Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: dW0KTUbhU+lXgEoXJ5zWaQmn86Ju7h2Uj01cqHjVrjo=
Subject key identifier: EE:52:A8:E6:9A:93:2B:8F:CF:A2:42:81:68:44:27:31:7E:11:47:FE
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 0199FDDA28888AA8089F2ED5843122CEEC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 05B8
Signing time: Sun 19 Oct 2025 19:02:36 +0000
Manifest this update: Sun 19 Oct 2025 19:02:36 +0000
Manifest next update: Mon 20 Oct 2025 19:02:36 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: 7+mIuyfZJs2/1f2DfCwuBY+i4GNQjvYJ+qu6oc0dfc4=)
2: Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (hash: zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:28:88:8a:a8:08:9f:2e:d5:84:31:22:ce:ec:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Oct 19 19:02:36 2025 GMT
Not After : Oct 20 19:02:36 2025 GMT
Subject: CN=ee52a8e69a932b8fcfa24281684427317e1147fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:63:68:79:8b:5e:94:ad:0a:46:86:be:26:
51:43:06:09:dc:4d:32:51:44:65:4e:3e:06:a4:f6:
24:5b:00:f7:16:ee:85:e2:88:14:89:76:93:66:6b:
b8:8e:ef:a4:25:ec:06:cc:8e:e5:ac:ec:4f:9b:6f:
a1:0c:7d:48:ef:4c:f2:08:62:de:b3:3f:af:51:66:
a2:06:b0:e2:30:63:7c:af:9e:b5:cf:31:48:86:97:
9f:df:1c:ac:93:92:0d:ec:46:bf:ac:7c:6e:3d:55:
a8:8e:ca:92:c1:a1:90:a6:1c:85:fd:b4:13:fb:88:
e8:a1:4d:03:58:24:63:52:0e:1a:52:e7:56:cb:bc:
33:98:b3:f0:6c:ba:e5:c5:07:84:34:71:43:7f:21:
1d:8a:c8:23:db:00:b1:ea:49:40:af:44:58:54:cf:
22:1b:de:d8:fd:e6:1d:c0:cc:93:60:ec:d5:90:0b:
f9:89:83:3b:bc:ef:80:76:c1:44:91:84:5a:98:ad:
04:2c:7e:6e:39:1f:9a:84:19:32:a8:94:71:7a:4f:
a8:03:d2:f4:4b:27:10:77:64:ab:9b:4b:7e:f1:84:
24:95:4f:15:bf:46:eb:be:60:df:95:a5:39:fb:d0:
b7:4a:d8:ac:fc:d0:67:ab:0c:05:43:b9:60:01:08:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:52:A8:E6:9A:93:2B:8F:CF:A2:42:81:68:44:27:31:7E:11:47:FE
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4b:8a:6c:56:d7:5a:b5:0d:52:48:cd:38:08:5d:59:0a:ed:
bc:ae:06:18:e1:04:20:01:69:4d:88:a9:f0:0d:54:d6:02:3a:
8e:5e:d2:6f:e2:35:21:9b:a8:32:d3:d3:be:5b:a6:34:8b:86:
0f:77:b1:d2:18:3f:82:8f:d6:89:32:0c:34:28:34:8c:2e:8c:
c9:8d:e1:99:78:82:a5:e2:f3:18:71:79:0e:37:eb:12:ba:6c:
f4:70:bc:e5:5b:16:58:4d:b9:c3:70:12:f9:41:17:7a:ca:bf:
f1:38:6b:59:61:af:e4:29:7b:e8:2c:ff:3b:ca:4c:00:b9:47:
3d:80:b4:07:2e:a9:6c:c4:da:7c:c0:63:c8:34:3a:c4:58:40:
6b:44:c5:2c:1d:4b:95:ed:e4:bf:e0:f6:20:c8:a6:09:ae:bb:
62:7c:ab:86:b7:74:64:5d:49:38:dd:e8:01:63:59:8b:61:b7:
94:39:94:cd:46:2c:57:c3:fa:4e:58:01:9e:c1:4a:dd:d1:dc:
1a:eb:38:be:65:d2:e4:2b:b5:a8:2b:0a:eb:df:7c:66:b0:67:
d5:61:d2:32:56:c2:cd:99:a6:df:aa:80:73:21:47:5e:fa:40:
47:c0:d5:c7:4c:a5:0d:fb:24:fa:4f:d2:d3:3a:77:d0:c0:23:
19:1d:b8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:13 2025 by rpki-client