Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: PJAyZhD+X3q0/z8bZeeo+GSBUxHbc1rlExucohvC3Xw=
Subject key identifier: 7A:9E:A9:33:0D:8B:0F:D8:48:B9:A8:AC:4B:7D:69:53:52:D6:62:25
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 019A714A34E31A9B8A8390E2E0B2CAE7FACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:01:19 +0000
Manifest this update: Tue 11 Nov 2025 05:01:19 +0000
Manifest next update: Wed 12 Nov 2025 05:01:19 +0000
Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: Cg3u/Ud+BQPUbH2trm1ZOvLy4f9VY9rXXkgwlIXEfws=)
2: zOidZa_WBKrrVFNvnxbTNUXsqyA.roa (hash: c6CaCJCPxyhkXhFJHJ0Gvk/jlU50dgYSjedGTRGmMqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:34:e3:1a:9b:8a:83:90:e2:e0:b2:ca:e7:fa:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Nov 11 05:01:19 2025 GMT
Not After : Nov 12 05:01:19 2025 GMT
Subject: CN=7a9ea9330d8b0fd848b9a8ac4b7d695352d66225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:7c:3a:ac:f9:af:89:c7:06:38:9a:ad:32:
dc:bb:a8:d3:90:cb:60:fc:60:70:04:ea:4c:23:28:
c1:6b:e3:44:93:45:25:e3:de:46:4f:c0:97:c1:fa:
98:bb:53:2b:6a:ee:27:a2:1c:b2:38:4b:47:66:ff:
5a:18:71:fb:b8:f7:a1:04:c4:ea:60:28:a8:34:75:
c5:e1:e0:a8:16:fb:c6:9e:2b:a4:3e:e6:71:db:ef:
87:05:34:65:d6:68:4a:1a:95:f8:ff:4c:66:99:34:
e2:a2:76:29:42:d9:35:1b:ad:f5:82:eb:f5:3b:4d:
90:50:10:1c:96:f8:71:9b:40:1d:93:de:ba:db:df:
16:77:ae:a9:ea:b7:1a:5b:4a:43:41:b9:0b:2b:37:
6b:3f:1f:64:c5:e4:05:90:84:31:c8:af:0c:91:0c:
1f:5d:fd:03:97:18:4b:45:03:71:a7:dd:fc:45:dc:
21:0f:1a:fe:06:29:51:97:aa:f4:be:34:fc:fe:3b:
bc:4d:c3:f7:9b:0f:07:53:f3:40:67:c4:51:97:f5:
2d:0e:10:40:67:85:11:ee:a3:ad:74:24:e2:83:3d:
41:da:f5:91:7f:5a:c3:da:e0:b0:4a:30:8d:75:88:
aa:e3:6e:1f:1c:c1:2b:ed:f6:30:aa:13:2e:54:75:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9E:A9:33:0D:8B:0F:D8:48:B9:A8:AC:4B:7D:69:53:52:D6:62:25
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3b:a7:25:6f:00:22:b7:4b:b4:1e:c6:01:6b:ad:da:78:38:
64:39:52:02:2f:6c:94:a1:0f:09:69:c5:3e:7e:5e:98:70:eb:
9e:8b:43:64:8e:d9:8a:a6:c9:71:c0:10:5e:5e:5a:c9:54:76:
05:00:e7:2e:6d:21:9f:85:6f:ff:2a:67:8b:93:b0:d1:26:a4:
f8:54:a4:19:41:8d:be:95:40:e6:b7:0a:20:0b:56:10:e2:8f:
e1:af:ce:55:a5:08:fc:fc:c2:87:31:f6:10:09:b6:ed:cb:59:
2f:5c:6b:71:b8:46:02:26:cf:a9:e9:34:88:0a:e1:96:76:ce:
ee:2c:66:32:8c:02:f8:ee:27:ee:0b:14:2c:09:d8:07:fc:b8:
e4:4b:7f:21:30:7a:31:70:61:76:0b:eb:c6:02:eb:e0:1f:a0:
09:3e:c3:f8:e2:91:42:ea:5d:47:b5:13:3f:82:da:56:2a:d0:
96:87:00:24:2d:af:6e:e7:bf:7b:e7:58:a7:53:6e:8c:ce:aa:
40:9a:f6:53:4b:8f:99:94:c1:3f:df:eb:9c:d0:16:7d:51:48:
4d:b0:a3:1d:95:f8:cd:de:93:2f:af:78:a7:b4:db:3d:59:d3:
be:2e:33:f9:18:e7:6e:b0:72:ed:f7:de:9b:a9:13:18:14:74:
3e:c4:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:10 2025 by rpki-client