Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File: gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier: mu6NzLDJk6tj3hL33ETA9PHfS3IZBdNCzDB76u6ALew=
Subject key identifier: 68:2C:36:E0:E6:03:29:00:B0:A9:DC:49:DF:36:BC:87:A2:70:28:8A
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer: /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial: 0199FFC8B394C7EFDBF58A45658BBDCF83F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number: 0652
Signing time: Mon 20 Oct 2025 04:02:47 +0000
Manifest this update: Mon 20 Oct 2025 04:02:47 +0000
Manifest next update: Tue 21 Oct 2025 04:02:47 +0000
Files and hashes: 1: cv2xTszOP7j1k8VH8Xq8b77acso.roa (hash: gJcKaSX3/S1aDVSD+NWUNHhQVwYYx7ZgiUJVulKjqVg=)
2: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: H5sTRtyFeR79n/sJbOEyz0BR4Bs+LMhjTsu8UUqEU3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:b3:94:c7:ef:db:f5:8a:45:65:8b:bd:cf:83:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Validity
Not Before: Oct 20 04:02:47 2025 GMT
Not After : Oct 21 04:02:47 2025 GMT
Subject: CN=682c36e0e6032900b0a9dc49df36bc87a270288a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:68:41:7e:f9:f8:bd:4c:c9:61:99:17:82:
30:69:34:ab:e5:8c:9b:48:e0:4f:71:d5:c6:2b:cd:
8c:c6:67:04:a7:b8:41:48:03:fa:7e:da:a3:60:b1:
7d:2b:6a:d9:84:be:e8:fe:45:52:11:92:2c:3b:df:
94:32:c3:e3:9d:55:d0:20:c7:ca:b8:2a:a4:09:46:
68:25:b9:0e:28:3a:a8:51:5d:66:1e:0d:b0:c8:48:
56:33:c8:68:cc:64:8f:cb:a0:c3:5e:4f:47:aa:c4:
ff:89:a9:d5:dd:aa:4b:94:02:a2:1e:1d:35:d3:4f:
e4:5d:f9:d8:17:1d:fd:00:5e:65:cb:74:bb:b6:4a:
ae:72:fb:5c:5f:97:9d:e1:3c:09:2f:a1:01:67:b6:
d0:39:52:e6:10:ef:6f:15:6b:46:6b:a6:f0:30:4b:
e8:1b:05:40:ee:48:a7:92:5e:62:6e:c4:50:31:02:
10:ae:b7:a8:e0:5a:d2:17:bc:d6:af:d5:92:a6:06:
02:8c:de:7e:d0:63:32:c5:8c:3a:4e:ed:88:d9:a9:
d2:ad:6b:ec:b8:09:1a:37:51:5a:84:91:2b:63:9d:
52:85:71:64:11:02:74:ea:f7:07:79:89:fb:11:27:
13:49:bf:61:a5:5b:e7:51:e5:21:da:1a:df:5b:b8:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2C:36:E0:E6:03:29:00:B0:A9:DC:49:DF:36:BC:87:A2:70:28:8A
X509v3 Authority Key Identifier:
keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:26:89:db:f7:a5:04:33:94:d0:ab:10:d7:e0:cb:1a:6c:b6:
fc:6a:0a:02:fb:79:18:da:61:f1:60:d5:e1:ac:42:0c:bf:5e:
1b:95:53:f3:1c:99:95:dd:f5:9e:ae:dd:8b:e6:ab:ae:28:47:
d1:fb:ff:19:26:f5:87:e7:8e:4d:2e:4c:56:04:3c:17:f7:ee:
99:7f:6b:a3:76:55:a0:95:aa:3b:a0:ea:eb:4e:32:ed:77:69:
09:14:0d:d6:ee:ef:7f:3d:f0:99:ab:2f:cc:e0:93:31:7d:57:
32:a8:bd:1a:0d:ba:5f:eb:34:2d:8c:5e:ae:c8:19:bf:89:bb:
ba:49:46:88:e3:34:93:cf:ab:fa:e0:b5:57:6b:43:7e:bd:9b:
e3:97:72:2d:c9:b4:df:40:9b:ef:c4:dc:2c:ca:7c:9b:93:95:
0a:ae:ca:04:d4:54:0a:c4:24:91:f4:1f:fd:84:20:b2:90:f9:
e1:78:05:a5:80:ec:c8:cf:25:b0:d1:5e:fb:53:bd:e9:f9:ef:
63:2b:99:2e:03:6a:f9:53:a9:c4:26:9f:68:00:9e:b8:97:0e:
47:16:1b:90:f8:a1:ff:f4:b0:4e:46:87:a0:db:0c:bb:df:ce:
ec:97:e4:22:3b:be:0f:89:ab:1d:a2:29:9d:8e:b5:07:e8:c3:
99:bb:cb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:36 2025 by rpki-client