Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json)
Hash identifier: smwqqFwl87CYKwmfyyuSgl4ipQTjNbi7oGRQfm81Bug=
Subject key identifier: 9D:C1:E9:C8:C1:7F:CC:F0:86:E1:06:54:98:5D:4B:D8:2C:70:A9:2E
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial: 0199FBEB5112DB1F48CCE4F04CD7D6FE85EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
Manifest number: 125D
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: UGrR__PyRipPzdjGAZBG7BppT8M.roa (hash: iYevY5/kIjNolOqwa16r2Chgd87dJ+qeTiEz7+9fEjM=)
2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: 8F2gehvrgRp3D+6muap6mUfpSlh3HR4LHQNnb94RuEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:51:12:db:1f:48:cc:e4:f0:4c:d7:d6:fe:85:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=9dc1e9c8c17fccf086e10654985d4bd82c70a92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:20:32:09:2f:40:34:36:8c:06:32:4e:90:
72:eb:f0:50:60:9c:3f:66:60:92:5b:c8:d9:d7:6d:
09:f1:9e:db:06:8f:fa:6c:e2:cb:5d:d7:d9:6b:f8:
b7:7a:63:8b:9a:88:df:82:d2:5a:ff:eb:a3:38:9e:
ff:84:42:b8:13:2b:84:1d:d9:9a:6f:b5:ad:3f:6c:
8e:27:75:09:e4:a5:c8:9b:5b:d9:03:f3:30:52:0c:
1b:bd:aa:b8:7c:03:a8:83:80:a1:d9:1f:d5:3d:55:
79:ba:80:9b:72:86:96:e4:c5:82:02:cf:6a:d0:c1:
31:1b:20:09:0e:ff:e3:b7:ca:6f:95:19:77:fe:92:
b1:d6:b4:47:78:59:aa:00:26:12:63:42:21:d0:11:
f6:23:0e:1e:67:fb:e5:e7:35:57:a9:66:88:12:0f:
19:9e:43:3f:69:8b:99:c6:b8:b7:4c:1e:0b:2f:99:
13:8d:95:fe:8b:82:e3:ab:97:18:67:01:fc:f2:5c:
67:21:07:b6:2e:7f:87:a1:59:0e:51:18:4d:cb:27:
ce:98:fd:ec:27:bf:c8:77:10:7d:9d:7b:3c:1d:66:
4f:b6:e1:82:46:fa:d3:84:99:1b:2c:e7:cc:79:fb:
2c:42:1f:bf:79:9a:18:f3:f7:50:66:f6:d0:35:da:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C1:E9:C8:C1:7F:CC:F0:86:E1:06:54:98:5D:4B:D8:2C:70:A9:2E
X509v3 Authority Key Identifier:
keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bc:62:e4:b3:c4:a8:27:8e:26:6a:6c:20:51:bc:87:89:83:
ef:40:da:1a:75:45:7d:2a:39:5a:23:ec:85:30:39:ec:20:fe:
f5:23:a7:8a:5b:2f:70:a3:b8:49:00:3a:63:53:3c:98:45:ad:
d3:2c:9b:88:60:f5:d6:73:07:3c:d9:5c:33:a5:21:56:f6:e3:
34:35:79:04:2c:3d:b3:73:db:aa:47:ee:9d:8c:dd:d7:82:7d:
7b:c3:15:fb:d8:78:e5:11:28:df:90:96:71:1a:da:f4:5a:81:
8f:09:7e:59:08:1b:4b:dd:7a:ec:22:e0:75:fe:94:a6:be:73:
2b:11:21:77:96:f5:69:0d:6c:2e:b4:3c:d5:94:a1:aa:e0:0f:
eb:b8:b6:5a:0b:11:ad:a6:5c:8a:50:cd:b7:25:c0:83:52:15:
4d:9c:5d:7c:d6:3b:51:07:40:34:62:f1:03:4c:11:b5:67:fc:
3d:d4:08:02:14:96:84:06:bf:60:fc:a4:eb:0a:21:84:d1:83:
a6:34:be:26:0b:13:82:24:b7:cd:b6:d0:b1:23:cd:78:fa:53:
2c:57:60:b4:23:5e:ec:52:f5:ae:aa:e1:68:4a:87:71:c2:b5:
2d:0a:22:f6:73:f0:31:2e:b1:8e:77:ec:c4:11:0e:59:2e:92:
a6:ac:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:48 2025 by rpki-client