Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: eZ3MRAgj0EPyxtRDGujDHvDcM29ohAjKWrS9evpV32c=
Subject key identifier: 21:EE:1F:07:90:6E:E9:BA:05:99:EF:FF:3A:9C:E8:A9:73:7D:FB:37
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 0199FBEAA2F408C8B553A5003C499D7F8CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 14B6
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: VJdx0Nd9oIRN2l2zCGnFNjENc05J0n6ghDoTEWD90QU=)
2: wHiz844bSnAZ4Nug3ceKjQdatmc.roa (hash: /mOXe5EHXrP0fFZ7gg8le5T3+NCaa6O//12eYo5yKX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a2:f4:08:c8:b5:53:a5:00:3c:49:9d:7f:8c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=21ee1f07906ee9ba0599efff3a9ce8a9737dfb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:ae:be:27:ff:24:71:2a:c3:90:5a:e6:bc:
40:33:b0:ba:a7:62:f3:88:4d:04:e2:e1:70:9c:3b:
bc:4a:b7:cb:0e:39:2f:15:d5:81:1d:39:c0:0e:ff:
b6:ee:5f:0e:58:67:ae:f9:e1:45:16:22:81:8a:0c:
42:7e:da:8a:dc:c1:b4:b6:7e:55:54:c9:97:b2:63:
f7:60:6a:fe:7a:ec:e6:cd:e3:8d:f6:12:99:92:d6:
9a:cd:bf:a8:77:c2:70:24:a7:01:5e:81:79:d4:a1:
4e:58:84:d1:b5:d2:3f:a1:ac:76:ea:31:89:4e:75:
c9:45:4c:10:1a:9a:7c:6b:95:05:17:cd:99:82:60:
0f:03:b1:bc:8f:36:54:38:76:7f:56:4e:a6:a3:89:
26:70:b2:14:a8:9f:d6:c2:dc:e1:00:c9:af:cc:fd:
67:8a:db:de:70:27:91:0e:b6:f2:b3:c3:e6:4e:49:
bf:22:fd:42:57:6c:e8:4d:96:78:aa:2c:a2:d4:25:
b4:f4:8d:d8:82:84:92:9f:76:53:82:0a:56:5f:02:
c9:6e:a8:d1:3a:22:85:97:e0:c1:7b:d2:50:db:ac:
da:22:70:e2:1e:6f:c2:bf:e1:cd:5e:42:e6:9c:21:
44:ec:c3:8f:d2:51:90:af:ea:a3:7f:27:a2:79:06:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:1F:07:90:6E:E9:BA:05:99:EF:FF:3A:9C:E8:A9:73:7D:FB:37
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:54:d9:90:db:9d:c7:36:22:4c:6a:aa:a1:0f:4c:82:cf:81:
2b:d8:80:a2:cc:cf:7c:dc:e3:9c:71:f8:47:1a:80:77:a4:28:
62:83:11:f7:56:29:0c:2d:d6:06:1e:ac:51:8e:6c:e7:95:d0:
ef:4c:12:6d:7e:ea:53:5b:9d:e0:51:a4:ba:c2:ff:9d:16:93:
ae:36:6d:29:f4:b3:db:e4:7c:99:eb:2b:db:d8:d7:11:03:d8:
b0:ac:cd:05:d3:75:02:c5:0b:04:45:08:2a:79:7a:99:6d:4a:
4b:e4:28:93:d8:a6:04:4c:ca:34:50:22:5f:0c:9b:52:b4:b4:
78:0b:52:c2:50:71:10:f6:f4:05:14:a5:52:ca:bc:ff:f6:a2:
df:8d:f9:39:61:a7:d6:12:14:72:15:f9:c8:8b:6f:5e:0d:24:
58:c6:38:9c:32:f8:47:73:df:97:68:48:c6:43:d9:28:8c:2a:
9f:38:dc:c7:55:65:1d:41:eb:a0:b6:6b:94:45:c7:5e:e1:ce:
e5:95:09:2d:56:44:3b:7a:15:61:29:d7:d4:55:98:ec:3e:af:
60:e5:6f:38:dc:ba:e8:a5:0f:4b:b9:3e:dd:5a:59:3a:28:6c:
a3:ec:20:65:79:dc:f1:49:dc:60:d0:2d:0c:40:b3:b7:de:25:
92:df:1b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:59 2025 by rpki-client