Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: I0pVCxAvBJScn9VUipehs86nFoTJdTLAM8pQp0+Y4Qw=
Subject key identifier: A0:78:F7:C6:C8:56:50:EF:1E:22:EE:8A:D0:CE:A6:DB:B3:DB:9D:5B
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 0199FE103B2E7ED0720595F855F4F5BCF790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 1148
Signing time: Sun 19 Oct 2025 20:01:40 +0000
Manifest this update: Sun 19 Oct 2025 20:01:40 +0000
Manifest next update: Mon 20 Oct 2025 20:01:40 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: 6yrEotlT3P+ydHuwZwibB1WIGOtof8JCiWZ6qH8YdNQ=)
2: Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa (hash: IAjzw2r7E4lx4vW0Aq4BO6OsCC7MgvRuI1axCmQxfb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:3b:2e:7e:d0:72:05:95:f8:55:f4:f5:bc:f7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Oct 19 20:01:40 2025 GMT
Not After : Oct 20 20:01:40 2025 GMT
Subject: CN=a078f7c6c85650ef1e22ee8ad0cea6dbb3db9d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:36:d1:31:d1:3d:53:9b:1f:4c:f2:86:2b:
02:50:4c:15:66:30:bc:05:dc:5a:d5:8f:cf:bd:61:
72:0e:91:d3:35:d8:43:65:e4:5d:b8:b8:ff:b8:07:
c7:f6:10:6f:b5:06:cc:8a:75:2a:9f:46:ad:50:40:
eb:04:4a:94:83:0b:ff:67:58:f6:3a:e6:95:e8:0c:
a1:55:bb:77:ac:75:b0:d2:ed:e7:85:d0:fa:18:1c:
15:fe:74:a0:e3:9a:e7:16:57:3f:f0:95:c9:ae:33:
14:cc:7c:25:6c:42:32:ae:c5:79:cb:21:c5:3b:20:
f7:a0:4c:e2:58:43:e4:4a:3b:3d:61:21:d1:c1:5c:
de:af:eb:30:33:48:89:4f:97:f3:16:49:1b:be:88:
d0:a1:48:ac:41:1d:49:83:2d:a3:47:b7:b8:dc:66:
de:ed:d3:ff:66:2e:19:43:1f:93:01:0c:f1:a6:f1:
fc:84:4a:41:db:48:46:c7:89:f9:17:ed:72:b7:22:
2b:97:a9:81:d4:c0:66:f7:f3:90:2b:d4:77:31:6b:
06:c3:07:2b:82:08:14:51:84:d7:19:ae:aa:8c:14:
42:a6:fd:b9:60:fa:47:53:84:29:4a:b2:5e:08:f2:
a5:e7:c4:d0:77:26:f6:e1:00:56:b6:77:0d:dc:40:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:78:F7:C6:C8:56:50:EF:1E:22:EE:8A:D0:CE:A6:DB:B3:DB:9D:5B
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4b:99:38:bf:70:cd:b8:5c:77:bf:b3:f4:aa:eb:1c:80:70:
6a:75:20:41:f5:60:be:67:10:ae:0f:0f:ee:e6:89:4d:e6:01:
d5:c6:ad:4f:54:7e:5a:7f:af:6b:20:76:b1:62:57:dd:39:38:
3a:7c:67:e6:cc:22:8b:06:e9:9f:b1:c5:75:ed:65:e4:2d:4e:
12:ac:b8:e8:ba:de:10:7c:a8:33:a2:e8:a8:1a:c3:fc:de:72:
1d:21:8c:26:18:e4:b5:1a:3d:66:64:ca:ca:21:ed:0b:5a:97:
12:74:5d:cd:af:fd:d4:ac:41:28:cb:5e:b1:b6:fc:e0:08:1a:
1e:45:ab:32:b4:80:08:e2:3f:31:a0:8d:fc:30:09:c2:fb:75:
0a:c7:c5:54:62:63:9c:3b:be:73:8a:6a:29:c2:e0:65:e5:da:
5b:b7:f2:30:93:e9:29:af:3c:f8:5d:af:65:81:e1:89:9c:6b:
be:6c:d8:b7:0e:06:3b:a9:66:47:47:91:9e:85:26:fa:76:44:
fa:53:31:d7:d8:cb:b3:88:71:13:03:ef:c5:02:dd:16:f6:bf:
96:20:bd:e5:1b:57:73:4d:20:19:f7:3e:d3:94:d6:41:a5:de:
8b:26:72:85:2f:b0:58:f6:ee:2c:b3:7f:a0:af:76:62:04:13:
2f:54:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:03 2025 by rpki-client