Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: S3rDadPah7mpqPK84tVc1BySSTb6YXksPaC8i0I+Q8g=
Subject key identifier: 75:4B:AC:45:6C:87:96:7B:71:CC:9D:20:15:A1:18:15:80:36:CD:5F
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 019A300EF69B1C60388A2A4C60365BE1D6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 0654
Signing time: Wed 29 Oct 2025 13:01:18 +0000
Manifest this update: Wed 29 Oct 2025 13:01:18 +0000
Manifest next update: Thu 30 Oct 2025 13:01:18 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: Dioqb7Fm1GlQDcUfUbbjLSlY2g+17nloPjCc6DJtLus=)
2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0e:f6:9b:1c:60:38:8a:2a:4c:60:36:5b:e1:d6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Oct 29 13:01:18 2025 GMT
Not After : Oct 30 13:01:18 2025 GMT
Subject: CN=754bac456c87967b71cc9d2015a118158036cd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:69:2c:53:ad:a6:e6:d4:23:3a:fb:2e:70:
ff:d2:7b:2b:9f:96:e4:e9:8e:11:df:b3:7a:ef:83:
37:21:41:c6:21:20:17:a6:5c:8c:c7:f4:61:ce:1f:
4f:30:2d:b6:26:9b:67:c5:5f:c4:c1:eb:98:83:90:
bb:d1:fa:16:f4:79:16:e3:c4:7b:ee:37:9a:10:ad:
54:ad:a7:51:fd:4e:e5:6e:b6:9a:21:ee:de:1e:8c:
8d:64:e2:4f:27:68:96:17:dd:9f:a5:98:2b:c7:ed:
28:97:7b:a0:69:c8:61:a2:44:ea:7c:55:e6:46:ad:
7f:92:83:bc:68:f4:fe:7f:ed:a9:4e:10:7b:57:79:
3c:25:ec:46:a2:52:ea:8b:52:11:9e:95:f3:02:7d:
11:4c:40:0e:db:de:18:4f:4e:c4:92:76:f8:e0:d0:
30:34:c2:a6:00:78:9f:e1:6f:c9:4c:f5:50:a4:ac:
6e:53:69:03:a0:d7:1f:0e:17:bd:fb:a1:42:f6:ca:
cb:66:8e:9a:11:1c:50:b3:db:cb:e0:69:d4:eb:cd:
a0:86:24:41:d9:ba:28:ca:ed:17:6b:de:cb:56:3b:
c9:3e:8d:82:f0:a3:45:7d:d2:72:15:8b:9e:ab:8a:
64:d7:e7:d5:1e:05:74:1a:02:73:15:4c:9d:02:ab:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4B:AC:45:6C:87:96:7B:71:CC:9D:20:15:A1:18:15:80:36:CD:5F
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f5:58:d3:13:23:af:be:b7:f0:93:d5:62:c3:bc:53:17:bd:
ba:37:61:49:bb:7d:b6:7d:60:e9:d3:8e:5f:1e:d6:47:5e:ac:
c2:01:44:19:f9:8d:52:96:2b:2e:fa:8a:cb:e6:9e:47:27:68:
ed:aa:1c:b5:ff:06:a4:16:2c:58:3b:db:51:3c:cc:f3:79:61:
04:90:20:a4:77:67:fc:2f:88:f6:2f:e9:30:f0:35:e0:a6:2c:
c4:91:06:bd:69:d8:ad:db:ef:60:b3:b8:1d:b2:40:29:71:1b:
85:db:66:93:2e:fd:af:4b:eb:a7:22:67:a0:34:39:95:83:7e:
76:d8:03:3f:69:3c:eb:23:be:35:04:18:12:75:ae:75:b9:92:
3a:56:34:b8:b2:f9:d2:93:8b:80:13:bd:be:8b:18:88:25:2b:
0b:5b:50:73:bf:b6:1c:c8:da:dc:90:c0:6e:bf:1a:cd:51:8a:
f7:aa:23:d9:b5:90:f2:83:56:85:7f:08:f5:4e:ea:8f:3e:64:
a1:7e:e8:dc:bd:fc:e2:89:e6:f4:6a:7c:21:69:c7:c2:a4:52:
15:de:ec:b7:ac:65:dd:ae:56:0d:63:00:42:88:5a:de:ae:94:
79:5f:71:b0:be:50:95:22:99:25:4b:ca:ff:1c:94:3c:33:5e:
e3:12:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:23:52 2025 by rpki-client