Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: uVYc8pNYFPcFF1VDghQDSU/COWLnqOsxG8/pu2vOi8w=
Subject key identifier: 41:C1:85:88:E4:76:A9:1B:2D:C6:C7:61:E7:A1:E0:DD:3D:04:BB:B8
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 0199FBEB0563D20CAC7F2423CBBADB8FE0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 11BE
Signing time: Sun 19 Oct 2025 10:01:47 +0000
Manifest this update: Sun 19 Oct 2025 10:01:47 +0000
Manifest next update: Mon 20 Oct 2025 10:01:47 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: F27SPj2hNQqdcBcbg1T7Us8lklHKfDZ7VKbUQ2AlNLk=)
2: jaff7ENxhbDetLmkrM4Rn1poSLI.roa (hash: ui5KqDG5NX3RDDGGQyaqVgy4VTQxAtFMr0iFGN/ACUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:05:63:d2:0c:ac:7f:24:23:cb:ba:db:8f:e0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: Oct 19 10:01:47 2025 GMT
Not After : Oct 20 10:01:47 2025 GMT
Subject: CN=41c18588e476a91b2dc6c761e7a1e0dd3d04bbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:40:85:8a:13:9f:7e:2b:81:93:da:a4:b4:
3d:dc:a9:66:cc:44:07:db:71:21:26:06:dc:0a:ca:
82:bd:ae:81:20:dc:55:30:87:18:d0:64:56:ca:d5:
cd:84:09:67:2f:94:33:f4:11:6c:c9:b1:c8:6a:46:
c5:19:20:50:71:98:bb:4c:81:7d:37:6f:e3:37:7f:
f1:7f:03:78:52:40:99:75:47:01:2a:2a:d7:9d:7d:
32:78:62:3a:4e:5d:3c:49:02:dc:5b:c3:ee:af:83:
57:82:ec:63:08:63:b1:09:46:29:fc:4c:3d:77:d6:
b1:14:9d:7d:44:6e:25:90:63:d2:4b:ac:0a:12:21:
c9:0c:25:5f:0d:62:3a:41:59:5a:60:94:28:70:88:
9f:5d:b6:67:e9:73:b6:7e:a2:14:1f:5d:54:8a:20:
a8:7a:53:69:cd:aa:18:2c:d5:21:bb:b6:5f:25:37:
fa:08:fe:e9:8b:7c:43:f9:2e:ce:44:7b:7a:a9:48:
5f:3e:cf:b4:9f:3b:16:9b:ff:22:75:cf:80:17:26:
fe:1a:2b:17:c8:71:c1:cd:70:94:9b:49:b9:3c:f9:
13:05:1e:c7:6e:d5:17:b6:c8:6f:c0:8c:e5:bd:76:
36:cd:48:aa:b6:a4:27:d8:b8:fc:cb:bd:d2:79:df:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C1:85:88:E4:76:A9:1B:2D:C6:C7:61:E7:A1:E0:DD:3D:04:BB:B8
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e9:54:ac:30:7e:68:af:c9:c3:9f:1e:fc:72:b3:4e:41:42:
78:b1:29:c7:7a:e8:62:11:56:e5:44:6b:b8:0e:41:80:26:85:
cb:de:f0:be:74:fa:f5:c4:42:69:5f:27:26:d3:9a:a6:08:22:
ba:31:c7:89:78:8a:ad:fc:e8:a4:45:98:50:63:64:f6:6a:84:
8e:0f:2f:10:3f:81:eb:a2:90:18:89:dd:aa:f9:64:2b:1a:1a:
52:58:9a:06:19:e2:65:90:66:50:8a:9f:bc:4b:f9:c4:fc:f3:
fc:74:2d:23:f2:4e:53:ff:4f:ef:65:2d:04:2c:80:b4:22:b8:
30:de:81:5e:cf:fb:67:e1:ae:14:45:84:79:72:e1:da:7a:27:
24:ee:69:23:dc:2b:18:b1:54:e2:8b:0e:61:3d:5f:51:11:38:
b3:36:57:ab:b6:ae:dc:90:7a:4a:ca:75:50:ab:31:20:76:e5:
5a:eb:c7:b8:84:3b:87:b1:04:11:5e:8b:a6:b4:26:78:a0:f5:
7a:81:0a:39:ed:e3:30:e2:bd:26:c4:86:64:9f:fb:45:90:ff:
40:d1:14:49:f0:18:af:59:ab:04:6e:75:e0:cb:e7:d3:8d:f3:
de:6c:9f:b5:20:8d:a8:a2:d4:d7:36:f4:a5:06:d1:e8:9e:39:
03:28:68:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:40 2025 by rpki-client