Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: oZYcBMSxjh1+1FWGBbkRNIUVoeu1LXp4lH2ZGsoaiGg=
Subject key identifier: CA:4B:F9:0E:95:E0:65:99:C6:DC:27:D1:49:37:00:B8:E2:8D:3F:A5
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 019A51511E48F2C526706AFE0A6A79A736A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 01AB
Signing time: Wed 05 Nov 2025 00:01:01 +0000
Manifest this update: Wed 05 Nov 2025 00:01:01 +0000
Manifest next update: Thu 06 Nov 2025 00:01:01 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: BbA0VFkwMVygScOs9pNLSo5CVXovHih0GNDOIVxVJwc=)
2: FMCKcx7fWhXzjjbFaZ4QhxcZQKM.roa (hash: nneSSqbYCIwxXhIaxp0I37Ib18k8PhoGuSY/nOGzlpw=)
3: jWqrAUGc-QQna_az58FqrLx3KMM.roa (hash: IjB0FwqbEBc83dg3pquxXYEVYNlp7HB3DKdagqWmNT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:1e:48:f2:c5:26:70:6a:fe:0a:6a:79:a7:36:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Nov 5 00:01:01 2025 GMT
Not After : Nov 6 00:01:01 2025 GMT
Subject: CN=ca4bf90e95e06599c6dc27d1493700b8e28d3fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:dc:de:a7:89:cf:df:77:a7:57:b1:c3:6c:
c6:10:73:97:e7:79:ee:1d:c7:2b:b3:45:84:d2:8c:
2a:f9:b7:83:8e:0f:6a:5e:86:10:d1:39:fb:7a:60:
cd:43:a5:fb:93:9e:02:6f:e2:e5:90:8f:9b:61:d1:
e3:8c:ca:53:0d:b4:96:3e:74:cd:fa:7a:2b:d2:a4:
30:64:cf:9c:2b:e7:c3:ad:a0:26:ea:96:3e:31:cb:
f4:88:55:b8:7c:8b:50:b1:a4:3a:15:03:bb:ec:f9:
c3:7b:8a:e9:70:8e:d5:4b:6c:16:3d:16:5e:c5:52:
6a:f8:56:71:3a:56:c5:f3:c7:84:fc:4b:9b:df:f4:
58:08:f5:a5:84:e6:c5:54:c9:15:04:1b:b2:f6:66:
a4:d2:7b:50:46:13:79:73:0a:41:05:93:15:58:a9:
73:aa:4e:82:4a:64:44:e6:c4:bb:c5:2e:c4:c4:ce:
d4:52:7f:79:cd:75:65:cb:19:30:d9:21:85:e1:04:
8b:ee:40:17:83:f2:23:7f:95:cb:48:43:f4:08:57:
7f:b4:fe:61:5b:b5:d8:ba:f5:5f:e4:0f:df:18:ac:
84:e8:98:a3:02:59:95:f6:1e:68:fd:c5:3a:c2:57:
e7:e2:65:1d:29:cb:66:81:45:ca:8d:e2:34:de:93:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4B:F9:0E:95:E0:65:99:C6:DC:27:D1:49:37:00:B8:E2:8D:3F:A5
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4f:4b:f0:8a:7e:05:cb:56:da:7a:bc:7f:f0:03:c6:7c:c2:
5e:75:71:7e:cc:bc:cc:8e:58:f6:9a:40:ac:0c:82:0d:f0:2a:
ab:84:dc:d4:3f:c0:2d:a4:f3:52:5e:8f:f0:6f:d8:91:b8:c7:
52:e3:42:44:83:ea:91:ac:7d:3b:f1:60:53:53:0b:67:9d:40:
cc:4b:31:63:39:7b:d7:bc:5d:98:6d:16:d0:19:06:cf:6b:28:
3e:8d:db:13:4a:d5:b4:a3:de:3c:e6:b3:10:32:4a:61:ca:b6:
08:3d:59:c2:df:03:eb:8f:8d:50:00:25:ee:ea:0a:5d:bc:7c:
01:f2:d2:93:24:10:66:15:10:c9:2f:37:ed:8b:02:f2:3b:9f:
90:98:b0:ef:4f:29:1b:dc:95:ec:0d:28:96:62:c0:5b:ef:81:
83:00:c2:c7:c1:3f:19:e9:9d:3f:db:5e:66:1d:2f:9f:65:37:
bc:79:f8:63:1c:20:4b:67:55:d8:f7:c3:54:60:6a:c8:de:98:
81:54:3c:88:7f:8f:89:7c:0e:bf:a4:3d:6b:df:ca:48:4e:5a:
0a:04:df:3b:7c:30:db:c5:90:a4:50:2c:6c:a5:eb:32:69:1e:
84:85:81:ce:b6:4c:e7:9f:20:bd:98:a6:7b:2a:5a:6b:70:80:
04:13:83:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:52:21 2025 by rpki-client