Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
File: g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft (raw, json)
Hash identifier: G+Chz+96ahUgBwpsXlvq5uyDjwA73KYXMtkmccr7bZI=
Subject key identifier: 04:17:64:A6:6F:20:09:50:E1:3D:62:0A:1F:32:DD:5A:B4:46:B1:14
Authority key identifier: 83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
Certificate issuer: /CN=83646ab7062148edb8fa9b60a831c8240dcab804
Certificate serial: 019A51F564CF83172EB864018CAD29220836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
Manifest number: 0DE4
Signing time: Wed 05 Nov 2025 03:00:27 +0000
Manifest this update: Wed 05 Nov 2025 03:00:27 +0000
Manifest next update: Thu 06 Nov 2025 03:00:27 +0000
Files and hashes: 1: 20epV1j0HCMZ-uCYpk_kUZek4Go.roa (hash: 0IJbxaBTBJrWj2eiqCnd7zV+Z0NBZxwRizr0fkaGu8A=)
2: g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl (hash: bwvpIYfLa80QWSj0od8cA0+Un+/qbygn8mpYXQm0kzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:64:cf:83:17:2e:b8:64:01:8c:ad:29:22:08:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83646ab7062148edb8fa9b60a831c8240dcab804
Validity
Not Before: Nov 5 03:00:27 2025 GMT
Not After : Nov 6 03:00:27 2025 GMT
Subject: CN=041764a66f200950e13d620a1f32dd5ab446b114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:27:29:4e:39:55:af:ea:6e:5d:d9:2f:27:
09:ec:d8:cc:cc:c3:20:f9:07:98:90:67:c4:32:47:
87:49:3b:2e:93:85:33:a2:db:73:72:21:62:8c:61:
07:63:54:14:3c:44:79:1a:29:e8:43:04:22:48:14:
17:36:53:10:25:ae:ed:10:ed:98:5d:d4:7e:98:05:
fc:2a:e9:13:2c:fb:79:da:5c:f8:b1:52:2c:58:6d:
bf:bc:12:e6:fb:6e:55:ac:ec:c5:f2:55:93:ba:7f:
63:3c:29:b4:45:b9:23:8e:06:32:19:4d:78:2e:ac:
95:90:1c:50:4d:64:c5:99:8c:52:81:a9:40:88:6d:
43:54:14:5b:62:de:e3:cb:bf:67:f6:99:f4:83:20:
07:5a:98:a1:a3:49:ef:59:23:40:c8:07:94:34:dc:
76:75:f4:7d:6c:8f:64:81:6f:e3:02:50:c8:bb:da:
cf:42:8d:c9:34:a8:3f:8e:90:2a:aa:7b:b4:52:ce:
f2:dc:8b:61:ff:cc:94:63:7a:25:f4:ea:71:a1:f1:
f9:dd:37:09:e2:c0:ff:f2:c7:bb:10:03:79:a8:25:
5f:1d:a3:96:fa:24:b6:36:55:77:e3:14:54:bb:22:
75:43:1d:d3:ec:4c:6e:f8:a7:8d:3c:60:83:af:ef:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:17:64:A6:6F:20:09:50:E1:3D:62:0A:1F:32:DD:5A:B4:46:B1:14
X509v3 Authority Key Identifier:
keyid:83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2a:5a:41:02:0e:7c:5f:b6:f9:c3:0d:14:26:9d:f1:2f:3d:
56:40:ff:e8:8e:06:4e:48:8a:06:53:07:e8:43:22:a7:72:cf:
8b:6e:e3:e9:97:8e:89:83:81:70:21:a8:40:a9:08:46:32:d7:
97:1c:19:28:a8:85:e5:87:72:6f:71:57:cf:db:b5:ce:5f:9e:
61:bd:e4:97:39:64:9d:fb:8e:21:11:91:c3:fb:5d:1a:2e:a3:
a0:b4:e8:dd:28:0c:0c:6c:e2:c0:0a:d9:77:46:c7:b9:bc:84:
c2:3c:27:6e:05:b8:02:df:3b:90:06:9a:1a:d7:c1:27:3e:c5:
f0:19:b7:96:d4:30:e7:3a:5a:69:25:fe:b5:20:2f:50:1a:3d:
db:f2:44:ca:f3:97:85:c7:5d:eb:69:cf:95:70:57:9c:31:eb:
9b:c8:e7:4b:fa:8d:7d:81:fc:2a:dd:73:4f:74:d4:52:58:dd:
6d:d5:eb:8a:94:37:29:fd:ea:10:fd:ff:00:f7:2e:ac:d2:56:
38:0a:35:ac:e4:6b:ec:91:85:48:d7:22:0e:2c:ed:ed:ce:bf:
a5:7b:35:83:8e:52:fd:e1:1d:d9:c5:46:95:e8:94:bd:5f:cf:
f4:74:57:0c:15:e5:74:29:80:e7:c6:ec:b2:80:8d:12:27:c9:
96:a9:44:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:53:01 2025 by rpki-client