Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: rBh84uv+2vzzZQ8IFgZ1GcwWMhz5wmYLdzODgFpoZJ4=
Subject key identifier: B2:42:A2:C0:7A:F5:0C:C4:3D:AE:D9:7F:16:30:B0:D1:5E:4A:96:64
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 0199FC58C43E891318FA6A9C699E276BA623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 017F
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: l1k7R5ihM61hgI4GUgR6mq0svv4+zq43vnDS1pGU8iw=)
2: FMCKcx7fWhXzjjbFaZ4QhxcZQKM.roa (hash: nneSSqbYCIwxXhIaxp0I37Ib18k8PhoGuSY/nOGzlpw=)
3: jWqrAUGc-QQna_az58FqrLx3KMM.roa (hash: IjB0FwqbEBc83dg3pquxXYEVYNlp7HB3DKdagqWmNT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c4:3e:89:13:18:fa:6a:9c:69:9e:27:6b:a6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=b242a2c07af50cc43daed97f1630b0d15e4a9664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:a2:2e:44:5f:39:5a:3c:15:a6:f0:8c:f2:
3d:03:e5:0c:fe:47:47:d2:17:d9:65:d9:2d:25:eb:
69:39:d8:c0:df:66:c9:75:c1:c1:36:35:f2:d5:22:
d8:22:44:8c:2d:59:eb:ca:71:61:34:bc:41:53:f6:
c9:41:10:41:cd:a5:00:1f:17:67:62:9d:eb:fb:92:
28:5c:db:8e:16:4e:e9:15:a1:cb:4e:7d:e6:ba:35:
1b:ed:ed:eb:bb:64:eb:54:0a:9d:a5:aa:81:b0:20:
82:d7:9c:c7:77:f1:89:4b:b8:51:df:73:ec:e7:c9:
c8:c5:4d:f6:06:f8:1b:ab:47:11:33:20:c5:0e:43:
07:a2:9b:e5:2d:d1:db:98:74:70:27:d1:fd:26:a4:
3f:e8:84:ec:34:d5:16:11:a5:54:a3:a2:2f:f8:ba:
c2:b6:c4:ee:bd:3f:4a:c9:20:b3:0c:58:f4:df:d9:
cc:ea:0c:18:bc:99:6b:d3:5e:ee:d7:c6:f0:9f:6d:
9a:84:3e:db:b9:ff:63:59:39:04:2f:5a:58:cf:0e:
5a:00:03:a9:7c:eb:36:08:49:ac:f7:05:50:f9:72:
62:47:b2:ab:81:14:13:23:40:5a:df:44:17:57:1e:
e0:67:81:c2:e3:df:6e:b5:86:b3:a1:6f:15:b3:be:
d0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:42:A2:C0:7A:F5:0C:C4:3D:AE:D9:7F:16:30:B0:D1:5E:4A:96:64
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9b:0a:28:be:03:ed:dc:16:82:36:60:d9:68:8e:8f:b0:5c:
7f:93:c2:d4:1c:b2:4e:f2:7d:f6:41:dd:41:59:89:26:f3:07:
ec:14:6f:96:41:c6:c8:85:84:a0:91:52:67:67:66:cf:dc:9c:
c4:5f:a6:67:bc:82:ce:0f:f3:8e:26:9c:84:f8:62:f0:1d:c2:
f2:bc:c7:05:ef:37:aa:8f:32:91:89:88:53:c1:ae:44:b9:dc:
fe:70:3f:18:cd:69:4a:f4:3c:8e:3d:86:30:3e:6d:91:69:73:
6b:74:ce:f4:e9:e6:ea:73:cf:5d:b5:ef:78:60:e1:a4:8b:83:
76:10:ef:80:fe:e4:5f:13:9d:66:f4:d8:7b:7a:75:68:97:8d:
34:cf:02:55:50:d9:17:93:4e:2f:dc:d7:24:11:7a:c7:c7:c7:
c1:e7:7c:7a:e0:38:31:70:e7:4f:14:82:84:59:14:5e:43:8d:
8b:45:66:90:c6:f3:da:c3:ad:c5:db:83:ba:e2:bc:a2:1e:4f:
2c:19:f7:b4:91:cc:ad:d1:74:a4:a5:3d:72:a6:fa:e1:2d:e8:
37:b0:32:7f:7a:03:7a:86:71:93:9e:1e:fd:32:8f:0f:1f:b0:
8e:08:e6:32:a2:93:85:41:26:60:45:d6:71:02:ed:da:e1:1f:
c7:da:61:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:18 2025 by rpki-client