a:52:c5:f2:94:ee:c7:64:c1:4d:be:f2:d7:fd:
3a:e2:41:16:04:dc:78:50:ab:4d:a2:ac:be:0a:5a:bc:9b:19:
90:19:47:b6:ed:e6:33:89:2f:fa:85:20:11:88:2e:92:e5:95:
1c:b9:05:5a:59:1a:6e:51:90:fe:63:e4:b6:d7:69:0b:5c:c6:
5b:35:dd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:02 2025 by rpki-client