Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: ySUKXBpkJNfwCIJ61Sez4akPl+XgevqgtnpTuCY75iI=
Subject key identifier: EE:D2:19:64:57:BE:C2:71:BD:FA:96:40:D8:C3:2D:F0:F8:92:CD:8A
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 019A50E391D126A9BA80F6004A78DD2A0026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 0665
Signing time: Tue 04 Nov 2025 22:01:22 +0000
Manifest this update: Tue 04 Nov 2025 22:01:22 +0000
Manifest next update: Wed 05 Nov 2025 22:01:22 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: eaIpHPq6fh2dD3EfKpqVA30SfQWK1SOgpmVxLpg1PKM=)
2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:91:d1:26:a9:ba:80:f6:00:4a:78:dd:2a:00:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Nov 4 22:01:22 2025 GMT
Not After : Nov 5 22:01:22 2025 GMT
Subject: CN=eed2196457bec271bdfa9640d8c32df0f892cd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:17:7f:d1:1f:09:23:3d:97:83:e9:89:8e:
2a:91:39:ab:7d:e9:e6:c8:2b:db:b7:d3:f7:5b:84:
c6:95:a0:33:dd:f8:5a:92:4b:e7:27:e4:4d:45:23:
0c:18:ec:41:ab:f0:35:35:c9:3c:13:af:80:69:6c:
1f:7a:3c:b1:ce:25:04:37:4b:86:18:52:29:ec:c9:
21:50:09:e4:68:6d:76:b6:21:56:87:1a:90:2a:f7:
f1:ed:aa:e6:0a:43:56:0d:e0:0e:2b:61:da:6d:25:
ad:f4:df:f7:f4:44:23:f3:3c:68:67:02:6b:5b:09:
e5:09:d6:de:af:12:07:2d:d2:b8:8d:90:32:2e:a3:
81:55:a8:bb:d9:15:ac:1b:4f:9b:c6:8d:02:ff:75:
1a:eb:df:42:c5:3d:5b:11:ba:81:ae:dd:8b:9d:cd:
8b:4a:b8:d5:88:9f:53:2c:c8:29:4a:1f:5e:4f:b6:
06:f7:d4:ea:82:f5:5c:83:86:48:ab:f0:4e:62:5c:
6e:a6:cd:14:b6:c8:13:b9:53:4d:88:26:92:3d:c0:
a0:1f:cc:38:f5:10:3e:42:24:0e:44:0e:d9:70:26:
5b:92:5a:39:9c:4b:6f:ee:3f:cb:ec:58:23:f4:67:
8e:3a:cf:9d:2c:98:03:5c:3b:40:af:0b:8b:01:06:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:19:64:57:BE:C2:71:BD:FA:96:40:D8:C3:2D:F0:F8:92:CD:8A
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fa:0c:7a:45:02:a7:bf:93:b5:8c:2e:aa:9e:a5:b8:56:0c:
9c:02:05:ac:6b:36:1b:e1:79:85:24:27:d1:4d:eb:bf:0b:ec:
eb:12:20:92:71:7a:97:ab:86:35:66:d2:c6:e9:f2:d6:ae:19:
72:01:eb:ee:af:ad:90:e6:54:38:7f:9a:d0:50:43:51:91:2c:
1d:dd:86:46:1e:35:23:52:36:9b:1c:b4:b2:3d:c8:1b:c2:25:
a1:e0:70:03:fd:4d:04:d8:0b:76:af:73:e1:84:13:ae:92:a4:
ab:f3:b4:5d:f1:05:09:5f:05:51:f8:e1:d7:4f:2e:0e:c8:84:
fa:7e:69:57:fc:b7:17:b7:f6:f7:fd:9b:21:9a:96:4b:e4:8b:
5e:d5:7b:fc:6e:75:73:ff:c4:29:da:68:b3:26:7c:fd:c9:dd:
b3:9d:42:07:2a:fb:ba:4c:43:2c:fa:ce:09:14:81:c1:8c:32:
83:ed:3b:af:ab:d5:be:cb:c7:9c:ea:ea:74:95:df:e7:e3:b2:
37:1d:af:45:20:05:f6:a8:06:00:fe:cc:28:25:f3:d2:c1:7f:
3d:44:4b:93:d2:99:53:65:55:0a:d0:30:c0:6c:9d:64:2a:8d:
3c:8b:e6:ec:4b:37:e9:5c:50:db:91:be:c4:1c:cf:c8:f4:b6:
6a:dc:e6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:40:20 2025 by rpki-client