Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: R7Y5JCRkf0iWZ7m/0njN56cqXaCSd84gHD5stK8zPI0=
Subject key identifier: 21:EF:E7:52:F9:94:85:E1:54:3C:63:72:11:23:88:29:8E:E9:F5:35
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 0199FD347EBD822848FB06E8E43A71CB7030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 16:01:39 +0000
Manifest this update: Sun 19 Oct 2025 16:01:39 +0000
Manifest next update: Mon 20 Oct 2025 16:01:39 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: Xl8vuNJIW+lJWEGsqY1ToXsz5uQNb8ThG+WmetIdsbg=)
2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:7e:bd:82:28:48:fb:06:e8:e4:3a:71:cb:70:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Oct 19 16:01:39 2025 GMT
Not After : Oct 20 16:01:39 2025 GMT
Subject: CN=21efe752f99485e1543c6372112388298ee9f535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:8a:51:b0:cc:21:d2:6b:07:69:c7:a7:05:
71:ae:38:84:45:5f:c3:5b:bb:9c:af:61:22:79:63:
e1:2c:a4:f5:7a:b8:30:de:af:91:ea:1e:81:0e:e9:
50:8e:6d:d7:9e:5a:6d:5a:1f:17:fe:35:5b:5f:18:
74:c1:33:44:07:ea:d4:cc:80:0a:4e:41:3d:bc:f6:
87:ae:01:83:b7:bd:75:d3:51:42:0f:a2:c1:c4:1f:
12:25:8d:2f:fa:60:0a:6c:45:71:dd:8a:20:95:e4:
2b:19:79:bc:82:75:51:16:c1:9f:69:8a:93:ab:b2:
44:60:8d:fb:b4:ee:38:ec:8e:e7:d7:c8:49:0a:77:
e2:67:57:f4:aa:09:ab:b5:57:aa:e9:89:ad:6d:ec:
1e:d8:93:8d:d7:ba:8b:08:f0:73:f5:0e:1b:6a:67:
1c:d7:58:95:24:2f:e0:40:96:e6:12:46:ee:35:15:
95:80:71:9e:11:20:aa:a5:46:e0:e5:9f:d4:0a:af:
86:08:da:3a:c5:fc:2a:fe:dd:b9:c5:6f:32:c9:38:
b2:d3:5d:76:2f:85:24:c7:a7:80:02:c0:4c:b3:62:
bb:28:43:2b:e2:7f:cc:3f:ca:30:98:e4:46:4e:b2:
06:a0:36:2b:8d:d7:aa:c9:70:0d:86:27:db:b2:fb:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EF:E7:52:F9:94:85:E1:54:3C:63:72:11:23:88:29:8E:E9:F5:35
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:79:80:5b:41:a2:e2:5e:79:61:27:28:e3:fd:7c:f7:39:bb:
0d:a1:66:ee:d7:0d:56:98:30:61:a6:a8:70:96:df:5e:6e:19:
b1:d4:19:ee:54:b4:34:ef:1e:0f:41:e7:eb:45:2b:15:9d:3b:
bf:eb:fa:9b:c0:77:a9:be:60:a5:1c:87:7e:dd:d4:3a:8a:c8:
af:a5:77:c3:17:03:13:a2:ea:19:c9:4c:0e:f5:53:ad:8c:d1:
b8:4b:86:1c:f1:fd:d6:ff:e8:df:51:ff:5e:ff:b2:5c:2e:dc:
31:be:5a:c7:b6:29:f2:88:e3:fb:91:64:d5:41:26:52:43:8f:
be:4d:3a:cf:bd:e8:b9:1f:4d:02:0f:f3:0a:04:7e:b1:70:03:
0a:d4:46:9f:de:ff:c3:3a:0d:9f:cd:48:76:76:3c:ea:04:ee:
7e:ec:75:ae:87:2c:15:a5:fb:eb:c2:76:dc:34:ea:73:7c:fd:
4a:be:7d:6f:ed:c4:a5:30:5d:67:ec:46:18:f2:20:46:c4:aa:
77:08:54:49:b2:75:3a:74:86:72:7a:f4:41:34:e4:81:7e:08:
93:3c:57:90:25:91:2f:e5:fe:2a:61:26:40:75:20:13:53:23:
2b:1a:96:c5:04:58:1e:51:0b:3f:9f:f9:8e:93:94:59:01:13:
64:53:76:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:41 2025 by rpki-client