Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
File: g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft (raw, json)
Hash identifier: 1ug/Sr+N1a/mCdDgYHiDMPIn+mINB4+vT/aRC7lM5lc=
Subject key identifier: 9C:CA:2D:19:EB:05:59:AC:43:A2:D7:E6:8D:04:14:6C:AA:D8:02:20
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Certificate issuer: /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial: 019A7149EA53A6ECB9411092C75BB7584AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
Manifest number: 0CEA
Signing time: Tue 11 Nov 2025 05:01:00 +0000
Manifest this update: Tue 11 Nov 2025 05:01:00 +0000
Manifest next update: Wed 12 Nov 2025 05:01:00 +0000
Files and hashes: 1: EvTzLNAJ6H7qRnNSh82gSKiMMgg.roa (hash: qhUzbtll1fZR91tCmRG4V9VmK3ep2kPWk4uvDeplZCU=)
2: g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl (hash: oe2GNTqjovVWSvWtbKt78vAZT8YfVJDVEkxtJE43UgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ea:53:a6:ec:b9:41:10:92:c7:5b:b7:58:4a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
Validity
Not Before: Nov 11 05:01:00 2025 GMT
Not After : Nov 12 05:01:00 2025 GMT
Subject: CN=9cca2d19eb0559ac43a2d7e68d04146caad80220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:f0:b8:9e:bf:c0:b5:0d:95:01:5e:1b:8d:
2f:c0:d5:e8:00:62:ec:68:ff:c8:3d:97:ca:ad:4e:
a0:57:3e:a1:63:c6:2f:cb:e8:e5:a9:e8:11:3d:6d:
f2:e7:f0:aa:20:de:a1:6c:8c:3d:a3:e6:09:dd:5c:
32:61:b7:75:d9:fa:4f:2a:5b:98:fb:5f:f0:21:26:
2c:35:80:52:bc:aa:dd:0d:39:1f:e6:6b:33:cc:61:
ba:33:32:93:b9:8c:6b:9f:0e:a2:1a:b7:a6:bb:26:
fe:03:57:31:13:ef:ed:01:5b:93:71:77:01:2b:3f:
fa:ca:d7:eb:54:c3:33:1b:bf:ad:5d:ac:c0:3e:7e:
b2:ff:35:c6:3b:e8:06:75:bb:f7:cf:af:46:1d:52:
d0:5e:0d:12:75:04:e5:03:84:e2:2a:3c:74:c4:83:
76:65:6e:bd:6b:ca:dc:f7:26:29:2f:45:05:2a:02:
d6:b7:5f:4e:0d:1a:84:a6:1e:00:9e:58:66:ea:31:
e9:89:da:0c:9b:7b:d8:9f:10:02:bc:62:31:18:bd:
15:1a:42:d9:51:fb:2e:f6:d6:26:94:54:d7:1a:ac:
8b:e6:31:c1:3d:9a:85:3c:ae:8b:c8:d6:38:90:92:
e7:3d:c0:a8:9d:41:cb:74:b1:95:f6:f9:f9:85:b0:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CA:2D:19:EB:05:59:AC:43:A2:D7:E6:8D:04:14:6C:AA:D8:02:20
X509v3 Authority Key Identifier:
keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e3:97:af:e3:d2:02:55:b5:f7:47:db:0c:8b:5f:12:0e:53:
85:83:2a:76:41:c0:13:49:15:3a:ab:30:5b:b1:f0:2d:ea:e1:
35:60:c2:2d:fd:41:b2:7c:b5:0d:62:b0:b0:cf:66:7d:f3:54:
da:71:6c:4c:d6:d7:de:ad:95:c8:ab:29:ba:0b:7c:ac:f6:95:
a2:7e:bb:18:ef:64:f5:84:51:88:40:08:6a:3a:c1:c3:5d:4e:
62:86:ce:bc:f3:c0:fc:ae:a8:15:dd:77:8f:1b:ee:58:79:68:
22:67:db:59:15:9b:2e:0d:f4:3f:4d:2f:0d:50:31:61:d6:84:
92:aa:07:19:be:1a:24:78:57:f5:f4:3b:89:6d:ab:c9:1b:a4:
9e:ce:26:45:6a:5b:6c:ab:81:15:f3:78:b3:17:84:77:45:88:
32:78:5a:02:66:e2:39:c4:42:cb:25:f7:b8:63:2d:10:f2:4f:
0b:27:2e:54:1c:ad:28:40:4c:86:ac:1c:5f:79:3a:92:08:59:
97:f8:3f:78:a1:47:80:1d:41:2c:4e:db:fa:30:c3:66:2f:d6:
a0:81:06:40:bc:a3:4f:51:b7:63:ad:99:43:b7:30:4a:7d:3d:
59:10:d7:56:9b:cf:74:61:ab:5a:c0:ed:62:3f:95:94:8a:a7:
a2:8c:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:26 2025 by rpki-client