Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: hEixUoqpnFbejGuEcfbfxjYxjuuYhskH2MC4rgagyrE=
Subject key identifier: AC:7A:99:BB:C5:E4:57:76:5B:BD:6C:B7:03:19:C5:7E:CE:5E:E7:AF
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 0199FEB4FD0856A549F714B3B41A422C0223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 15A9
Signing time: Sun 19 Oct 2025 23:01:37 +0000
Manifest this update: Sun 19 Oct 2025 23:01:37 +0000
Manifest next update: Mon 20 Oct 2025 23:01:37 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: 2wzCXYD0A4L5QhtVghVuSgWiaHy3qTCVA0okXZLaFLU=)
2: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (hash: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=)
3: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (hash: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:fd:08:56:a5:49:f7:14:b3:b4:1a:42:2c:02:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Oct 19 23:01:37 2025 GMT
Not After : Oct 20 23:01:37 2025 GMT
Subject: CN=ac7a99bbc5e457765bbd6cb70319c57ece5ee7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:94:ad:0b:c5:c1:47:89:8d:f7:da:8c:45:
d5:83:92:63:d6:6f:f1:75:de:21:6e:f3:fd:c0:e3:
28:84:18:64:a3:5b:4f:0a:4e:c3:50:bb:da:05:cf:
5d:93:35:ad:1d:44:dd:e3:c7:95:a7:82:72:f3:fd:
8d:eb:7f:20:21:da:19:14:42:59:a6:f6:18:80:7e:
99:31:c3:1a:78:eb:8b:99:8e:23:a6:9b:d2:96:e4:
a0:3b:40:74:dc:3d:63:1c:42:96:fb:be:0a:6e:db:
57:b3:77:60:45:12:c4:eb:12:ec:df:8e:ae:d6:e8:
b9:16:c9:f7:fa:91:f1:99:06:97:8c:23:6d:87:88:
23:52:b7:8f:26:d4:e4:87:c9:96:66:2b:cf:70:a0:
1d:da:4c:83:37:52:43:87:03:8c:7e:d6:84:df:11:
e5:ed:22:c0:cd:f9:70:e8:ad:91:eb:d6:46:ca:a1:
94:b7:4f:a9:84:5d:2e:1e:ce:1f:6d:b9:1c:c4:87:
c6:5c:e3:5f:74:d1:69:7f:d9:59:85:8e:bb:4a:15:
58:93:c4:4b:5e:f0:92:06:c6:41:48:1d:36:1c:ed:
c7:1b:49:ed:2b:60:2a:da:7e:9d:6a:b8:50:76:51:
f3:6d:fe:c5:15:61:39:bb:ac:c3:20:8c:21:35:d4:
6c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7A:99:BB:C5:E4:57:76:5B:BD:6C:B7:03:19:C5:7E:CE:5E:E7:AF
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d5:65:ac:96:f0:86:e6:40:2d:c4:22:3b:88:27:a9:d7:63:
d4:1e:c4:1a:2e:79:f3:c1:f5:44:3d:d5:bf:40:70:41:0d:2f:
56:7b:09:bf:f2:49:e0:74:30:59:eb:1d:fb:d9:39:10:bd:20:
35:8f:7f:46:44:79:b9:85:4a:93:f9:07:ab:de:dd:17:b5:8f:
ec:cc:1c:ad:04:b8:ec:33:3e:1e:93:46:c3:09:90:d6:b3:cf:
13:c4:e5:07:4d:9c:d0:8e:7e:89:16:b2:17:d6:45:74:7b:5a:
ca:7f:d7:c6:52:d5:02:c6:8f:6b:09:73:4b:ab:a9:3d:05:e8:
7e:89:10:03:01:fc:ab:6c:b9:86:af:ce:31:e9:38:53:e7:5d:
26:5a:12:b5:2c:1d:45:6f:a5:43:77:d7:85:ad:d5:31:0f:52:
9b:88:4b:9e:32:8a:3f:d6:02:15:8b:95:11:34:b2:2b:4e:df:
cb:0d:48:4b:db:64:d1:59:2a:05:b0:cb:1e:37:72:f1:8b:f3:
9d:c0:d4:33:14:19:f9:29:84:df:79:75:4f:04:aa:bf:0c:9c:
55:14:4d:91:71:36:57:9c:11:eb:2d:25:90:93:29:7f:70:42:
2f:7c:90:41:99:3a:11:36:84:d2:a5:16:a0:e6:33:60:cd:ce:
a2:66:53:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:34:16 2025 by rpki-client