Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: E4qSvbLCNXtdFODXT6zDzefXDZ0p2HYJFHlvAykM2Ok=
Subject key identifier: 2E:2F:B6:AD:5A:8E:16:2D:A3:7D:C8:B0:3F:58:03:84:5E:B6:35:0B
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 019A72934BE8A0D16117B9C036E52F2CA1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: E3E7GMy+Lyh4854GmFc+thvCfIzQHuuTTGbPM4jiKLE=)
2: xnuUEnVXaSzz9cF5USCrsyD97so.roa (hash: j10VBwI4MUaDD8l8nXJ3vdwJpNrClSEXJCQ84BCSTro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4b:e8:a0:d1:61:17:b9:c0:36:e5:2f:2c:a1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=2e2fb6ad5a8e162da37dc8b03f5803845eb6350b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:54:8f:5d:6c:97:ff:88:00:1d:1a:eb:dc:
be:47:f4:6c:66:e8:88:6d:cb:06:eb:1d:8d:20:2f:
8e:2f:62:25:36:94:99:7f:c8:d1:b8:70:4c:5d:a1:
66:f4:b7:9c:f6:68:44:91:b8:36:85:57:6c:af:2e:
66:d5:fc:da:dd:e4:2a:cd:16:7c:c6:d5:0e:0f:43:
04:54:00:86:9f:3b:be:af:40:1b:2f:ad:c9:2b:2f:
18:3c:51:69:bc:f5:38:5f:2d:1b:cb:a2:87:a2:1a:
ef:9a:f6:75:cf:d6:90:57:3d:0e:39:9e:b5:c3:91:
fe:c5:d4:c1:0d:95:c7:aa:66:32:fd:ea:bc:12:de:
69:54:8d:c5:fe:96:3e:2e:19:2b:72:f6:0c:d8:c3:
41:5d:3f:a4:ba:50:45:ce:9c:de:73:dd:52:99:5d:
8c:73:c2:fe:a0:1c:b6:fc:38:41:e4:1b:e5:a0:53:
50:ed:68:80:e7:b8:2a:b6:b7:7c:a5:fa:6b:d9:ec:
c9:89:9d:f8:59:da:be:43:61:fb:ef:9e:14:db:40:
e7:32:5a:66:bb:64:97:9c:05:bd:02:60:23:48:da:
a5:46:9d:b6:7a:61:82:bb:d8:e6:2a:ae:df:0a:e1:
47:b6:e0:1b:62:c4:a6:29:53:9e:5e:7c:72:dc:c7:
3a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2F:B6:AD:5A:8E:16:2D:A3:7D:C8:B0:3F:58:03:84:5E:B6:35:0B
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:02:b4:ab:eb:e9:28:d5:79:18:39:0c:88:0e:a7:4e:79:9a:
31:9a:aa:e1:cf:42:d3:d4:14:54:c4:c7:56:3f:19:05:71:85:
f2:06:d7:a4:c5:75:16:08:d7:8a:03:40:81:43:ee:fc:1e:fc:
5b:e6:fc:7d:ce:40:cf:7b:f1:f9:37:dc:6d:8f:7a:b9:96:db:
9a:36:e5:fb:d6:f8:74:41:88:98:af:d0:7a:6f:48:c9:24:1f:
60:89:8b:a8:8e:54:2c:8f:14:4d:de:f5:3e:02:4c:0b:1a:fe:
0c:7d:cc:b4:64:14:fe:88:51:c6:73:a1:0c:fc:5f:0e:90:60:
fb:2f:55:bc:3d:9c:e5:8c:6e:2d:06:19:00:94:2d:59:72:dd:
f6:c6:e3:8c:d3:f4:04:f8:e1:0a:dc:45:8f:ab:b9:6e:4e:a2:
a1:5b:57:34:e1:01:3f:dd:f7:59:21:1d:4e:e5:f4:b2:aa:0c:
6e:18:c1:03:27:22:f3:0e:6e:0c:29:aa:4f:d8:9e:47:74:e8:
c3:54:11:45:8a:4a:4b:a0:d7:12:60:cb:f4:e4:f8:1a:a2:c5:
be:cf:bb:14:c3:75:f7:c7:8b:fc:84:f8:41:13:fd:8f:d9:f6:
7a:80:f2:df:50:f4:9f:f4:08:00:34:53:49:eb:77:9d:9c:d3:
7f:56:f5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:52 2025 by rpki-client