Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
File: 2PuW6jr1HFMtfo_oyUN29R4epAI.mft (raw, json)
Hash identifier: uEjpAP0QGN390TWPKgof9277pQgmvZPcU1qZkN65YO0=
Subject key identifier: 3D:2E:9B:C5:35:D6:A7:0D:10:96:E6:C7:43:60:BA:0A:38:80:34:BB
Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
Certificate issuer: /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Certificate serial: 0199FD3423317682915C5D4E27BA616C3953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
Manifest number: 1507
Signing time: Sun 19 Oct 2025 16:01:16 +0000
Manifest this update: Sun 19 Oct 2025 16:01:16 +0000
Manifest next update: Mon 20 Oct 2025 16:01:16 +0000
Files and hashes: 1: 2PuW6jr1HFMtfo_oyUN29R4epAI.crl (hash: YP9kS7RYnjWhI6PdQKSJ8dTWVZYXyHllduJD9XFwuU4=)
2: qvV18edZ4nG1g9Z6XFGjfB91HGk.roa (hash: xA0FHg4k3qhHIOcw440t6o/vgKfLrTtDa1pgd5bBDMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:23:31:76:82:91:5c:5d:4e:27:ba:61:6c:39:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Validity
Not Before: Oct 19 16:01:16 2025 GMT
Not After : Oct 20 16:01:16 2025 GMT
Subject: CN=3d2e9bc535d6a70d1096e6c74360ba0a388034bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:d7:14:f7:ba:ba:e2:99:d6:10:12:ee:a4:
6f:34:60:ab:2f:53:14:29:47:26:df:f4:40:b2:25:
1c:bc:1e:c4:1b:0e:62:85:c6:12:bf:1e:03:40:f3:
1f:d3:6e:85:14:00:86:e6:f1:62:be:06:8b:9e:87:
74:c3:d0:1c:1a:0e:79:f0:d0:eb:62:b1:db:f1:c3:
7f:dc:47:cb:13:64:df:a5:bf:1f:9a:3c:78:9a:23:
67:38:5c:68:26:08:ff:06:ad:2c:94:d2:d7:e7:02:
a0:1a:bc:aa:27:48:d5:cd:ab:96:e4:33:7e:44:18:
97:7f:ad:a2:dc:31:ee:07:56:9d:bd:51:08:dd:63:
9b:1a:ea:31:05:11:eb:61:76:8c:90:1b:0d:7f:28:
3f:d7:22:d6:a3:70:a2:5f:3a:3a:93:12:73:9a:9f:
3c:c4:83:44:6a:a7:50:e6:d8:69:be:28:45:70:dc:
a0:fd:58:14:1a:62:b4:67:c8:19:32:66:ba:ce:5f:
db:54:44:f4:65:9a:78:06:f9:16:5c:5c:44:ec:b6:
53:7f:d4:37:2a:97:7b:89:cb:12:f0:a1:75:f0:1f:
d0:25:02:6d:33:a3:f0:06:8b:fe:9a:c6:ff:e5:6f:
83:1e:c3:20:b8:3a:bc:af:75:6b:da:73:7b:66:40:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2E:9B:C5:35:D6:A7:0D:10:96:E6:C7:43:60:BA:0A:38:80:34:BB
X509v3 Authority Key Identifier:
keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:37:b6:f1:6e:ad:bf:e4:ce:4b:b7:27:ab:d9:1a:27:9a:02:
0e:ca:c8:47:cf:33:22:59:99:80:98:d3:e3:7f:1e:ac:a6:f2:
5b:1a:d1:9f:58:db:c7:ad:fb:20:6c:1f:a2:dd:11:24:57:4d:
4a:e2:0e:28:04:bd:a4:f4:56:bb:b5:68:0c:98:15:89:0b:e3:
fa:5e:5c:78:e4:08:10:c6:b3:2f:f1:b1:8f:42:80:da:56:5b:
05:f9:2a:23:ec:5b:28:e5:ba:9c:50:1e:e4:67:67:29:c4:88:
16:83:59:72:5a:25:88:7e:f7:f5:fa:c2:75:13:ee:f0:4d:61:
dc:3b:05:a8:71:02:02:fa:a3:4b:ab:c2:5b:6d:2a:0b:5d:45:
df:7e:cb:c7:69:00:9f:64:51:a6:4f:63:c4:e5:98:39:1d:b7:
b2:17:ca:97:24:41:d0:f0:0d:d4:da:f2:a8:ea:7b:3d:28:70:
39:f7:0a:b6:ff:aa:60:6b:8d:36:59:eb:ef:a6:79:38:8f:27:
d9:99:d5:b8:fa:e2:12:7c:64:56:09:af:4f:24:75:9f:49:4b:
8f:de:fa:7f:9a:3f:63:c3:3e:8f:be:3a:47:cd:7d:87:86:12:
1f:c7:78:93:7c:fa:1f:9d:9d:af:49:cb:96:f1:11:a9:46:a0:
9b:b1:d6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:37 2025 by rpki-client