Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File: g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier: 4wbhnc9kKmV0p+AZshQqvU7NFvh9/sqqx0LDjMEOW40=
Subject key identifier: 1A:F9:5A:A7:69:A5:8C:3D:7C:4E:6C:8B:55:13:61:A0:E6:73:C4:C3
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial: 019A4F996B1EFB78C1CD43C9A40C84886C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number: 081F
Signing time: Tue 04 Nov 2025 16:00:45 +0000
Manifest this update: Tue 04 Nov 2025 16:00:45 +0000
Manifest next update: Wed 05 Nov 2025 16:00:45 +0000
Files and hashes: 1: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: mlf2O3Vm7hqXhtZaTspZnR1SYmT0lYjJWgqJH7/1fpY=)
2: gdmhIDx5ThYeMs_40Jhtb7jiPec.roa (hash: B6j4QxYlJa05lqgAAnP15E3D3T9lG/9Wl0NNB1LT9cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:6b:1e:fb:78:c1:cd:43:c9:a4:0c:84:88:6c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
Validity
Not Before: Nov 4 16:00:45 2025 GMT
Not After : Nov 5 16:00:45 2025 GMT
Subject: CN=1af95aa769a58c3d7c4e6c8b551361a0e673c4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:6b:3e:1b:f0:e6:dd:45:d3:86:f3:66:9b:
79:0e:ca:d5:f7:e2:93:bf:53:eb:c2:6c:75:7d:53:
64:c5:59:fa:89:7a:0a:d8:45:fe:4c:d7:80:49:ba:
36:56:50:2d:4d:89:fe:02:da:76:3e:79:e3:60:1e:
db:9f:f2:c5:60:cb:ac:50:79:08:a6:20:0e:c9:5c:
40:1a:b3:c0:63:32:4c:f0:44:c3:95:8c:0b:26:0e:
f5:e9:03:5c:23:cd:7d:90:e5:34:b5:d6:0b:c9:0e:
1a:52:08:e0:ea:66:0a:e4:3f:76:72:82:94:b2:2a:
73:47:07:5c:64:db:9b:82:e1:90:08:52:b8:06:ea:
a1:c0:5c:14:ba:2e:8c:34:5f:f5:80:19:f7:39:07:
a4:23:51:18:95:7b:9f:8e:29:1c:a4:77:e7:31:b4:
fb:15:6c:9f:67:23:a6:bd:83:66:99:d3:c8:d8:c7:
82:b8:03:c0:0a:fc:6a:da:20:0d:76:81:7c:0a:2c:
a2:27:1b:9a:80:b7:cb:9a:31:c1:9e:bf:2b:4a:1c:
db:61:fe:78:75:15:82:b6:80:21:93:22:ce:6a:c3:
eb:8a:f9:aa:f1:c6:cf:44:8f:4c:b5:bc:16:13:91:
00:a4:c6:7f:86:0e:8c:0c:4b:68:db:25:56:e5:c7:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F9:5A:A7:69:A5:8C:3D:7C:4E:6C:8B:55:13:61:A0:E6:73:C4:C3
X509v3 Authority Key Identifier:
keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6f:cc:e3:34:be:7c:96:53:66:27:b5:71:70:fa:58:7c:1c:
d5:88:d0:09:90:95:e3:cb:81:06:18:c4:a6:ec:12:97:73:05:
7a:cb:59:7d:cf:ca:53:c7:f6:8e:66:4c:dc:56:46:eb:13:f2:
ac:4c:7f:a0:25:38:86:ce:6e:6a:51:8a:40:8c:bb:38:4a:57:
2e:43:fd:d3:e5:99:d8:98:ab:59:da:54:9f:ac:fe:b0:24:81:
48:9f:f1:80:7c:d5:1c:45:38:77:a4:5c:ad:6b:ae:99:ad:9a:
84:b6:23:e3:40:15:d0:ac:0a:f0:c7:41:65:9f:b9:fc:15:0c:
5c:3d:6b:a1:b8:2b:ff:46:22:eb:7f:2b:81:fc:54:cd:71:e1:
3e:50:8a:50:f5:f1:86:85:cd:4e:9c:a9:81:f5:d3:cc:8a:0a:
2e:2e:fa:53:81:d0:46:86:8a:d7:48:1d:1f:de:17:7a:ea:77:
c2:c4:50:4e:f2:8e:4e:aa:fb:ed:5c:9e:f6:85:5c:01:0e:c8:
3e:a0:f7:ba:00:f2:87:0c:55:9f:f6:fa:b6:c5:be:bf:42:2a:
8b:97:5f:7c:f4:32:a6:54:c1:9b:b8:23:25:75:18:b9:2a:37:
bf:c3:63:21:8a:f8:dd:e5:17:c7:a1:15:5a:df:18:0a:06:0c:
7c:11:28:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:56 2025 by rpki-client