Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
File: 2BFKkiBvChn3M52guJZpxKX-Urk.mft (raw, json)
Hash identifier: 2TPHVCzZo58EadWwNpT4Cbvgm2S+beH9woAwWUCc1NA=
Subject key identifier: 62:07:2D:CA:2B:57:4F:BB:5F:76:07:11:2F:4B:70:F8:49:D9:45:ED
Authority key identifier: D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
Certificate issuer: /CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Certificate serial: 0199FC8FB7E8E6F26F5C00158FECF5BE9200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
Manifest number: C4
Signing time: Sun 19 Oct 2025 13:01:41 +0000
Manifest this update: Sun 19 Oct 2025 13:01:41 +0000
Manifest next update: Mon 20 Oct 2025 13:01:41 +0000
Files and hashes: 1: 2BFKkiBvChn3M52guJZpxKX-Urk.crl (hash: OYurAZsamp4cbjz+Zb8A8xssjFVt+C4smu7sRn7TQ/E=)
2: G9oTd4bBpmlm3pZMn3YyyXAVIyI.roa (hash: XC2pyO3ZNZCKadVf4J0EDWPKrfSqScmOhmM8oMNNkCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b7:e8:e6:f2:6f:5c:00:15:8f:ec:f5:be:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Validity
Not Before: Oct 19 13:01:41 2025 GMT
Not After : Oct 20 13:01:41 2025 GMT
Subject: CN=62072dca2b574fbb5f7607112f4b70f849d945ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:a9:eb:ef:70:1d:53:44:47:f4:12:0c:2a:
aa:81:0d:fb:f9:1e:63:b4:ec:ee:d2:f2:ba:bc:5f:
62:98:07:e4:17:e7:6f:8b:c2:ad:03:c0:b6:69:f0:
a5:26:cf:c8:f0:e0:d7:c2:31:6e:55:8a:a4:ec:9b:
c4:35:eb:4a:48:30:c0:ab:51:fc:ab:b2:5f:23:ea:
02:c7:73:7d:a1:ee:97:bd:7e:35:bd:bc:e4:24:74:
c7:d1:56:01:82:dc:80:2b:3e:bd:df:da:1e:8b:29:
a2:ac:ce:a5:4f:38:3c:06:ee:7b:2b:5f:17:69:73:
2b:9f:dc:de:39:5e:da:b8:e0:71:e0:a7:cd:44:c3:
ed:6b:9a:a1:ef:db:38:be:59:77:c5:39:8a:05:ef:
73:e4:37:30:7f:1d:62:13:3a:75:9c:83:71:41:6b:
f1:d1:c6:c3:b5:4a:bc:7e:14:0f:6b:03:82:36:11:
af:55:1c:6a:fd:0d:ec:2b:29:cd:e9:89:2a:eb:8c:
8d:52:22:4e:52:e1:ae:81:3c:0a:63:d5:d0:98:d5:
54:81:dc:d2:87:92:97:03:a2:1a:68:6b:df:90:d4:
63:92:cb:98:94:cb:cf:c1:0c:8f:44:68:70:24:39:
a3:41:ee:ea:aa:b3:06:6c:9d:61:67:e3:8b:4c:75:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:07:2D:CA:2B:57:4F:BB:5F:76:07:11:2F:4B:70:F8:49:D9:45:ED
X509v3 Authority Key Identifier:
keyid:D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8d:97:7d:04:97:11:14:19:f9:45:10:5e:00:27:7c:35:27:
41:7c:1c:41:6a:e9:e6:de:f5:b8:aa:5e:a6:20:93:20:d0:98:
90:e5:94:9b:3c:b0:97:14:d8:7a:b9:65:0f:90:33:9f:dd:6b:
56:0f:db:7c:49:13:38:43:e9:4d:f9:75:c9:ee:b0:c5:0b:8b:
da:1e:b9:1d:fc:ae:18:d5:cf:e6:90:42:67:be:af:b3:a3:17:
ff:de:c1:c1:35:0f:bf:21:a6:46:f1:22:95:16:58:ff:6b:5c:
3f:68:c5:42:9a:4f:ba:fe:c7:4b:8b:cc:c6:46:42:13:ad:a4:
0d:cb:7a:73:e1:d3:f7:db:3a:16:4b:4d:9d:f7:e3:5a:e0:c5:
6f:77:43:82:a4:8e:22:18:cc:37:d6:ff:4e:5f:27:d6:df:01:
32:cd:58:84:53:c9:09:aa:87:4f:ee:cd:c8:c6:7f:fe:30:f5:
e0:9a:a6:be:cd:b9:ab:c1:9f:8c:fa:fc:ec:ce:72:05:7b:99:
55:1d:24:2f:d3:49:81:c3:32:88:09:7f:a6:6e:1c:e4:f2:27:
22:b3:14:6a:e1:fa:1f:fc:49:17:13:f0:36:d1:0c:76:3a:a7:
83:57:36:40:0f:23:3e:0e:f9:4a:48:e6:b2:0e:1e:76:06:bf:
0f:fb:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:59:59 2025 by rpki-client