Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json)
Hash identifier: vAUUwnyY8fhTLIf79upRUpGpmRwd9bK6NuOQNtEMWy0=
Subject key identifier: 62:BC:CB:7D:59:39:55:7F:D7:17:82:F8:96:04:59:F3:05:AE:54:B0
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial: 019A71B8B4C03F9197BC51B8B609DE0B5673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
Manifest number: 129A
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: UGrR__PyRipPzdjGAZBG7BppT8M.roa (hash: iYevY5/kIjNolOqwa16r2Chgd87dJ+qeTiEz7+9fEjM=)
2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: ix1Piel4gWr5dJGw/oL+pTDHrwjSqWORqZzrizuU7WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b4:c0:3f:91:97:bc:51:b8:b6:09:de:0b:56:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=62bccb7d5939557fd71782f8960459f305ae54b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:03:7c:3b:9c:f1:ac:4b:03:d8:cf:a6:03:
38:94:eb:61:7b:25:c5:84:e9:4b:63:78:a2:57:c3:
15:e1:59:2a:7e:a8:c3:c3:84:58:b9:69:3d:88:95:
02:6a:07:1f:eb:c5:f9:1b:7e:84:21:72:be:69:82:
75:e0:a4:3c:98:61:fb:2a:eb:07:19:ef:7b:6f:f7:
47:ca:e0:d4:1d:84:71:ea:23:b3:e5:f6:5a:6a:80:
ee:64:d5:5d:93:a3:c6:92:95:5e:a0:b2:64:19:f0:
98:f5:03:36:12:04:7c:b8:30:3b:51:73:c5:22:e2:
7c:51:4d:1c:5e:ca:3a:a4:7b:92:f0:40:6b:d0:53:
29:ce:ff:1e:2d:17:fa:d1:c2:d9:82:64:59:3f:06:
4e:61:26:1d:16:d9:f9:3f:92:19:a0:8e:34:18:52:
52:14:b1:2c:d2:f2:7f:11:5c:e5:f6:08:41:28:a6:
01:5f:68:3b:04:88:f8:b4:5a:fd:16:8e:49:3e:26:
32:ea:f0:42:15:54:2a:6f:24:ec:f3:6f:05:e2:93:
d9:10:ef:0d:59:05:63:e6:32:17:95:12:10:82:97:
b0:77:5b:fc:7c:16:29:07:23:1f:6f:2f:ab:2b:53:
5e:b4:c2:d5:df:41:23:09:d1:7f:14:c0:48:23:a2:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BC:CB:7D:59:39:55:7F:D7:17:82:F8:96:04:59:F3:05:AE:54:B0
X509v3 Authority Key Identifier:
keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b2:25:7d:c3:45:d8:32:6c:42:15:06:05:d3:a4:98:8e:e2:
a0:07:1a:37:b3:11:08:b0:32:02:eb:6a:63:eb:ce:a8:59:7c:
7b:61:e6:90:6c:d9:fc:78:de:e8:2e:ce:89:49:3a:a9:49:68:
77:89:41:4b:b0:3b:d5:37:a6:b2:24:0e:88:41:4f:ef:4a:dc:
6e:df:88:b5:49:eb:89:70:79:24:00:f7:45:b8:42:8f:cd:bd:
72:f1:bb:73:82:51:42:51:ba:df:1b:4f:82:8d:80:8e:8f:a8:
d6:2c:65:82:11:ad:c8:80:38:82:2a:9d:85:11:4e:4e:6b:3f:
cb:5e:e7:c7:9d:8d:8b:a7:ef:d3:90:60:6b:5c:54:4a:66:dd:
bd:99:47:8e:4e:53:53:a7:10:45:cc:eb:dd:38:69:e1:fc:53:
93:ad:0c:14:e0:a6:09:ba:df:3a:fe:4b:bd:16:88:d1:1e:43:
9c:ca:34:65:c0:6c:9d:4d:2a:bb:e6:31:51:14:9d:d1:ae:5b:
92:1e:7d:27:8a:93:85:d3:32:fa:50:ff:d8:e7:e1:17:6f:9d:
75:46:3a:28:fe:5c:f2:67:00:d6:a9:95:64:79:17:98:a8:00:
67:b4:93:b5:54:73:f9:c1:7f:85:06:b3:d8:69:e9:2b:a6:0f:
c2:d1:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:31 2025 by rpki-client