Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
File: 2gszzdt5m3vPXT3OAE_bqMPoZP8.mft (raw, json)
Hash identifier: 3uphS4dDS/7JnawTJvLHOzbdXqIN2ww9i068QDeDJ2Q=
Subject key identifier: F9:A4:64:4F:9B:EA:78:18:3C:04:9A:B8:67:65:47:E7:F9:FE:62:2A
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial: 019A51BEFE1FB11E2612F9EC8C0A4A5E7032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
Manifest number: 0D78
Signing time: Wed 05 Nov 2025 02:01:02 +0000
Manifest this update: Wed 05 Nov 2025 02:01:02 +0000
Manifest next update: Thu 06 Nov 2025 02:01:02 +0000
Files and hashes: 1: 17FLk26rZWNpnvEJucbEAG-7zqY.roa (hash: qMmpcRGKwOqOR5+GsVwNkgRbdBAdNorVpaMiale+nXI=)
2: 2gszzdt5m3vPXT3OAE_bqMPoZP8.crl (hash: kjD4MiXiV0Z0tmpms7Rn00A4Bxhptg3FcpTJpmpDH/U=)
3: bBGzNd5qGUUIPYH3-5zWMnwwyJg.roa (hash: 290Z2J6Jo9xanYpdqpciKr53wSmtU/PW4k3Qs+NnOTs=)
4: k29cbE30TGhu-1q8rRu7-jpqTg4.roa (hash: 9mQL8HUgIQzEZ7MXmoS/sUavd/K/UaaalJ5/ztoLSTk=)
5: s7mUu7WrVHVPJEBCCdi0H3bHpis.roa (hash: ExGJpFM76OJZURK1GFJNiBKKffY4pIrBrUBBm9tcC8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:fe:1f:b1:1e:26:12:f9:ec:8c:0a:4a:5e:70:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Validity
Not Before: Nov 5 02:01:02 2025 GMT
Not After : Nov 6 02:01:02 2025 GMT
Subject: CN=f9a4644f9bea78183c049ab8676547e7f9fe622a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:11:b3:e9:de:f7:e6:5c:c3:a4:1a:25:2b:
0e:3b:0d:73:69:4c:88:c9:67:88:7c:cd:ce:5f:da:
b3:9d:1e:89:65:ac:b5:26:05:69:72:5f:10:a0:78:
da:ba:a4:db:8d:f5:84:66:65:55:48:40:49:e8:af:
33:99:df:e4:fe:de:51:ea:d7:94:2c:11:53:57:73:
e4:3e:04:94:c6:7f:f6:e7:e2:14:0f:50:c3:b7:04:
72:68:af:3c:e9:a5:cf:8a:cc:c6:8d:4e:2f:d0:3f:
ea:3b:38:90:79:11:23:a4:9c:a9:f5:22:94:63:91:
cc:c0:b7:fd:25:8b:82:b1:4b:f4:47:9e:57:66:f8:
18:85:5d:ad:91:93:ef:59:40:6c:e0:e7:80:de:ee:
9e:f1:16:97:b4:56:1f:a6:d6:ff:71:e2:30:f9:29:
85:f7:0f:52:14:23:36:81:1a:c2:10:dd:c8:44:f5:
75:01:fc:f1:20:52:4f:51:a8:c4:d0:a8:0e:7c:1e:
e8:0d:54:3d:2d:37:fb:55:33:62:8d:4e:19:b9:b5:
e6:33:9d:ad:cb:86:1d:80:4b:79:c5:b0:19:00:64:
3e:aa:44:ae:bb:a0:b8:4b:e5:78:77:7f:87:96:18:
ae:fd:71:bc:88:4b:65:14:f2:14:b7:aa:42:e4:ab:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A4:64:4F:9B:EA:78:18:3C:04:9A:B8:67:65:47:E7:F9:FE:62:2A
X509v3 Authority Key Identifier:
keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6f:b1:0a:7f:c6:00:22:43:3d:86:4c:f5:24:d8:eb:4c:fa:
a7:d0:4a:4d:03:13:5f:7b:8e:eb:96:f6:08:01:89:c3:72:73:
7a:ec:4a:ba:42:f9:4b:ec:2c:4a:97:17:c3:84:ac:92:29:58:
bd:82:0f:fd:cb:4c:f1:49:a2:25:85:c5:33:1a:bc:b9:9b:bc:
1e:90:3d:bf:50:ae:6e:21:21:8d:77:ed:ec:85:81:fa:59:7e:
fe:59:26:34:95:a2:19:61:59:23:7b:ad:19:9d:0b:63:18:2e:
0d:27:68:0d:5e:fa:e6:7f:88:09:65:0a:4c:d5:d6:33:c4:c3:
0c:9d:18:c6:a4:3a:68:31:81:71:d3:2b:c1:7f:54:58:d9:87:
ac:ff:95:be:9e:a3:f4:1b:45:1c:c6:b7:0e:dc:81:30:ca:92:
ac:90:6f:eb:ef:79:55:5f:fc:c0:73:5d:4e:84:a0:46:6e:5c:
97:9b:5b:a5:9d:0a:b0:58:e5:bb:1e:61:a4:6b:48:8b:08:be:
83:94:01:dc:08:4a:12:15:77:cd:05:60:3d:7e:90:c6:7a:05:
0f:db:df:34:cf:0f:8d:43:71:6f:f5:c3:f8:96:f0:61:cc:69:
dc:c2:d3:34:65:0e:93:13:33:3d:b6:6b:9a:90:f6:34:44:e5:
ca:b1:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:44:43 2025 by rpki-client