Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
File: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft (raw, json)
Hash identifier: toEk6IKNiGyudnRl3Xh7aSbTzQz6kVhMe7+YxvYQAnA=
Subject key identifier: E4:33:EF:42:F3:4B:C8:14:B8:53:73:6C:73:D4:BF:DA:2A:2C:AA:DE
Authority key identifier: 83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
Certificate issuer: /CN=83c8d01caf2b0751d035c537566f45627925e4f6
Certificate serial: 019A4EF46E6E01290A16B392A08A6A2691D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
Manifest number: 1252
Signing time: Tue 04 Nov 2025 13:00:33 +0000
Manifest this update: Tue 04 Nov 2025 13:00:33 +0000
Manifest next update: Wed 05 Nov 2025 13:00:33 +0000
Files and hashes: 1: J4HW2mYS6aU6LfQRgOlYRDbLp5k.roa (hash: Bt4aDKGWyvEeRSoxrjAjHWSOknnKJY9L9kMvMSuInRo=)
2: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl (hash: E+A+mM5h53+6YDK9opQDaRWTPsGzHJYJ/m35847lZkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6e:6e:01:29:0a:16:b3:92:a0:8a:6a:26:91:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8d01caf2b0751d035c537566f45627925e4f6
Validity
Not Before: Nov 4 13:00:33 2025 GMT
Not After : Nov 5 13:00:33 2025 GMT
Subject: CN=e433ef42f34bc814b853736c73d4bfda2a2caade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:82:c7:0a:de:06:af:7c:3f:50:66:cd:e6:
8b:86:82:57:7a:6a:99:b0:e9:47:38:8e:e6:f1:88:
1b:71:b7:08:82:d5:e4:ac:78:9d:b2:1c:71:3f:bf:
06:2e:f6:f0:21:ab:99:8b:44:83:cf:b9:2c:40:69:
c0:07:ad:fb:fb:29:3e:72:eb:df:a1:19:09:d4:cb:
f1:70:d2:13:54:fa:f1:5a:a9:fa:7f:44:98:c2:c9:
20:e0:26:48:e4:52:3e:98:05:97:42:0d:21:58:50:
38:2c:cb:72:e2:ae:22:4c:d4:b2:fd:3e:1a:59:60:
92:47:86:f0:c9:8f:53:3c:f6:a4:7a:33:a8:dd:a4:
1c:4d:1a:4a:7d:cb:f6:b3:0c:68:8b:bc:fa:13:cb:
12:bf:5f:cc:c3:db:6f:f6:bc:fc:28:14:66:a2:9c:
92:1c:fe:5c:91:98:cb:d6:94:4b:c3:8d:47:80:30:
31:f1:bd:b5:97:80:5e:1b:75:5a:02:13:1b:c9:5b:
7c:1f:9b:91:81:16:c5:da:5c:5b:ae:6f:7f:ab:fb:
d2:75:b9:6c:6a:b4:8e:b4:d6:e6:d2:e4:8c:d9:a6:
aa:54:a0:a2:e3:4f:25:29:e3:ee:88:43:34:27:7e:
b6:31:d2:b7:06:45:85:a1:12:17:e3:7a:d7:fb:0f:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:33:EF:42:F3:4B:C8:14:B8:53:73:6C:73:D4:BF:DA:2A:2C:AA:DE
X509v3 Authority Key Identifier:
keyid:83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:93:24:4d:52:bd:cb:29:1e:cf:1b:b3:88:4d:4b:d1:0c:cf:
72:2c:9d:9f:6b:e1:a8:44:78:d7:18:81:2e:a2:76:20:36:db:
ac:20:b0:52:52:d6:66:56:80:eb:3e:c3:1d:fc:ca:90:ec:b1:
a7:99:26:8c:20:a7:d2:c3:53:b6:00:77:8f:59:9e:5e:22:79:
79:c4:22:e9:bc:25:d6:b1:14:f4:a3:63:f5:c3:f4:f1:86:81:
f7:59:5c:dc:66:b3:18:45:1b:49:39:c4:d7:2a:c9:00:b5:1e:
df:e0:b3:64:9d:1a:f2:c7:45:27:16:e9:a7:fe:b9:eb:69:a5:
b2:41:98:b2:ee:e1:c0:0e:d5:13:26:b2:d1:eb:12:40:72:62:
9f:d1:b4:01:a5:6e:0d:18:75:c3:fa:93:0a:74:98:72:d5:99:
3c:53:8c:89:35:57:ff:b5:8f:0c:c5:85:b8:22:d1:55:77:c3:
b4:9f:7f:d1:d0:e4:8f:31:14:64:8f:82:2e:db:3d:64:75:10:
15:9e:f8:a7:58:aa:a2:08:23:82:26:8c:38:d2:d7:ba:bc:44:
ca:af:ab:d3:8f:2f:d9:40:62:1f:53:c2:86:02:10:dd:0a:98:
0d:c7:d4:5b:86:54:12:94:fb:1b:90:59:a3:2b:39:4f:40:bf:
5e:58:32:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:41 2025 by rpki-client