Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: Fd5d8lDW/rqgxp4Undm7CMD5p0J3bvkUGzwc4f6QShI=
Subject key identifier: 6D:87:60:47:16:F2:52:ED:11:AB:79:B8:B0:39:29:9A:07:C4:34:85
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 019A4F2B48FC24EE885FDC2E82A0F8F31C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 046D
Signing time: Tue 04 Nov 2025 14:00:27 +0000
Manifest this update: Tue 04 Nov 2025 14:00:27 +0000
Manifest next update: Wed 05 Nov 2025 14:00:27 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: gGJ4zNG0QboloXxzcGaGIUqrxZWK7lzcGjaEjqCnac0=)
2: xaTFNHvIwGFGt2nvvisSJGJJn1U.roa (hash: dncutlGZCp4ijfHdULe589Ce9+6dKbRvNV71t7mvtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:48:fc:24:ee:88:5f:dc:2e:82:a0:f8:f3:1c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Nov 4 14:00:27 2025 GMT
Not After : Nov 5 14:00:27 2025 GMT
Subject: CN=6d87604716f252ed11ab79b8b039299a07c43485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3d:7f:bb:97:72:7e:04:c9:1b:80:59:ed:0c:
b9:e1:28:76:7d:fd:66:1a:e9:d0:76:96:86:59:d4:
fe:50:63:62:ae:17:23:e0:ca:f8:d8:7d:3f:b5:e4:
60:b0:1b:07:6f:d4:14:22:a2:57:7e:bd:66:27:ba:
d4:a8:4b:a3:ed:90:97:2f:74:6c:a5:5b:88:94:e0:
8c:0d:50:4d:23:fe:4b:15:02:50:5c:1c:19:84:61:
87:f7:d6:da:2b:09:b6:50:c8:a5:46:2a:49:7f:4a:
c4:22:ec:10:09:41:e2:6c:64:22:d8:90:07:eb:20:
61:be:2c:1b:66:0c:f4:11:43:31:bf:7f:c1:72:29:
16:03:4e:b4:04:a7:8d:4e:58:ac:a7:2b:c0:46:2c:
c0:79:91:74:66:2f:b0:fd:b2:8f:af:1e:d0:0a:ae:
f7:fa:8a:59:b9:12:4d:5b:08:f4:1e:09:e5:ff:51:
f3:17:b6:6c:95:5c:f7:8f:89:3e:8e:d9:1d:e9:c0:
7f:a7:34:af:f4:47:8f:ab:e9:5d:cc:80:ce:51:a9:
51:df:d2:32:7c:4f:95:59:fa:10:00:5d:8d:7d:8b:
e6:c5:d0:32:2c:90:38:ae:7a:f2:13:a1:23:24:79:
20:7c:5f:45:ba:7b:07:78:3e:51:b0:85:27:83:ce:
00:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:87:60:47:16:F2:52:ED:11:AB:79:B8:B0:39:29:9A:07:C4:34:85
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6e:10:8e:62:20:b9:fc:89:f3:d9:cc:fb:4e:a6:bb:ce:8d:
f1:12:c5:eb:3f:99:66:c7:2e:04:e2:6d:95:e5:13:40:b1:df:
83:fb:5c:b5:e1:b8:f1:61:37:43:1a:8e:29:e3:31:16:25:af:
da:97:67:71:14:0d:7f:ea:41:5d:b8:5a:e2:87:3b:fe:a3:db:
35:60:4d:ee:e4:ad:bf:53:68:be:f8:37:c5:8d:d9:0d:54:fd:
b5:00:b3:84:0e:12:54:e4:22:b1:9e:fb:b8:cb:f1:57:24:c5:
5d:aa:61:64:73:1a:e0:42:c1:0f:30:dd:db:ec:17:15:12:35:
06:5e:87:7b:81:2e:16:e8:35:46:72:04:07:7d:75:35:77:80:
8b:be:34:8c:63:05:67:bf:17:2f:fd:15:6f:a7:18:41:17:3d:
fe:c6:d9:6c:f4:6a:3f:32:0b:5a:a7:ea:66:ff:49:1b:2d:b6:
83:70:e1:bf:11:95:76:58:8c:1f:fd:6b:08:10:46:37:c1:35:
9a:96:d7:d7:65:9e:d6:cb:d7:c8:1f:aa:22:88:59:a3:1a:a2:
9e:be:38:26:45:a5:23:2d:5f:1a:6e:4d:c1:5d:d0:ed:c3:15:
bf:19:a5:63:64:aa:a2:2a:16:65:d9:02:a9:1e:fb:90:e6:80:
37:4a:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:15 2025 by rpki-client