Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json)
Hash identifier: /BuAmQuBm5mpw5mV4hNRHuwZohp1mSMXcGe0LQh+y8s=
Subject key identifier: DF:14:9B:FA:D2:4B:9B:F1:71:81:78:23:C5:78:EC:CA:A2:19:F5:70
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 0199FCFD9156B3E098A76658F9D1A83B7776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
Manifest number: 14A6
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: AZyaQrocFmPLy7GgLq+gtsNu034/8v4fhYUdTwf7KUA=)
2: FjL5MqcK0dv0phSETNIP5t1SBWg.roa (hash: HghvVzu9hsO9wX3NaFq2EgUKtQhDl/MHwAlkrJlofBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:91:56:b3:e0:98:a7:66:58:f9:d1:a8:3b:77:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=df149bfad24b9bf171817823c578eccaa219f570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:f2:2a:8f:a7:6e:12:68:73:8a:1f:5b:96:
63:d3:33:77:ec:af:cf:7f:52:31:0d:e0:4c:31:50:
f5:6c:6b:43:a4:0f:ef:59:c3:fa:4b:26:3d:74:9f:
9d:32:99:69:ee:a3:e3:99:04:89:5c:e2:84:e9:56:
ce:29:c6:9a:83:56:91:68:8a:ed:b2:eb:89:ba:71:
86:9b:3d:58:cc:ef:08:ac:97:9e:17:97:8e:29:6d:
6f:59:09:f7:6c:37:b0:3c:0b:b3:de:fa:f1:c0:f8:
b6:55:ff:af:6c:fb:78:e2:5e:62:b3:96:16:c9:48:
97:37:87:83:60:80:77:70:f4:7e:95:3e:97:41:ae:
2d:eb:bb:a9:22:70:23:cb:58:b6:2d:dc:02:0d:3e:
d8:c4:e7:fa:34:ae:84:d7:bb:34:e0:2e:af:cd:60:
0b:3b:72:dc:6b:e4:15:13:fe:97:b3:cb:94:66:7d:
e1:6f:e1:76:4d:a0:d8:23:87:5d:52:26:44:29:b0:
29:a6:66:9d:3c:db:26:ea:88:62:a4:a4:f0:31:50:
27:de:a9:7b:42:e7:bd:a4:71:b1:23:48:97:94:2d:
7c:5b:20:8e:86:a9:02:6b:a6:22:38:bd:b5:26:3b:
41:6b:fb:ab:b2:2d:3f:81:c3:d2:af:8d:c1:27:0f:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:14:9B:FA:D2:4B:9B:F1:71:81:78:23:C5:78:EC:CA:A2:19:F5:70
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a3:22:8a:31:02:25:b1:27:d1:a9:ee:8a:c8:be:1f:65:c9:
18:5a:59:4d:e2:70:61:e9:81:1e:57:ec:7b:d1:7a:37:29:e2:
27:36:f7:ae:10:f0:bc:38:54:1b:33:2c:47:18:ed:62:6f:9c:
5a:fb:8e:74:8c:87:db:85:fa:94:56:18:7c:80:cc:c4:72:08:
5c:d1:0c:52:d8:55:b5:c0:67:61:8b:8d:46:b9:a8:eb:4e:fa:
b1:46:da:5d:1d:60:10:f7:bf:a0:cc:98:69:20:cb:9e:68:4d:
f6:bd:b9:e1:27:78:1c:92:46:d2:d6:7d:33:0c:c3:c5:c9:45:
0e:5b:1d:d2:62:a5:22:59:9e:69:32:37:d2:d1:c7:02:1f:dd:
30:b7:5e:56:1a:59:c5:c6:d8:18:d5:25:6c:63:36:98:e3:b6:
29:a4:f4:02:90:ed:63:e0:4f:00:66:6d:0e:bb:0d:06:c3:02:
f8:30:d1:04:5f:6a:82:cc:5e:4a:e0:d3:92:24:33:2a:3e:69:
ee:e0:f0:62:c6:0c:4d:1e:50:4b:95:60:e2:50:50:cd:17:a4:
98:35:3d:0f:b4:2a:5d:07:e7:d2:25:6c:9f:d2:a1:9b:27:43:
63:93:94:dc:8c:0f:60:4d:88:67:c2:02:bd:65:a3:82:6a:54:
ac:83:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:34 2025 by rpki-client