Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: GwYaTT8a+QaET5QpawE7tOiYXAY6bzEyXr4ki4xSyFw=
Subject key identifier: AB:C4:57:4E:20:08:2A:24:7A:1E:DF:67:66:45:2A:98:F1:EE:8E:B7
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 019A4E868C7FAD2C56A0F3DA6EDABC81B364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:31 +0000
Manifest this update: Tue 04 Nov 2025 11:00:31 +0000
Manifest next update: Wed 05 Nov 2025 11:00:31 +0000
Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: ZB3Y8n3l4NmZjlzkX2BJgvKkucGEsDOh7JZEHN6RjS0=)
2: zOidZa_WBKrrVFNvnxbTNUXsqyA.roa (hash: c6CaCJCPxyhkXhFJHJ0Gvk/jlU50dgYSjedGTRGmMqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:8c:7f:ad:2c:56:a0:f3:da:6e:da:bc:81:b3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Nov 4 11:00:31 2025 GMT
Not After : Nov 5 11:00:31 2025 GMT
Subject: CN=abc4574e20082a247a1edf6766452a98f1ee8eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:df:bf:5d:75:f2:78:be:eb:31:bb:24:4d:
dd:40:5a:69:33:50:e0:21:c0:e4:e4:b2:e5:fe:fc:
36:16:13:c9:38:3b:bd:df:d6:09:97:c3:0f:72:5f:
7d:34:e4:d5:c7:ee:59:49:c0:6a:2f:8d:13:ce:72:
b0:20:92:c9:90:41:08:b1:f5:da:71:ce:68:cf:d9:
dc:4c:58:06:1c:fe:72:7b:21:a3:86:4b:0d:16:6a:
dd:f6:be:a6:df:d8:be:2c:ee:fc:d6:28:59:a9:e6:
c2:4a:19:63:e4:7b:02:3a:17:5b:24:5f:6b:93:b5:
5e:02:b5:02:81:16:5f:bc:63:11:27:fb:ea:28:f2:
03:48:2f:1e:75:08:51:65:af:c5:b9:12:ed:b2:e0:
08:e8:87:59:4c:99:89:65:a2:8b:57:81:76:ee:c2:
8c:6d:0a:66:f8:5f:20:6e:5d:b4:db:2b:07:37:ba:
33:7d:f4:85:57:43:eb:7f:72:c3:88:42:08:03:1d:
ba:30:4b:4a:f9:70:87:9d:ad:c0:f7:a1:6a:cc:53:
2e:17:3b:3f:de:df:df:67:9f:86:97:77:06:dc:56:
57:85:2f:f1:0a:16:94:86:ce:c8:8a:ac:98:c3:51:
a4:2c:ee:6a:47:7a:31:66:a2:4e:07:88:44:09:ab:
21:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C4:57:4E:20:08:2A:24:7A:1E:DF:67:66:45:2A:98:F1:EE:8E:B7
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d9:b8:ba:85:b1:9c:45:20:cf:e5:cf:fa:3a:1a:a5:ba:17:
44:98:17:f8:d8:de:3f:71:e2:8d:2d:74:d9:5a:72:a4:21:ac:
ea:50:30:66:ae:27:e3:64:c3:b5:8f:cc:8a:cd:51:46:48:07:
6e:08:0e:65:7e:3f:da:fd:4a:77:26:bd:05:b6:3e:15:d1:62:
b5:cd:60:42:85:70:3e:09:a6:50:28:33:04:f1:b9:59:4f:ad:
e7:dd:cc:67:e8:62:d9:17:91:86:e4:3f:ed:0d:07:41:1a:64:
3a:cb:c7:dd:1c:73:02:21:e1:7e:a6:cf:fd:8d:86:d1:57:82:
71:e1:5c:86:51:fc:5e:54:7d:2b:b5:08:0c:2a:bd:5d:3d:d9:
84:c8:47:fa:36:42:13:c4:30:1a:39:a7:d4:90:78:98:f3:46:
a0:05:ca:5a:3f:1d:2c:44:cc:45:c5:cb:b1:05:ff:8e:cf:ed:
bb:0e:4e:ab:4d:9d:3a:a2:51:b4:cf:1f:90:3d:7c:0b:a5:4c:
ad:1e:10:22:5d:b9:f7:ac:cb:ae:a8:08:49:29:49:d2:0a:e6:
86:10:c6:49:da:09:03:8f:f5:c1:e2:29:01:57:cf:97:12:60:
29:f0:60:98:62:37:27:6a:ca:33:c0:7a:5b:13:9a:40:72:f2:
c6:25:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:18 2025 by rpki-client