Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: f9LvMltDO8NoYz9hurKqKHDvHqIZlIt+/iMnrkLDdQc=
Subject key identifier: B3:01:13:AF:A1:17:09:30:ED:F6:11:38:5C:D7:7C:4B:FD:CA:8B:8C
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019A5187CA57F0ACB1DC402425927580C1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 010C
Signing time: Wed 05 Nov 2025 01:00:44 +0000
Manifest this update: Wed 05 Nov 2025 01:00:44 +0000
Manifest next update: Thu 06 Nov 2025 01:00:44 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: UtHo+5pLKNQ5d+2WnVkDqf36jet0payFgXi3JzTILuo=)
2: Yl5dVHvt8TLEuXDW_2N88snHkxY.roa (hash: RVpoQeieFNCy2NDCVSw5A9nvcWMxgvqJyoDHS7AWVvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:ca:57:f0:ac:b1:dc:40:24:25:92:75:80:c1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Nov 5 01:00:44 2025 GMT
Not After : Nov 6 01:00:44 2025 GMT
Subject: CN=b30113afa1170930edf611385cd77c4bfdca8b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:30:7a:fa:1f:d3:e9:ea:a3:6d:99:c6:71:
9c:7b:52:df:39:1c:4c:db:af:bc:13:99:32:21:03:
68:21:ff:ef:80:72:c6:5d:1e:93:65:a0:39:66:51:
26:61:f5:2b:c0:37:6f:b3:4a:82:62:db:11:06:5e:
99:cc:f5:1f:9c:64:65:78:15:a8:9a:4f:3f:28:6e:
a0:d1:16:98:9e:e3:77:45:1b:c4:c2:aa:00:ba:34:
9c:29:b2:83:c7:93:3a:f4:59:bc:9f:45:dd:47:1b:
a7:11:96:2d:b4:3f:04:4f:6d:ea:c3:c2:2d:13:6d:
72:d5:da:50:87:a5:74:86:75:de:29:83:f3:87:48:
c6:26:a6:85:d6:12:f4:4d:7e:8a:26:35:e9:d8:1b:
28:f4:c9:bf:12:c2:6e:8b:03:88:99:25:6c:40:8a:
3b:6e:10:4e:cb:64:3f:a1:bc:ac:9f:1f:16:6f:96:
5b:aa:18:07:b3:7b:89:91:09:c3:1f:eb:e1:bb:d3:
a9:7a:12:56:d0:cd:7b:87:0d:70:28:8b:3a:ed:c3:
3a:96:dc:4c:05:50:c0:d5:a4:b8:48:4c:cd:30:86:
b5:03:bf:47:72:a6:62:d1:e7:1f:3b:ee:fc:6e:f0:
70:1a:a7:97:6d:65:d1:11:e3:92:79:1a:de:6d:45:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:01:13:AF:A1:17:09:30:ED:F6:11:38:5C:D7:7C:4B:FD:CA:8B:8C
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7b:91:ce:65:1a:ab:54:7f:5f:bd:3b:14:db:64:9d:ee:60:
e0:79:20:07:52:8e:bb:9a:36:e8:15:62:36:53:83:33:f2:8e:
9c:ed:0c:46:9f:5e:7a:f0:fb:81:a5:72:7c:e8:f5:11:46:62:
c0:8a:9c:13:5e:46:1a:a3:eb:0c:23:94:71:7a:a6:eb:56:58:
81:a7:c3:ff:4d:d2:04:d7:50:c9:4b:32:0b:f0:8c:be:28:e2:
bd:fd:34:c7:9b:c5:f2:2c:d8:62:fa:b3:96:16:bc:0e:d2:18:
ef:f3:c0:22:1e:45:28:c4:be:8b:6d:c8:1c:25:ac:45:ac:db:
4c:88:08:d8:f0:6e:23:fd:f4:ac:39:5c:dc:4f:70:70:9c:d0:
b0:71:be:78:d5:75:ab:52:2f:73:40:4e:40:bf:67:e0:0a:d5:
c1:09:e3:66:7c:ab:6a:db:28:0a:a1:20:8f:90:6d:ea:7b:3e:
7a:e8:17:b5:34:1e:6a:46:4d:a9:c4:b7:03:35:97:ff:62:33:
ad:87:dd:00:e7:37:4b:5c:23:79:85:0a:8f:a3:65:63:9c:eb:
01:5f:dd:c6:d2:dd:e0:52:13:33:65:be:e6:bd:34:74:a5:f7:
67:20:a8:8c:0a:02:25:6f:2d:30:3e:89:ac:c3:ce:8c:20:1b:
c3:8a:2e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:10:25 2025 by rpki-client