Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: WZnxUZC17RCWfftmowrBwGeWPoGqN6a+0YxYW4hggs4=
Subject key identifier: E9:49:C1:F5:05:AE:95:43:35:E1:6F:6C:E9:29:E1:97:B1:DB:66:5D
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 019A01B5FC2F548C079EC2F092A291CC0C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 063C
Signing time: Mon 20 Oct 2025 13:01:35 +0000
Manifest this update: Mon 20 Oct 2025 13:01:35 +0000
Manifest next update: Tue 21 Oct 2025 13:01:35 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: sszOlNXc4Ldh1A/A5R9zxaS4EYB5IBtUYA+qjNeYY4s=)
2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:fc:2f:54:8c:07:9e:c2:f0:92:a2:91:cc:0c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Oct 20 13:01:35 2025 GMT
Not After : Oct 21 13:01:35 2025 GMT
Subject: CN=e949c1f505ae954335e16f6ce929e197b1db665d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:41:d1:c1:e2:0f:85:49:3d:87:48:74:f2:
53:28:27:85:db:9f:88:59:ad:3a:99:40:d6:a6:21:
f0:0b:43:ef:15:5b:1c:f9:dd:d8:45:83:df:00:82:
9e:c5:e7:fc:54:b2:6b:7f:6f:08:f7:66:e2:7e:01:
3c:97:a6:61:88:54:f9:56:80:17:e2:0b:d2:17:b7:
2d:23:77:04:6b:f6:e8:1f:71:29:98:ea:1f:97:61:
08:99:0e:8f:54:be:96:ff:92:6e:49:27:f2:cf:b1:
27:e4:47:b5:fc:18:6c:84:a6:8a:68:68:c2:ef:28:
4a:61:fb:c9:e3:48:06:4c:cf:62:32:d6:64:d9:1e:
3d:4d:12:2b:2d:44:37:f3:2e:c8:14:ee:7e:8d:12:
93:0a:58:ea:70:e9:e6:ab:fd:6f:0a:ed:a6:cf:30:
87:d2:8c:f4:8f:2b:d2:65:f4:36:63:c8:fd:86:aa:
72:73:c3:82:03:c9:c0:31:9f:d6:b9:00:23:ab:4f:
88:1d:80:4f:d1:51:03:68:d3:cd:3d:4a:06:ae:07:
d9:32:44:ea:fb:22:91:77:4f:2b:d7:e1:74:03:b9:
73:e3:63:67:ba:66:1a:04:84:b5:61:a2:a2:67:68:
8a:9d:35:21:41:9c:8f:cf:c9:64:07:37:e3:b4:4e:
21:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:49:C1:F5:05:AE:95:43:35:E1:6F:6C:E9:29:E1:97:B1:DB:66:5D
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:14:22:09:e5:30:4e:10:39:5b:ef:ea:09:cc:1b:0a:07:f2:
4d:c4:22:f6:a5:54:76:5a:d3:26:77:27:c2:33:2d:4a:85:7d:
d7:c9:64:34:b2:f9:20:82:b5:41:40:5d:c3:5f:18:cd:d6:d4:
37:24:cd:39:97:34:b0:ba:5d:4d:85:34:de:69:1c:23:ae:74:
7c:75:9f:8b:8d:bb:e3:25:d3:da:4d:16:ce:6c:d5:ae:44:48:
33:3f:7f:11:b9:6d:4e:a1:fe:3c:8f:95:28:47:14:e5:3f:a2:
74:36:57:ba:c5:52:7f:ff:b7:1d:45:e5:5a:12:5b:f2:24:a0:
88:70:03:12:4e:46:84:da:c0:52:64:dd:ca:3d:62:62:ce:4a:
b6:cd:84:15:70:d8:98:59:b9:94:54:df:f7:95:0f:e9:36:5e:
89:92:72:28:53:98:d3:32:4d:7c:2c:56:f1:bc:cc:e2:13:3a:
ac:41:5b:73:6e:54:57:fb:23:85:f5:9b:2e:12:ac:bc:e6:1d:
6d:e4:30:f9:74:ed:af:26:65:a1:09:30:0c:eb:71:90:fe:bf:
9d:27:9d:ec:68:57:88:8b:18:31:0e:65:44:1c:35:41:77:7f:
9d:2b:75:bf:de:81:3d:d8:a9:a9:74:aa:cc:e1:48:83:fb:77:
f9:e1:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:42:01 2025 by rpki-client