Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: 1KGKQE44HEwEUj5oiOKiFP2EiQp6up2Yn3WLJQe9M7o=
Subject key identifier: 01:27:C2:23:D3:C7:5C:29:BA:1A:AE:E9:BB:8A:88:02:D0:8D:AC:66
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 019A541A85141B80B6B79E7F7C4D2C98633A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 13:00:15 +0000
Manifest this update: Wed 05 Nov 2025 13:00:15 +0000
Manifest next update: Thu 06 Nov 2025 13:00:15 +0000
Files and hashes: 1: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: gZpmLELOQXkZCoDoDk82YwpY5P88uqw/nmKetumAj48=)
2: ERHgCqLjJCv-XvaDVjYAj8P1zKs.roa (hash: 0x7RKzsX7jR4DuJ9t+glZtV4k9Tiu2posJrN6U758NM=)
3: cJTD3IKsBKeCbDG4KiZEHnYFPTM.roa (hash: ufqwqkZa7S2iEhZdfjJxNYCun4AbNJ4X2aLuA4Ji7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:85:14:1b:80:b6:b7:9e:7f:7c:4d:2c:98:63:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Nov 5 13:00:15 2025 GMT
Not After : Nov 6 13:00:15 2025 GMT
Subject: CN=0127c223d3c75c29ba1aaee9bb8a8802d08dac66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:b2:ff:c6:8d:6f:60:fb:0d:1a:b7:ea:cf:
51:92:2b:fd:66:25:96:32:17:81:f9:25:ab:4f:ce:
b1:61:ec:1f:b0:0e:27:3d:c2:57:bf:64:2d:d6:07:
42:01:32:c9:09:68:7f:7d:2d:ac:b1:85:6a:ad:8b:
7d:20:7c:dc:62:1f:09:8a:cc:d6:e0:52:b4:9a:60:
aa:4e:7a:83:2b:7c:bc:2d:9d:d0:47:96:d1:68:52:
1f:46:84:8d:80:b2:34:ec:1d:98:99:17:1e:dd:0f:
9d:1b:83:1e:29:a3:72:61:58:19:ac:8e:45:0e:9a:
7d:40:12:33:47:ef:bf:81:38:27:7f:ff:32:d7:f1:
ce:ee:12:ac:46:00:89:51:ff:74:44:86:f1:40:21:
4c:5f:b2:cf:d6:27:d0:69:21:8c:3e:a1:e0:a5:62:
5e:88:da:d6:31:c5:70:d2:54:f6:3d:26:6a:fb:ab:
33:db:80:2c:c4:ce:85:cd:7e:44:86:92:d5:2d:68:
a8:af:44:4e:1b:6b:47:2e:7a:db:f9:4a:5d:4c:53:
7b:80:68:72:58:a4:fa:8f:50:c5:00:89:3a:b2:3d:
66:a1:bd:7b:9b:61:b0:5e:87:63:32:7c:63:45:db:
c3:40:39:de:2e:34:bf:14:e4:8b:7c:88:89:ed:b5:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:27:C2:23:D3:C7:5C:29:BA:1A:AE:E9:BB:8A:88:02:D0:8D:AC:66
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:65:bd:03:b6:ee:81:c4:9c:8c:8f:e9:44:86:fa:c7:ba:3d:
bc:55:4a:60:7f:1c:14:e2:b9:16:df:1e:ae:46:c1:44:ba:d1:
bc:8c:e0:8f:86:2a:af:74:67:61:5a:57:4f:4a:0b:1c:f9:48:
eb:67:21:c2:85:0a:0e:9e:92:9d:cb:ac:08:67:bb:39:92:49:
71:0d:8d:a2:d1:19:24:37:e1:58:05:62:99:9c:0a:1e:36:7b:
6a:4a:c9:6c:7f:0d:d7:c6:a6:d9:00:e0:25:4a:ec:8b:3d:a0:
d6:f2:c3:a9:fc:21:d8:5d:e8:2f:d1:56:b3:55:af:4f:17:59:
96:96:10:71:40:8e:a8:cc:d8:8e:82:e8:a1:12:3a:e4:0b:55:
d3:9a:b5:fa:87:0d:b6:23:7a:bc:88:3f:59:4d:37:06:f0:2b:
eb:29:a7:18:33:5a:9a:ea:03:d2:70:f8:e6:ea:de:27:98:ce:
fe:c7:de:01:f5:90:e1:a6:e9:2f:d5:b9:10:4d:bd:c1:1d:80:
73:12:bd:0c:32:b0:3b:25:64:50:31:8a:04:72:bc:c3:b7:22:
c6:db:32:fb:4c:9c:a7:a3:6c:ec:e1:c6:11:5d:ec:95:18:0d:
de:16:e5:7e:54:e1:d9:db:2c:da:24:af:3f:ba:31:88:88:a7:
ea:09:a2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:06:52 2025 by rpki-client