Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: MoeaLpWMs8KzpDPYEKnUOTSvBOsmhnNakepoC274dZk=
Subject key identifier: E9:5B:CE:D9:08:03:F8:A4:57:49:A4:7C:D5:3D:2D:C7:56:65:49:B3
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 0199FC8F82C29E1D659EC7AB6699872A9177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:27 +0000
Manifest this update: Sun 19 Oct 2025 13:01:27 +0000
Manifest next update: Mon 20 Oct 2025 13:01:27 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: eTuJC5zKiBTS9r0rAkpyTzJZDpyPfaDE9Ef6sRikNvI=)
2: WsuMLx8hOYo9zbhOH79qMxC9w1o.roa (hash: cB8DG/oK3A/ZTuFz/7P7kYL4Kctl8w+rRh6Gw20a3lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:82:c2:9e:1d:65:9e:c7:ab:66:99:87:2a:91:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Oct 19 13:01:27 2025 GMT
Not After : Oct 20 13:01:27 2025 GMT
Subject: CN=e95bced90803f8a45749a47cd53d2dc7566549b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:e3:69:61:1b:dd:e1:67:55:45:b4:07:31:
c0:93:3e:dd:30:03:2d:5d:ee:3e:91:fb:5d:ba:9b:
d5:02:84:4c:7a:49:8a:8c:55:2f:9e:b6:00:e4:af:
4e:75:11:d5:6b:52:df:32:85:db:72:08:6c:f5:87:
f4:5d:4f:13:0f:26:a6:5f:5a:81:b5:1e:e1:87:08:
15:24:3d:f4:f8:fd:cd:14:b7:ac:d0:f6:7d:da:9b:
80:49:5d:1c:b2:75:24:14:dc:a5:4a:b7:fb:aa:4a:
9e:ec:87:b0:a0:57:63:da:75:c5:9b:f5:07:52:61:
18:40:1f:ff:b5:0b:ec:5b:4c:2e:97:69:4f:f8:1e:
a9:b9:19:f9:3d:4d:a0:47:46:10:6e:9b:97:0f:32:
2d:ea:fb:2f:51:aa:ee:c9:10:bc:c8:4c:c6:1b:44:
6c:89:ec:5e:33:1f:0e:f3:28:93:0e:56:93:5f:bc:
42:81:1b:13:33:8b:b4:90:b2:35:e4:a6:f5:7c:70:
25:ce:65:47:7e:16:da:cb:56:46:f7:9b:af:ca:d7:
17:33:88:76:48:95:a5:ef:cb:ae:38:39:cc:ed:90:
70:1d:c0:8c:f5:5d:ea:8b:d6:26:31:0d:15:a9:05:
0e:ea:20:de:ee:ba:a1:a3:73:65:eb:e7:ba:0a:f9:
f2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5B:CE:D9:08:03:F8:A4:57:49:A4:7C:D5:3D:2D:C7:56:65:49:B3
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:87:73:ec:af:97:44:2f:fe:95:3f:99:2b:e0:e0:f5:fa:50:
8a:f6:fc:26:38:fc:d1:a3:cb:4f:71:0a:f3:43:d2:51:8d:21:
01:07:20:54:fe:dd:72:32:fa:6e:62:e2:c5:bc:0b:bd:ab:9b:
c1:ed:04:52:55:b5:4c:dc:3e:8b:48:2e:c9:f5:39:e5:49:49:
e8:ea:6a:ac:56:ba:a1:78:62:f2:a8:ce:30:aa:3c:bf:4a:ad:
24:c2:b4:a4:ee:09:db:61:83:fa:78:0e:e6:b2:e1:5c:11:f0:
2c:c8:54:ce:5b:2f:d9:b5:eb:c1:ee:38:ca:2b:0f:f0:1d:55:
c2:ab:08:9d:b1:76:f8:0a:49:95:43:1a:9b:a8:dc:8c:29:3c:
2b:ce:3f:35:9c:53:33:4c:1f:63:80:d9:66:7f:e8:8c:86:77:
b4:07:6c:73:38:66:8a:f4:70:d7:86:2e:70:04:72:09:0f:a0:
45:f2:35:80:55:80:e6:10:bb:9d:98:53:ac:ae:8b:f4:0e:79:
55:3f:3c:46:80:1a:70:0a:c6:e5:95:a5:b3:fe:f2:89:28:ad:
c2:95:e3:58:76:be:cd:20:5b:bf:71:3c:aa:9c:dd:9d:0c:06:
4a:13:d4:62:77:9d:74:ac:9e:95:c4:ac:1f:84:50:da:7b:8c:
71:7d:7e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:48 2025 by rpki-client