Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier: hMTdTZF9biQtrnjuoH7j1KiGY8nyFPGxOtjosF06sHI=
Subject key identifier: 2D:0D:79:1F:D1:2D:6F:8C:FD:DE:6E:A7:61:61:FB:57:5C:CC:4D:D1
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 019A0DB94C77E49DC3618F8731E0E16F8B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number: 16F2
Signing time: Wed 22 Oct 2025 21:00:38 +0000
Manifest this update: Wed 22 Oct 2025 21:00:38 +0000
Manifest next update: Thu 23 Oct 2025 21:00:38 +0000
Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=)
2: bTDx6BY2_bieAYAIiAFgdyKIF9k.roa (hash: qCwMntOeFKqowJO7prWM5i0O+TccBmu2GDJdiZbI22w=)
3: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: 2GM6I4oLDsJ/QP1ZpFcixLwbPl4LXAznw6yJhomMu9Y=)
4: kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa (hash: eW1HiHgHjju0NsKcsTSvzT72THKILOyyGeew75G0SSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:b9:4c:77:e4:9d:c3:61:8f:87:31:e0:e1:6f:8b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Oct 22 21:00:38 2025 GMT
Not After : Oct 23 21:00:38 2025 GMT
Subject: CN=2d0d791fd12d6f8cfdde6ea76161fb575ccc4dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:6a:4a:12:5e:2f:48:b6:d2:33:6e:0b:a8:
66:0b:2c:2e:e5:51:88:f0:5b:b1:b8:13:9d:b1:9e:
01:e5:d3:0c:19:21:ce:34:fc:59:6f:9d:2d:f7:bb:
7a:1a:08:13:00:0e:60:ac:b4:36:46:f6:8e:cb:43:
a0:a4:ea:e8:90:01:39:98:d5:02:23:d6:bd:35:dd:
50:5f:7e:df:97:85:50:13:78:1c:6c:28:e6:9e:08:
f1:ab:f9:17:26:67:73:8d:21:82:cd:5f:85:74:c5:
96:54:f0:5b:52:33:38:64:5b:09:1c:e5:42:d2:3a:
bd:59:f4:36:b8:3a:be:3a:be:6b:05:66:19:c9:70:
16:a7:58:79:fa:cf:01:05:44:65:04:21:53:10:16:
25:6b:3c:81:48:80:da:f0:f0:c5:6e:61:e0:6a:a4:
d6:36:ea:f1:e7:32:b2:11:1b:4a:ef:bb:95:02:90:
a2:b6:66:8d:bd:cc:20:f3:c4:65:48:6a:dc:74:a2:
d7:d9:d2:22:df:0f:de:ed:48:bb:f0:53:27:46:ea:
f6:81:59:1e:6b:a1:d2:42:3b:e8:78:e1:8d:06:63:
a2:ea:83:48:69:61:e1:64:d3:2f:4d:e2:0a:17:0d:
a8:9e:17:56:d1:e9:99:52:22:cb:b3:9c:9e:2a:d4:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0D:79:1F:D1:2D:6F:8C:FD:DE:6E:A7:61:61:FB:57:5C:CC:4D:D1
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:69:c6:66:3d:f2:0b:ed:48:ae:25:ef:2b:2b:a4:a8:3a:a5:
33:7f:27:ff:de:71:7d:d0:56:c8:c0:c3:22:6a:85:71:29:ae:
e7:87:3f:91:8c:ef:8c:84:36:16:5d:67:8e:04:98:d3:a0:66:
e2:27:9d:25:d3:c8:ac:ea:3d:65:97:c2:4e:9a:8b:b5:a4:f0:
13:78:3f:37:e8:0d:fd:fe:5f:b5:78:13:3e:ef:e5:58:e3:25:
be:b6:84:65:1f:33:4d:a6:59:84:92:84:73:57:08:f7:26:ac:
43:5b:60:fc:f8:14:0d:47:64:10:97:2e:c6:c5:5a:2e:88:6d:
58:33:e1:5c:9b:35:f7:6a:9a:c4:83:3a:ff:d9:dc:54:c2:ab:
e7:ab:5a:2a:b0:25:c6:a6:69:66:89:eb:71:74:84:7f:4d:cb:
bc:9b:12:61:bf:28:e8:68:0c:89:9e:35:7c:72:bf:6a:8c:b8:
75:f8:f3:3d:26:db:d1:ed:f9:8b:9c:41:04:32:de:f6:38:96:
39:d5:9e:aa:76:7d:0a:b0:d3:84:d7:8f:bc:98:dc:81:f9:82:
3e:ab:97:6c:e9:af:1e:69:de:c3:dd:1b:90:d2:57:8b:e9:42:
7b:f2:17:a8:3b:30:6d:56:c0:2c:1b:0d:8c:f7:1d:7e:54:bc:
1a:e3:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 22:54:56 2025 by rpki-client