Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: qnpMLEJh918VSIIAU0r5qU/ERQT1TV3TaOXuzOMbZ+Y=
Subject key identifier: 08:49:1B:1F:7C:58:0D:84:56:ED:04:70:BD:71:C2:EB:49:94:A0:57
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 019A0035B4E701A7258EB7E3C15FD7E1C202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 06:01:50 +0000
Manifest this update: Mon 20 Oct 2025 06:01:50 +0000
Manifest next update: Tue 21 Oct 2025 06:01:50 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: +tEUaGLlyZ/rkAl/LIttd09ps9SVBI3AwqhLJ6AqFBI=)
2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=)
3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:b4:e7:01:a7:25:8e:b7:e3:c1:5f:d7:e1:c2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Oct 20 06:01:50 2025 GMT
Not After : Oct 21 06:01:50 2025 GMT
Subject: CN=08491b1f7c580d8456ed0470bd71c2eb4994a057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:01:2a:88:6c:55:fb:ae:72:5e:5e:4a:b4:
a6:1f:99:a2:1b:9e:6e:96:1a:1e:cb:1d:27:12:38:
a7:32:73:a3:86:3e:7c:65:14:34:6b:e4:18:7f:e0:
08:6c:7c:19:40:31:e6:a4:8c:bd:19:02:b0:00:37:
c9:8a:60:7f:ba:24:9d:b7:51:a9:2b:f0:6a:7f:11:
8e:f0:52:ce:5b:7b:23:a8:95:23:db:92:4f:84:e0:
4d:7b:b8:dd:ef:e8:af:b4:30:9f:99:c6:18:14:9a:
1d:45:95:ea:60:25:eb:d9:db:b1:95:25:2c:8e:df:
6f:4b:c8:6e:9b:41:67:34:f0:e7:9f:e6:1f:73:a2:
a0:5c:b6:b5:6d:06:f2:38:30:8d:26:d2:46:1e:0d:
96:b7:57:06:3e:e4:af:f1:b7:e7:89:7d:92:c7:c8:
ab:77:06:37:22:09:b7:63:c2:68:db:8a:e1:20:b4:
95:24:9a:f8:bd:5e:3e:4b:30:53:57:79:ea:58:02:
97:33:72:d1:bd:33:4a:ab:14:a7:d6:ce:ab:a3:b9:
3d:ce:57:8c:db:0d:8b:58:c2:d0:93:20:25:26:2b:
53:59:34:5a:ef:ba:5f:42:ad:58:29:d9:99:8a:8b:
33:50:12:96:38:df:a6:78:12:5d:fb:8c:6c:93:86:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:49:1B:1F:7C:58:0D:84:56:ED:04:70:BD:71:C2:EB:49:94:A0:57
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:15:a8:f6:af:5b:b0:72:b2:c2:63:07:68:4e:1f:2c:df:82:
ac:0e:89:e4:0e:e3:e1:2f:aa:09:ce:39:2b:1e:de:df:37:b4:
a8:72:bc:22:12:4f:76:59:2c:cf:8e:47:bc:3c:e5:4b:2e:64:
69:64:f5:90:3b:47:66:69:22:70:3a:00:03:45:63:a5:f1:24:
6c:dc:d0:5b:00:23:87:72:7e:89:93:30:18:58:fa:d1:5e:df:
5d:77:0d:f4:90:e8:85:66:3c:4f:6d:a7:87:d4:15:0e:6c:a4:
6a:98:19:23:9d:bf:d7:76:a1:90:98:66:d6:1c:92:d3:fe:f2:
fb:aa:79:49:b1:1b:6d:75:b0:db:b0:7b:ec:b2:93:d5:db:ba:
e9:48:15:7a:e0:8f:67:a2:c4:5a:c9:bc:6b:3c:18:fd:12:61:
6f:52:38:45:9a:44:6e:c6:71:79:88:ca:e6:e5:83:3a:81:d0:
ad:30:22:4b:0e:c7:c8:a2:88:d3:76:2b:3c:de:78:09:2e:5f:
03:92:4e:ac:6a:e8:95:39:1c:d2:6a:a8:50:4f:61:c4:5b:5e:
fe:da:08:f3:9a:9a:47:7f:ec:52:27:8b:4a:46:31:4b:4d:7e:
5b:33:97:6b:89:39:86:f5:ea:d7:f2:62:b0:42:95:ab:98:f6:
11:35:84:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:17 2025 by rpki-client