Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: 7z80PnQ6agIl53XyproujuGAJoE6WNtQhdUqFvhs/VE=
Subject key identifier: D3:73:D7:DB:7C:1B:43:91:83:11:09:A8:62:E2:41:FE:A0:4C:5E:9D
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 0199FC21B64B02E4F706B341A0CA9609CD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 068D
Signing time: Sun 19 Oct 2025 11:01:31 +0000
Manifest this update: Sun 19 Oct 2025 11:01:31 +0000
Manifest next update: Mon 20 Oct 2025 11:01:31 +0000
Files and hashes: 1: 9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa (hash: NvC05zdhztqBgGL0x7IrDtfQb3ZiSTjs+SHJkAWRFb8=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: 2j/BqzisIflhjdKjxYAHp4Pl0fhQCzXNKEsCBF9POIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b6:4b:02:e4:f7:06:b3:41:a0:ca:96:09:cd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Oct 19 11:01:31 2025 GMT
Not After : Oct 20 11:01:31 2025 GMT
Subject: CN=d373d7db7c1b4391831109a862e241fea04c5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:fd:2d:83:c8:53:5c:8b:3d:c1:54:a1:8d:
08:07:1b:89:70:e6:62:c3:93:d7:b9:16:7f:e5:fa:
91:7d:f0:d0:90:4e:8f:03:3e:16:86:5b:7e:b0:b6:
3e:9b:47:54:90:3f:c4:12:71:19:80:37:61:96:bc:
53:55:29:8b:78:ff:52:aa:21:96:c5:1c:fc:56:b1:
47:90:a6:37:eb:68:18:7f:83:18:13:d7:c6:e8:63:
e5:e4:54:51:3a:e6:d9:08:c1:71:47:f7:3b:b5:db:
7f:29:8a:b0:10:f2:ad:11:d2:67:5e:9e:f9:b2:ff:
85:04:41:93:c8:48:af:ef:9c:6d:e4:ea:f6:00:aa:
bc:7e:a0:e4:f6:5e:dc:51:99:26:f8:90:f1:b9:20:
4b:69:23:8c:5c:e3:32:1f:98:3a:b2:df:2f:62:1e:
f8:83:4f:b1:b3:26:dd:74:3c:f9:aa:c3:4c:13:28:
c1:04:83:72:f3:6b:86:ce:b4:73:f3:f4:e8:3f:27:
b9:5a:f0:3d:59:a3:16:9e:44:c0:2b:9a:00:22:20:
52:53:83:47:11:a4:7c:bc:0f:2c:dc:56:ef:11:cf:
23:db:cd:97:9c:3b:18:3e:70:28:bc:3f:f8:4e:bd:
a7:c2:3c:ff:8d:39:4a:62:ef:06:6f:39:a4:3c:be:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:73:D7:DB:7C:1B:43:91:83:11:09:A8:62:E2:41:FE:A0:4C:5E:9D
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f9:11:7f:ea:9d:d4:53:a7:26:e1:61:11:c8:02:c7:ab:af:
16:2e:14:3a:50:d1:80:76:b6:29:d8:12:61:97:06:31:c1:de:
80:d7:fe:e4:27:25:c6:b9:fc:18:7b:11:90:1c:1b:83:41:85:
c6:d2:7f:dc:c5:8a:25:ad:ef:05:8f:77:8b:bd:4b:10:6c:1b:
5a:17:b2:e8:b5:c4:e4:5a:ce:dd:a1:c0:42:92:4f:bf:37:53:
93:7a:b5:ee:4a:f8:1e:02:8a:03:92:be:e0:dd:9c:94:f3:30:
05:dc:c1:f3:f4:5c:6f:82:3e:dd:92:87:a4:63:04:45:62:74:
78:87:96:f7:d1:6e:57:13:ca:ec:2e:79:3b:71:0f:3b:e5:27:
ff:18:b9:4d:01:c7:b1:f5:e1:cb:bf:a2:81:b5:3a:07:a0:38:
19:24:d4:c0:a8:63:fa:62:a4:c1:70:ee:e4:c8:cf:88:b7:31:
91:48:cb:83:ce:3d:db:25:76:55:15:c5:98:ae:86:7f:76:11:
f4:c6:8f:c4:ea:12:9c:49:52:f0:11:58:50:b3:d4:b2:33:9d:
39:d9:bd:3f:81:db:8b:c8:f8:cf:58:f5:bd:30:41:91:98:25:
39:be:5d:4f:18:68:2b:58:e0:4a:2d:aa:48:7b:b7:cd:88:76:
bc:3d:7c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:22 2025 by rpki-client