Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
File: g2elJH2fTpT3vVcc8T01q0iwHSQ.mft (raw, json)
Hash identifier: ZjYUkXGPUwqPH611sFDK+XuLCZNrgK0cju+X/WRf47A=
Subject key identifier: BB:62:37:5E:43:89:A3:63:FD:15:60:34:A7:E1:EC:06:9F:F4:57:64
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 019A4DE1EF1F29398C5B79AE51AA7B60EFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
Manifest number: 069B
Signing time: Tue 04 Nov 2025 08:00:43 +0000
Manifest this update: Tue 04 Nov 2025 08:00:43 +0000
Manifest next update: Wed 05 Nov 2025 08:00:43 +0000
Files and hashes: 1: g2elJH2fTpT3vVcc8T01q0iwHSQ.crl (hash: LdypqPcCvLx6zVNW0wCiNZ7WZCDVOw5ZiKHi+teDgjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ef:1f:29:39:8c:5b:79:ae:51:aa:7b:60:ef:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Nov 4 08:00:43 2025 GMT
Not After : Nov 5 08:00:43 2025 GMT
Subject: CN=bb62375e4389a363fd156034a7e1ec069ff45764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:67:9f:b0:d9:9b:d9:5a:84:79:3c:72:b5:67:
55:02:29:20:fb:ed:bd:c3:da:f0:16:b6:e1:2c:f4:
3d:a9:0c:06:03:e6:cd:e1:77:bc:41:b1:ab:39:66:
59:79:76:5e:a1:4d:05:f4:4d:e9:59:1a:d2:90:1d:
fe:7f:d0:6a:ac:c7:9a:91:1b:d6:2f:23:ba:07:f9:
3e:c9:ae:c3:e4:57:bb:b6:1b:3d:9a:7f:94:32:a4:
fb:24:b3:41:60:be:44:fd:d9:b1:6a:d3:a2:e4:cd:
04:70:18:59:a5:74:a5:cf:18:2f:18:ed:18:1b:07:
c2:a1:0d:d3:14:bf:d0:ee:d6:9a:02:0a:5e:88:c5:
b4:9d:ef:e3:85:7d:06:bc:a3:cc:66:50:92:41:63:
f7:e6:0b:6e:2a:5e:16:5e:9b:d3:98:92:b5:4a:9a:
4a:08:6d:fa:bc:b2:4d:03:48:b7:1a:1e:e6:6b:32:
03:76:d6:e7:94:43:df:90:11:4e:8d:33:51:2f:85:
16:74:79:38:c3:b2:c6:ba:c8:9b:aa:c5:9d:dc:d3:
37:99:20:0f:88:92:b7:9e:8b:ba:7e:23:9a:af:87:
6b:9c:1b:03:9a:ed:6d:50:c6:ea:8b:95:1f:70:3b:
41:19:96:d6:aa:71:d7:ef:b8:2f:d9:dd:8a:8a:96:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:62:37:5E:43:89:A3:63:FD:15:60:34:A7:E1:EC:06:9F:F4:57:64
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:74:f8:86:ec:54:f4:07:c1:a6:41:ca:41:b3:84:e2:84:95:
85:2d:ed:54:b4:f0:b6:d0:c6:a8:a4:a8:9c:b6:0b:3f:84:77:
4d:8d:d9:9c:b6:4c:18:77:e4:4e:d2:8a:4c:a5:ad:bc:cd:4c:
b2:74:ac:bb:b1:63:a9:23:9a:3e:0d:8c:2c:6a:9e:84:90:e0:
78:3b:eb:ac:9a:4f:8e:22:a5:b8:e7:c6:0e:31:59:f8:8b:59:
2a:ee:b8:ad:c5:5f:14:90:b1:3c:27:ed:c4:e7:94:8e:44:43:
32:56:bc:ff:ba:72:26:d1:83:99:e0:b3:4a:97:a3:50:d0:66:
65:bd:f1:ac:c8:6e:9e:df:ca:f7:53:4f:f7:55:63:3f:0c:0a:
a2:54:cc:27:e9:ca:f6:f7:28:10:6a:29:76:5d:77:ae:ac:74:
24:fc:8c:bd:09:b7:c1:29:68:c9:7f:1b:5e:c6:be:80:15:2b:
84:d8:b5:d2:52:17:eb:ea:f7:49:09:93:b6:6b:d4:91:82:33:
d9:0b:90:ea:c6:52:b7:f3:5b:d4:01:7e:66:72:84:ab:a7:81:
77:09:e4:6e:c2:3a:b3:2c:47:27:fb:62:20:d1:12:7c:70:b4:
de:af:2a:d4:d2:8d:dd:31:cb:78:06:00:61:af:dc:16:14:72:
4e:b0:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:19 2025 by rpki-client