Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
File: g02WbQCvvDm1lYvBpu1Xk__AxU0.mft (raw, json)
Hash identifier: yTrvUcQpsHEDFZNoMHS2r7TSxBzIMpYSrLoHv1+v5Wg=
Subject key identifier: D3:08:F6:F3:0F:68:ED:44:02:FA:41:E2:9B:89:18:B7:CA:EA:0E:B8
Authority key identifier: 83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D
Certificate issuer: /CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
Certificate serial: 019A7301098617BAA41E039A915079938AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:00:39 +0000
Manifest this update: Tue 11 Nov 2025 13:00:39 +0000
Manifest next update: Wed 12 Nov 2025 13:00:39 +0000
Files and hashes: 1: IOmKwvAlqovOqDg8R3XEjQKQn3k.roa (hash: /PNQa25f3KzGjHOJXgALCT84CCr36de+6y0mC+W9C/U=)
2: g02WbQCvvDm1lYvBpu1Xk__AxU0.crl (hash: 4x7A8yWB2TrrNLq8P0y/FvQ6l+9JE7PNgj8pg2PpqIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:09:86:17:ba:a4:1e:03:9a:91:50:79:93:8a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
Validity
Not Before: Nov 11 13:00:39 2025 GMT
Not After : Nov 12 13:00:39 2025 GMT
Subject: CN=d308f6f30f68ed4402fa41e29b8918b7caea0eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:06:cd:36:3d:ad:1c:e2:ef:53:06:67:15:
39:9f:4f:00:7c:a0:c1:93:c1:1f:ad:e1:6d:73:85:
b2:8e:8b:fc:ed:21:21:18:38:0c:41:09:1b:6e:c7:
6d:85:53:e9:f7:f0:df:b2:8f:67:ea:53:7f:fb:e9:
08:d7:25:e3:14:a5:af:f5:30:cc:15:70:3d:0a:64:
58:e4:28:48:3d:0f:91:0a:f3:8f:c7:b6:d7:e1:d2:
96:82:02:26:4d:27:f1:c8:a9:b1:f1:94:0f:c6:96:
45:b7:41:e8:50:5c:59:c4:8d:80:e3:38:85:c0:28:
28:09:86:a2:59:a5:e6:4f:2c:cb:da:3c:72:7c:56:
17:5d:3a:2c:bd:72:4d:8f:a1:32:6b:3a:b5:a4:3b:
84:30:f2:c5:bd:4e:a1:3a:77:7f:79:34:de:0c:47:
d7:07:27:3a:5b:9d:fd:3b:e8:97:35:6f:78:5e:b1:
47:5d:fe:0f:02:6b:99:a9:3d:a2:25:6c:e7:b1:db:
57:ac:7d:27:2c:82:7a:0a:7b:15:83:8a:20:5d:19:
30:97:a6:d3:12:8a:b4:54:e2:a9:f4:46:40:94:4f:
f8:5b:79:5b:97:81:3a:34:a7:e4:3f:a4:6b:96:a0:
03:95:91:8c:78:f2:d6:7c:05:82:39:20:93:d4:1c:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:08:F6:F3:0F:68:ED:44:02:FA:41:E2:9B:89:18:B7:CA:EA:0E:B8
X509v3 Authority Key Identifier:
keyid:83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:03:7b:7b:bb:fe:64:8c:ad:7a:d7:76:10:3b:69:26:b3:7d:
a1:7d:df:4f:e2:12:3b:38:15:1d:1e:97:71:ad:6c:53:86:41:
4d:17:2a:da:f2:12:bc:69:30:9a:fe:36:7a:ff:a2:3b:ff:fd:
e8:77:a3:87:51:f0:73:43:02:82:52:47:f5:61:7f:75:8b:0f:
ef:0d:67:e0:8e:01:c6:a6:31:b1:59:f9:dc:6c:bc:ae:6b:56:
05:57:86:ee:b1:e1:b1:c1:73:3d:54:93:a5:2d:9d:da:d8:8f:
d1:aa:54:0e:cf:ee:13:28:1b:7e:77:49:b6:c3:3d:3a:8e:05:
3d:69:7e:e2:37:d1:58:41:0a:8c:53:ea:4f:37:0f:b1:68:ee:
17:ac:54:f3:bb:35:b5:cb:4d:7c:37:4b:88:00:b9:74:76:76:
34:f9:79:13:72:9d:f7:6a:17:fc:64:2d:04:b9:89:74:bf:76:
fb:77:1a:50:ed:f5:9d:c5:85:b6:1a:6c:a4:4d:e0:c6:2b:43:
4c:94:9d:c9:c8:6c:27:ab:2b:fc:e8:b9:3e:9b:37:c4:14:de:
70:64:1d:35:3f:f7:cf:66:85:26:bd:48:a6:81:34:c3:b8:2c:
9a:8e:8c:14:52:1f:b9:b2:9d:da:79:bd:68:4e:67:ac:75:93:
61:65:d3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:40 2025 by rpki-client