Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier: mKcqRXa0VcRSPsPIjVg25dvim2YB9FGDqpm2LslsjxI=
Subject key identifier: 23:18:6D:BA:34:B9:BE:18:98:FC:6F:6C:70:A6:4C:A2:41:32:84:A0
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 019A51F5C6A20DF622BF5DE3B0471CDF888F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number: 0C15
Signing time: Wed 05 Nov 2025 03:00:52 +0000
Manifest this update: Wed 05 Nov 2025 03:00:52 +0000
Manifest next update: Thu 06 Nov 2025 03:00:52 +0000
Files and hashes: 1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: Fr8qszZTR+DzgdAZxtPp9thmv79JfyLXeoWSdGc3A6Q=)
2: IdU9T1FkI4A5QGWSCJhjbXvJUH8.roa (hash: oWd/kpimW/XKu4I8ZbE0KWw8XTvLyveRYZw0B6kosK4=)
3: dRyK6fyOLluuno6mdLfm9I8N5cU.roa (hash: hGLM1rnaqR4GcFlhsxhGDSd143ODBHpnIFqXniXaJBo=)
4: oQAGdFifd-TKFIBS06405IGsyvA.roa (hash: zpSW+ojYEzYzrGwuoKq30ePtiLpag8R8YWj5wxmdW5A=)
5: omEKk6HfpuKW0m6N-9CapGLlA_o.roa (hash: KyIBEH08U3tFJ8Ty4CJ5NL0S9/Sl8DxHoRzlmOSkNDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:c6:a2:0d:f6:22:bf:5d:e3:b0:47:1c:df:88:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: Nov 5 03:00:52 2025 GMT
Not After : Nov 6 03:00:52 2025 GMT
Subject: CN=23186dba34b9be1898fc6f6c70a64ca2413284a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:11:91:e4:89:c6:1a:08:5e:20:67:9c:b6:
fe:c2:7a:21:7f:ef:63:2b:24:12:50:99:4f:6a:f0:
68:da:8a:1f:1b:d5:a9:9d:83:21:49:1f:50:06:ac:
73:b4:28:5b:07:19:fc:b2:2c:c6:8d:3d:60:db:1e:
5f:1a:91:ac:5e:db:7a:e4:a1:53:6d:3a:af:3f:35:
e8:d8:89:16:d9:6a:40:98:a9:bf:bc:dd:8a:f2:e8:
7c:ad:39:f7:76:f4:2a:af:3d:34:f0:b1:d9:57:97:
e7:35:41:af:4c:b4:16:77:70:52:6d:93:ec:27:7f:
39:61:28:98:38:51:5e:6f:2b:f4:17:18:1f:4a:43:
c0:3c:03:c4:0e:8a:1c:98:77:12:a4:4f:cc:94:b8:
c7:29:8e:52:15:33:63:c8:5f:9b:57:46:4d:6a:0e:
58:58:51:f9:0d:58:58:1f:69:d7:59:8a:df:f2:cf:
a0:22:f4:98:2d:3a:4b:c4:af:5c:cd:8b:d9:73:89:
2f:6a:52:01:13:23:ea:af:e0:f3:d6:72:13:3f:32:
fe:d0:7e:2f:99:92:81:27:18:83:98:b0:5a:48:b8:
02:db:e4:df:93:05:15:36:79:8b:a1:c8:53:82:f4:
03:43:13:c0:cc:fe:1b:d8:cd:35:20:17:57:3a:a6:
14:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:18:6D:BA:34:B9:BE:18:98:FC:6F:6C:70:A6:4C:A2:41:32:84:A0
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6d:42:d1:d4:a0:f2:c5:74:0f:62:19:fa:f0:af:15:80:c7:
d8:b8:9f:0d:b8:b7:c6:22:62:18:4a:06:b8:83:d2:0c:f2:b4:
0a:16:b9:ce:29:59:33:f4:e2:95:09:82:37:18:77:71:75:e7:
96:e5:83:24:89:5b:97:85:3b:1f:4e:0a:39:97:fb:ce:ca:26:
dd:fc:bf:3c:d9:47:10:0e:0a:6d:a8:f5:8c:f7:06:04:a9:71:
94:e1:99:fc:e4:5c:e8:35:83:72:ae:2c:bb:9e:57:73:79:dc:
d4:51:85:94:3a:d6:57:f8:20:39:0e:5c:cc:e1:fd:4c:13:40:
26:c0:24:dc:cb:46:f9:bb:26:01:44:ca:cc:a8:b7:ab:c5:5d:
53:cf:c8:c4:20:16:2b:a6:87:0f:aa:ef:ff:1d:5b:e5:84:c6:
16:7d:2b:ca:d7:dc:f2:ae:ff:53:d2:24:42:eb:ba:d0:b5:cd:
d0:50:81:f4:20:2f:5d:de:b8:a4:9f:82:68:0b:17:76:df:cf:
de:03:9c:43:22:09:27:dc:82:8c:da:25:4c:6c:79:4e:ef:67:
9e:92:88:09:c4:dd:93:af:fe:92:06:4d:e9:92:fc:61:55:dc:
0e:7c:b0:6f:0d:39:01:4b:d8:4d:3a:2d:af:c4:7a:19:f4:3c:
1d:cf:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:47:43 2025 by rpki-client