Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: Lpi/sMwiBsGJH0Dp5kZF+KpgABKVikufkvLQ1w82gfw=
Subject key identifier: E8:D1:4D:A0:26:CB:24:52:42:5E:96:16:74:A8:C9:BA:A6:6F:39:D4
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 0199FE7DC0CD4FB13A1521A505DF6BA85F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 13AA
Signing time: Sun 19 Oct 2025 22:01:18 +0000
Manifest this update: Sun 19 Oct 2025 22:01:18 +0000
Manifest next update: Mon 20 Oct 2025 22:01:18 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: VgVjQh9e09nrrSob3vqGagZ7jrQEvEvfKvU5azgt7Aw=)
2: 4udGWxGR-js2GEwlomwjvclAxHE.roa (hash: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=)
3: H7J8lcwk3WdhuKagL6mXekb371E.roa (hash: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:c0:cd:4f:b1:3a:15:21:a5:05:df:6b:a8:5f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Oct 19 22:01:18 2025 GMT
Not After : Oct 20 22:01:18 2025 GMT
Subject: CN=e8d14da026cb2452425e961674a8c9baa66f39d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:42:49:7e:ef:f8:f8:a9:30:c0:6d:7f:0e:
a8:61:4d:20:2d:c9:1e:44:1b:ef:31:0a:5c:b8:a6:
29:6e:08:78:12:a7:aa:03:63:0c:ec:aa:9e:2f:f0:
92:2d:32:f5:99:e9:dd:67:b9:c5:42:9f:49:53:1c:
ef:fe:b9:1b:af:4d:18:ed:b3:d6:7a:7f:43:17:4b:
b0:e9:9a:ad:06:88:83:95:33:72:f8:1e:4f:76:7f:
0d:33:9b:c7:4f:3a:2f:9d:7a:34:c2:d9:69:3d:0f:
c8:bf:db:86:8b:47:e8:b5:d4:af:71:b0:fb:12:d7:
3a:f0:dc:4e:c2:d6:56:a3:b1:43:b4:fe:ee:7d:76:
09:f4:e0:b0:1f:ad:e6:ef:ab:72:ca:a4:01:3b:ac:
1b:4e:79:22:12:57:58:f3:c2:ad:99:7a:0f:e6:fd:
45:d6:bf:98:2b:44:bc:39:15:a1:9c:c6:79:9c:1e:
83:05:50:43:df:3f:6c:0b:71:fb:cf:16:fe:77:8f:
7c:38:b5:82:12:c7:c7:aa:a3:0c:b9:b3:a2:f7:f3:
78:01:77:dd:68:10:a6:88:61:5b:c3:3f:89:93:65:
1b:dd:ae:2d:a9:e2:ca:df:25:0a:0d:d7:79:59:25:
b0:c3:ba:da:65:57:91:02:bb:84:ab:56:88:59:f7:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:4D:A0:26:CB:24:52:42:5E:96:16:74:A8:C9:BA:A6:6F:39:D4
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:eb:50:73:85:a3:a4:c1:ec:55:5e:1a:4b:58:b5:22:99:e7:
6c:77:67:34:bb:a0:5b:5b:75:44:5c:96:cf:2c:47:79:14:89:
53:ba:ae:ec:22:f7:7d:f5:ae:f0:be:87:5a:ae:5b:97:e7:17:
9d:79:da:48:2d:8a:9f:cb:40:d8:64:a0:3c:d8:1c:c9:f5:d5:
ad:9e:b1:57:3d:62:0c:ab:6b:ec:17:33:89:05:74:94:0b:97:
8d:e3:b9:d5:6b:68:3e:2e:49:a6:3a:9a:78:99:f5:3a:22:ac:
51:08:dc:55:70:7e:9b:2c:64:a8:01:69:d6:b2:af:ab:dc:82:
77:9f:11:ce:19:62:b1:4e:c3:b3:38:81:ac:96:7f:30:4a:ea:
fe:87:8b:0e:6a:ec:b1:70:a4:09:81:d9:ac:7b:e3:a9:87:4a:
9d:7e:c9:a5:5b:f0:9b:7c:0b:97:c5:7b:a5:52:6a:18:36:c7:
76:29:c4:99:db:22:21:a8:9b:51:21:35:da:8c:ee:a4:a7:f9:
a1:a6:f0:69:48:65:e9:56:c3:8a:02:de:8a:46:24:f0:ff:1d:
ba:44:10:60:be:5e:6d:07:05:31:8d:6f:72:58:fd:d0:fb:50:
d3:45:bd:a3:f2:ad:e1:95:6f:56:73:ff:6c:2d:62:b4:01:d4:
20:49:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:55 2025 by rpki-client