Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier: Ad49bGIooSN/Q1wFyJSz+SWRK71F9YZtTYPG1yIqcck=
Subject key identifier: 19:18:35:1C:B5:32:D2:B7:0A:D6:FA:DE:60:9B:D2:19:DB:72:BD:5F
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 019A4D747E83A12345D1A43439E8C1C8B206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 06:01:11 +0000
Manifest this update: Tue 04 Nov 2025 06:01:11 +0000
Manifest next update: Wed 05 Nov 2025 06:01:11 +0000
Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=)
2: bTDx6BY2_bieAYAIiAFgdyKIF9k.roa (hash: qCwMntOeFKqowJO7prWM5i0O+TccBmu2GDJdiZbI22w=)
3: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: 1mYmS+XSKOs7INQRUwieXOuAsR9SE45PuFu0tBbnBJM=)
4: kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa (hash: eW1HiHgHjju0NsKcsTSvzT72THKILOyyGeew75G0SSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:7e:83:a1:23:45:d1:a4:34:39:e8:c1:c8:b2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Nov 4 06:01:11 2025 GMT
Not After : Nov 5 06:01:11 2025 GMT
Subject: CN=1918351cb532d2b70ad6fade609bd219db72bd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:d2:c0:d8:1a:e1:d1:19:66:b2:b7:6e:a2:
38:4f:e1:c8:d3:d4:b4:82:98:72:30:77:15:75:42:
50:ac:6d:72:a4:98:64:14:11:22:53:a3:99:57:af:
6f:74:1b:90:27:4a:27:3c:5d:92:47:a8:fe:80:94:
67:d2:8b:02:2f:de:5d:c9:2d:eb:07:8d:44:4d:54:
80:d6:5e:38:5a:c2:7f:2f:32:0c:0e:a0:37:55:95:
71:c3:0e:94:8f:e9:1d:61:72:c2:d7:62:ef:9f:8f:
bb:c0:67:6c:e6:94:86:bb:c8:c5:27:f9:b8:8b:a9:
2c:2c:a0:7a:48:ae:fd:11:a8:54:c3:d9:a6:82:d3:
c4:51:69:42:5c:42:dc:dc:d4:0a:a0:18:6e:5b:af:
9b:e2:5d:0e:9f:37:34:dd:ed:a4:eb:d2:5d:92:63:
76:09:61:37:f7:d3:7b:05:05:15:d8:58:9d:6d:1a:
48:e4:eb:45:3c:41:34:6a:79:ca:e0:1b:18:10:84:
1e:ec:53:b0:d3:07:73:9e:c6:53:17:05:bb:f0:3c:
fd:6c:5f:f9:c6:08:a9:1e:80:21:94:a6:1c:3f:7c:
9e:c6:7e:79:2c:8f:f7:49:fc:47:93:92:76:a4:ed:
c2:de:b0:a2:4e:c4:54:a2:d5:55:03:78:b2:c0:27:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:18:35:1C:B5:32:D2:B7:0A:D6:FA:DE:60:9B:D2:19:DB:72:BD:5F
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:33:de:fa:03:22:ab:b5:d2:f7:6d:4c:29:0d:f6:57:02:13:
8c:f1:3a:ce:9e:d5:65:07:fd:b6:46:00:aa:4a:9a:03:de:5d:
23:8f:51:80:5e:c9:a7:ad:3a:10:3d:b3:93:6c:0a:f8:46:ae:
52:2a:9e:51:d0:78:b4:34:c4:61:8d:fc:fd:aa:f5:9a:44:26:
58:e8:f3:89:e7:90:e0:f4:b9:0c:dc:d0:da:e3:55:43:22:e0:
85:8c:b9:2e:55:a1:89:06:59:12:af:a6:e5:30:f9:bf:c0:ff:
c8:fc:af:72:a7:a7:77:40:02:93:9f:33:2f:3b:b3:ad:12:80:
45:f7:07:75:3b:9e:af:29:1b:d9:b9:9b:2d:57:1f:99:bb:3e:
0f:4a:fc:6b:6f:34:2a:19:dd:88:2d:8c:41:65:4c:c0:a6:85:
a0:90:00:c6:93:7d:28:48:8c:c8:f1:f8:5f:ee:22:0c:16:df:
12:ea:23:3d:a9:1e:c4:8c:06:2d:2f:1c:99:d4:20:1d:13:0c:
d2:59:b8:57:0b:fe:0a:76:04:0e:47:55:44:ce:38:25:8f:63:
8d:c6:e0:e4:1c:b0:3c:14:99:0c:10:58:55:59:a4:9a:aa:13:
ee:0a:9c:d5:0d:f3:c3:11:46:b8:d2:aa:07:e6:15:3d:aa:52:
09:8b:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:23 2025 by rpki-client