Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File: g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier: eJzFH73+6bciFScsEW6E3xkd2UJ8chMF4HnJOdUWfF4=
Subject key identifier: 7F:57:DB:09:3F:A4:68:5C:6B:99:DD:0D:55:3C:25:D1:63:84:8F:E9
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial: 019A725CF02C38B6445B7E2963685432F448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number: 0831
Signing time: Tue 11 Nov 2025 10:01:24 +0000
Manifest this update: Tue 11 Nov 2025 10:01:24 +0000
Manifest next update: Wed 12 Nov 2025 10:01:24 +0000
Files and hashes: 1: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: aT7Gp2QlnBrJDP8Glyq9gtr7HjmODpswXiior9jQTwM=)
2: gdmhIDx5ThYeMs_40Jhtb7jiPec.roa (hash: B6j4QxYlJa05lqgAAnP15E3D3T9lG/9Wl0NNB1LT9cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f0:2c:38:b6:44:5b:7e:29:63:68:54:32:f4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
Validity
Not Before: Nov 11 10:01:24 2025 GMT
Not After : Nov 12 10:01:24 2025 GMT
Subject: CN=7f57db093fa4685c6b99dd0d553c25d163848fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:62:04:6a:74:64:25:1f:e8:f7:74:82:96:
b1:d0:90:0a:53:7e:c1:a4:c4:81:d8:0e:a1:56:59:
6c:39:b0:79:40:22:01:a2:88:6d:76:b6:26:5f:6e:
25:57:b5:a6:81:b6:ec:ff:fa:fa:a5:6d:43:b4:2b:
8a:8b:73:d6:b0:4d:e0:27:a7:5b:7f:c4:fc:d6:5f:
96:0e:fa:57:0b:e5:d1:4e:8c:0b:92:43:fe:af:6c:
a0:3c:0b:e6:aa:4e:cf:be:ef:d6:23:2b:f2:46:fd:
0d:6d:8f:f8:ed:4c:48:23:55:e4:0d:61:22:18:d7:
85:d8:42:39:46:aa:19:34:86:79:65:cc:85:d9:14:
cc:d0:8e:99:ca:00:91:8f:74:fc:e0:18:6e:05:e1:
42:21:0b:08:d8:02:69:7e:9c:11:44:0e:14:92:22:
6a:90:0c:c3:4d:7b:db:9f:9b:91:b3:0c:d1:36:bb:
ef:2f:a3:2a:07:a6:57:8a:85:62:2a:05:e0:5e:2a:
87:bb:df:31:79:d6:8c:ed:d3:a2:e3:83:c2:47:cd:
f5:dc:29:86:e0:25:e6:af:67:80:09:bf:7d:d0:93:
88:84:fe:fd:75:d9:2a:f4:bc:5e:26:04:34:50:b6:
fe:2b:7b:c2:26:a8:64:bd:cf:fc:01:92:a7:83:e9:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:57:DB:09:3F:A4:68:5C:6B:99:DD:0D:55:3C:25:D1:63:84:8F:E9
X509v3 Authority Key Identifier:
keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:20:56:72:be:f9:71:50:f2:75:42:a3:ea:45:cb:c8:6b:3e:
83:aa:ab:e7:f8:99:02:5f:71:3b:31:73:63:df:7a:99:c0:cc:
ef:ec:33:70:71:62:56:53:bd:06:f5:d3:fb:7b:9f:7a:62:97:
14:ec:5c:00:18:31:ed:5b:8d:50:4b:9a:f1:41:37:d3:8c:56:
12:af:be:b2:23:89:be:03:13:2d:89:bf:0e:4c:90:aa:85:cb:
a5:19:7d:e2:2f:f1:6f:a4:ab:c4:3d:0e:9e:0e:c8:7b:fb:9c:
04:74:b6:a1:a1:b3:4a:91:02:2a:8f:17:4b:9b:89:54:93:dc:
9f:e0:54:ac:cf:63:2d:d6:b5:14:33:a0:8e:70:62:b5:b0:74:
76:f1:30:0b:63:8b:2a:15:12:6f:a1:5a:05:4a:51:ad:4f:ff:
6b:70:5e:5e:11:01:67:0b:f8:2c:81:17:83:3a:ae:57:8a:e9:
1d:a8:7a:11:c9:c1:0a:e2:f5:e9:89:7d:a0:a4:c4:b8:f9:aa:
f0:45:f8:55:27:96:a2:c0:2b:a1:7b:ef:f5:c3:40:3b:3f:89:
f5:89:c6:29:4d:99:05:f9:e4:9c:47:a4:17:41:b6:a3:16:a1:
75:62:02:db:36:69:c7:24:08:bb:c9:3c:4f:3b:bd:3e:9a:e3:
f1:01:91:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:41 2025 by rpki-client