Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier: jIM2ee3V9P7+APv5noiOVNOFD7QZz09QKInBaaEQAgc=
Subject key identifier: 2A:CA:DC:5B:3A:B1:CB:50:BF:0D:D1:F2:80:0D:DC:08:BE:E1:B5:5E
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 0199FB0F408E5D7736D1A5E7BF10F36D8FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number: 0BE8
Signing time: Sun 19 Oct 2025 06:01:44 +0000
Manifest this update: Sun 19 Oct 2025 06:01:44 +0000
Manifest next update: Mon 20 Oct 2025 06:01:44 +0000
Files and hashes: 1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: 7aKzAM7Q2ANzxmHn/JIEFj/83SrJuqMmqDtg6AtuwhI=)
2: IdU9T1FkI4A5QGWSCJhjbXvJUH8.roa (hash: oWd/kpimW/XKu4I8ZbE0KWw8XTvLyveRYZw0B6kosK4=)
3: dRyK6fyOLluuno6mdLfm9I8N5cU.roa (hash: hGLM1rnaqR4GcFlhsxhGDSd143ODBHpnIFqXniXaJBo=)
4: oQAGdFifd-TKFIBS06405IGsyvA.roa (hash: zpSW+ojYEzYzrGwuoKq30ePtiLpag8R8YWj5wxmdW5A=)
5: omEKk6HfpuKW0m6N-9CapGLlA_o.roa (hash: KyIBEH08U3tFJ8Ty4CJ5NL0S9/Sl8DxHoRzlmOSkNDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:40:8e:5d:77:36:d1:a5:e7:bf:10:f3:6d:8f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: Oct 19 06:01:44 2025 GMT
Not After : Oct 20 06:01:44 2025 GMT
Subject: CN=2acadc5b3ab1cb50bf0dd1f2800ddc08bee1b55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:53:06:94:cc:fc:38:22:88:c0:7f:db:0d:7a:
ba:48:01:6b:6c:47:68:6a:71:0f:d8:01:92:9b:5e:
9c:4c:d1:17:48:e2:96:bf:45:5c:0d:12:d9:79:9a:
1d:23:de:d4:6b:bc:76:33:b9:a0:b0:b7:a5:22:91:
34:a7:d6:1b:d2:bc:33:c0:8a:cd:72:4e:e6:6c:1b:
37:67:5f:c3:7c:00:24:e3:e0:47:34:f8:5c:a7:a5:
a2:df:a6:69:49:4f:39:03:85:dd:9e:50:e3:5d:67:
9d:ad:c1:c5:79:e5:45:a5:60:91:c0:24:e7:22:bd:
a0:b5:8b:af:59:84:f3:c2:a0:d4:b4:73:81:32:f9:
36:9d:5c:40:d2:90:c7:6b:4a:45:08:d1:ab:e6:e5:
e8:7e:b1:37:36:12:c3:f6:c2:ca:0f:9a:c0:00:f9:
1f:9a:ff:d8:fd:e8:38:b0:bb:e9:7c:f1:39:d4:79:
ec:ae:ba:78:f1:36:ba:ae:24:6c:93:82:82:21:42:
d4:83:80:2c:95:5b:a9:73:cc:18:32:36:e8:34:4e:
51:c4:f1:85:b8:f8:20:0c:ed:e0:eb:bf:ae:79:a6:
5a:7e:a7:17:73:44:ac:6b:ad:85:e3:67:3c:20:64:
2b:95:47:56:ce:39:a5:fc:35:49:5c:de:1d:d0:46:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CA:DC:5B:3A:B1:CB:50:BF:0D:D1:F2:80:0D:DC:08:BE:E1:B5:5E
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4a:b2:b6:6d:20:b4:09:7b:63:24:4f:d9:8c:9a:0a:8f:91:
51:c4:16:9a:72:82:1b:4e:92:7c:73:4b:f1:e8:d0:c8:ae:94:
77:cc:95:5d:1f:57:07:bb:64:06:89:72:88:13:64:de:37:dd:
c1:51:bc:8a:50:2f:8c:90:87:f3:d3:c8:fd:62:1c:0c:67:8e:
f0:fb:a2:ac:17:29:03:60:7f:0e:2e:5d:39:d2:3b:d5:67:cc:
5a:20:27:ff:b8:1c:51:d8:7c:cf:fd:07:cd:b8:dc:32:5a:79:
ea:64:d1:25:95:e3:a0:ed:27:40:30:82:c7:a1:b7:b2:b9:24:
43:1a:72:9f:59:63:4c:05:26:2b:c6:33:00:b4:b4:c7:8b:a0:
d5:1c:02:06:b3:94:7f:ef:71:ac:75:19:ac:aa:45:1c:34:12:
4b:ef:58:e7:0f:d1:bb:c2:e0:93:d6:38:ea:4d:ee:14:8c:38:
b2:08:5d:83:b3:65:41:38:30:84:28:49:62:df:03:16:f0:d1:
61:51:51:b4:06:c0:25:b4:82:a2:ed:d8:db:b5:19:f2:72:e4:
fe:c4:b1:df:06:eb:a2:e7:c5:a8:70:49:57:08:47:60:b9:40:
7f:83:81:f7:9d:ae:dc:d6:04:00:37:2f:3c:0f:5c:c2:42:2d:
4b:e8:47:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:00:35 2025 by rpki-client