Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: 0fGTXAcwiR6+e7msUZhspZ8FZWAf+9PCnefdxbGa6V8=
Subject key identifier: 83:A2:47:36:22:09:EB:49:09:44:E9:29:29:40:D8:9A:C0:1B:CE:4C
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 019A5307F544D591829FB0BEC382319F7C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 06BA
Signing time: Wed 05 Nov 2025 08:00:21 +0000
Manifest this update: Wed 05 Nov 2025 08:00:21 +0000
Manifest next update: Thu 06 Nov 2025 08:00:21 +0000
Files and hashes: 1: 9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa (hash: NvC05zdhztqBgGL0x7IrDtfQb3ZiSTjs+SHJkAWRFb8=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: qYOOz1caqZjhaHS1/plOdRMYbrt27oFVesV5X1G1ArQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:f5:44:d5:91:82:9f:b0:be:c3:82:31:9f:7c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Nov 5 08:00:21 2025 GMT
Not After : Nov 6 08:00:21 2025 GMT
Subject: CN=83a247362209eb490944e9292940d89ac01bce4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:7d:d6:ae:00:a6:83:0a:49:67:ba:ff:32:
59:b1:a2:11:b6:67:16:42:69:be:f6:d3:94:fc:30:
a4:54:08:6f:fa:08:8f:ec:31:a1:e8:9b:58:53:83:
5e:f8:ff:c5:7e:49:46:ca:86:03:8a:12:cc:df:ee:
81:03:a5:26:ed:21:4f:50:30:38:2f:7d:39:d9:c9:
ec:6c:a8:3d:30:50:b4:d4:d9:07:eb:79:7d:75:de:
84:ed:52:91:b6:c5:05:fa:c3:26:35:6e:0d:80:61:
3a:1b:fc:3d:45:e9:b2:a9:4c:4d:db:d6:46:ba:26:
d1:a3:81:a2:7e:c2:47:61:ac:ce:47:f1:54:3e:e7:
3b:1a:0a:f4:95:cd:a1:0e:e9:6d:18:17:9d:2f:84:
d5:9c:a3:40:d5:b0:35:7a:c2:9d:ab:00:4a:d8:72:
1c:8a:9d:43:f4:24:91:3d:66:af:e8:53:f0:91:0b:
94:bd:73:f8:73:45:cc:85:64:04:64:41:f2:93:7c:
b7:c0:ba:e6:1d:12:30:26:dd:51:f7:17:3e:7f:7c:
90:c3:66:01:e5:ce:c5:34:94:04:75:ad:83:14:60:
62:05:04:87:cf:bd:67:ac:5e:7b:65:ce:1d:30:ee:
2d:79:e0:5d:98:99:df:e2:65:c1:87:eb:8c:d7:ae:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A2:47:36:22:09:EB:49:09:44:E9:29:29:40:D8:9A:C0:1B:CE:4C
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:42:c1:9b:ad:db:e1:14:92:a2:28:97:97:48:76:bf:c4:c2:
28:28:e0:8b:ab:a0:53:4e:9a:7b:17:c3:e5:7d:ae:43:6b:fa:
ac:99:31:6d:1f:f4:05:9f:67:9f:f7:5c:f0:07:90:78:ed:26:
fc:d1:f7:fb:d6:22:c5:f2:66:6e:4b:bc:b8:2e:d8:d4:0b:69:
50:3c:54:e8:17:63:7e:b7:2d:9a:24:f6:4f:ba:ea:69:f9:13:
18:41:3f:de:54:89:6a:c5:88:92:1b:39:46:1d:6c:ce:19:ab:
13:be:00:a7:12:2b:91:fd:d9:dd:ed:15:57:e3:af:1b:47:38:
26:00:93:de:85:ed:79:47:48:ef:42:88:81:00:a8:15:a5:6a:
03:9b:46:6f:b2:3a:1b:1f:19:04:cd:29:fb:d5:db:30:2d:4a:
f7:59:3d:18:3e:e8:d7:44:dc:44:db:1e:78:f0:24:3b:14:ca:
de:f1:16:54:d5:cc:75:b7:3b:f5:48:f5:8b:a6:ce:f8:85:32:
eb:1f:61:32:75:20:1f:80:d8:54:e7:4a:8a:fa:76:4d:f2:0f:
df:7f:02:e4:0f:68:ea:18:b6:df:68:e5:82:c5:7b:2f:c6:f4:
4c:53:a8:37:a5:03:80:01:38:89:d7:63:67:d6:48:7e:da:d8:
f6:9d:d2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:20:27 2025 by rpki-client