Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: zqR98+TQCH/Q464L3jtDsUEypXzIljLmYSZLZUv2Jyg=
Subject key identifier: 41:A4:A0:CB:35:27:C1:29:35:0D:0B:B1:D4:0B:65:E0:DE:F9:2F:20
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 019A0592E5B3F0ED6255F8E2DAB9D3CC8021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 16EB
Signing time: Tue 21 Oct 2025 07:01:44 +0000
Manifest this update: Tue 21 Oct 2025 07:01:44 +0000
Manifest next update: Wed 22 Oct 2025 07:01:44 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: yWddfeggKGuzzOcdblmztHEy7aOxhRnHqtXec4mYJs8=)
2: Opo6TZ7VAy-hV-S-P53LcegXaxc.roa (hash: MyJ/vgGQynDRrxnXXTkth9TEVuUomwtY2khOCP3bmmU=)
3: RwRIIbsLE86bb0oQhRUjsIS4XoM.roa (hash: jROP5D4hIhexItED7utuAARdvaeH9hA5+gFDvAsHFLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:e5:b3:f0:ed:62:55:f8:e2:da:b9:d3:cc:80:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Oct 21 07:01:44 2025 GMT
Not After : Oct 22 07:01:44 2025 GMT
Subject: CN=41a4a0cb3527c129350d0bb1d40b65e0def92f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:58:12:c8:71:0d:6c:dc:9b:a6:d9:5e:5a:
2d:9f:e5:9f:28:c8:21:52:d6:55:f9:f7:18:df:c2:
93:04:25:86:d2:4b:f5:ab:bc:59:b4:86:af:f3:82:
fa:ca:06:55:60:1f:2a:b7:c0:3e:91:07:18:8c:c9:
4c:3c:a7:50:b2:d8:f5:43:d7:19:47:8e:68:44:a1:
b4:e4:1f:c3:9a:e0:35:88:82:d4:92:20:5b:d2:24:
be:1d:9c:da:97:70:31:60:9f:f1:51:fc:15:40:48:
3d:81:5c:bf:f2:7a:c0:e4:45:59:97:9d:0d:76:b6:
dc:96:22:7d:da:2e:b4:af:45:43:00:cc:97:13:ab:
df:93:af:b0:60:23:64:a1:b7:12:01:dc:d9:7b:6b:
7b:ed:07:01:4c:a2:53:ca:7b:fc:e9:8a:33:e8:c6:
7b:a0:a3:53:5a:36:54:44:9d:b1:e5:65:33:1d:05:
40:db:1c:6e:33:36:15:fa:a3:53:9e:c4:6c:74:d4:
71:95:ab:da:2a:fc:af:b9:29:20:98:aa:24:e9:36:
c4:26:3e:77:b3:c3:25:7f:6c:02:28:98:07:dd:f1:
e7:37:ae:34:c4:36:7a:47:fe:c1:a1:b1:ba:53:58:
0a:bf:17:22:5a:df:73:b3:3c:4b:09:f5:44:fc:8c:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A4:A0:CB:35:27:C1:29:35:0D:0B:B1:D4:0B:65:E0:DE:F9:2F:20
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2b:14:ac:ec:cf:ad:ae:05:a7:83:02:b7:1c:12:43:00:01:
28:b0:97:9a:37:89:d3:03:95:d8:fa:e7:77:6d:e2:09:76:78:
c4:97:54:8e:6f:33:b9:52:62:40:30:a1:45:75:ee:71:61:89:
a6:39:fb:fd:06:c1:ee:32:83:17:99:e7:aa:48:31:e0:03:4d:
4d:c9:b8:a9:ec:09:5a:d2:bd:81:f8:84:63:40:94:df:df:db:
27:e4:9d:22:e1:6d:ac:c3:e4:d4:dc:4a:ff:fd:1a:60:82:a7:
3e:2b:82:1f:73:2b:31:b3:ea:8b:2f:a9:3b:d8:84:6a:33:6c:
2e:c9:89:4b:90:58:87:ee:7b:17:3d:82:a8:3d:7a:32:85:11:
d6:9c:bc:8f:71:06:8b:f0:42:75:c1:bc:a8:c9:9e:12:4f:8f:
01:04:b3:58:40:63:e8:fb:62:fd:85:93:8c:e1:60:83:5d:4b:
c4:43:39:91:16:d9:cc:aa:f0:21:b7:90:80:2d:2b:f4:8c:f8:
4c:a1:e1:36:14:d3:77:57:b5:7d:e0:de:a5:94:12:e8:cf:dd:
44:db:2f:58:ff:ef:e3:c2:07:ec:bc:31:8f:7c:d0:70:7e:a4:
f7:39:98:7e:0e:7c:5f:f7:98:38:ca:f5:25:5a:7c:5a:69:0d:
62:77:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:51:23 2025 by rpki-client