Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json)
Hash identifier: nSztgsjrtjfMh5oJRZH9Xop/qXOYROtrT9TYW0JMSe4=
Subject key identifier: AD:61:9A:92:A5:F9:4F:DB:EB:07:FC:36:1F:28:30:E2:B8:D6:C3:A8
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 0199FCC6C561774C8ECE2A22C83C52ABEAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
Manifest number: 0A28
Signing time: Sun 19 Oct 2025 14:01:49 +0000
Manifest this update: Sun 19 Oct 2025 14:01:49 +0000
Manifest next update: Mon 20 Oct 2025 14:01:49 +0000
Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: nvu6S1cTOfvSeXN6Is7P7pPC0SskIuUSmRH8zRDsZNM=)
2: bNv8eusD3Csjo1u3iFVspzQvWAc.roa (hash: GAiEsWZddqBZP7L/gvAH0WfEgVNJ0dl2gxsvC2wdCyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c5:61:77:4c:8e:ce:2a:22:c8:3c:52:ab:ea:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Oct 19 14:01:49 2025 GMT
Not After : Oct 20 14:01:49 2025 GMT
Subject: CN=ad619a92a5f94fdbeb07fc361f2830e2b8d6c3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:0b:54:55:4d:1b:5d:cf:3f:2e:9d:78:9d:
31:4a:92:06:06:b7:50:4a:ee:a5:e3:4f:99:e3:84:
7c:9a:d2:0b:b4:28:9c:8c:16:b0:af:a5:aa:95:4f:
ab:ed:71:3a:3d:0f:e8:f4:0e:48:ec:3f:2c:d7:19:
f8:7d:24:bb:67:11:48:b9:03:83:89:47:61:51:fc:
07:20:ea:5e:bb:98:8b:f8:52:47:68:57:62:40:06:
6e:09:db:13:0d:21:c3:1f:11:16:0a:d0:43:fa:8c:
cf:75:66:4d:7d:87:95:1e:c7:47:4e:56:f7:c0:ed:
e3:c7:2d:bd:e8:6e:82:60:40:f2:55:be:fb:a3:c5:
9b:bf:be:d8:4b:62:36:4a:58:9d:2a:12:fe:3a:db:
a7:4a:0a:a1:07:bd:7f:f6:0f:52:82:3f:1c:d6:8a:
0d:ed:0c:54:2a:a9:23:4f:9e:52:00:75:7c:11:cd:
34:dc:c3:15:df:e3:74:a9:cb:d9:4b:b5:ea:7e:18:
53:63:84:54:dc:a0:6d:32:6e:f6:b0:14:fc:b6:b1:
19:54:80:32:58:15:2e:f4:ef:4f:59:93:9e:b6:cf:
fa:22:9b:d7:22:35:71:57:e1:3c:ac:21:47:cc:91:
a8:c6:2e:c2:e0:87:12:3f:b5:39:b6:a5:95:9e:db:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:61:9A:92:A5:F9:4F:DB:EB:07:FC:36:1F:28:30:E2:B8:D6:C3:A8
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d8:67:f3:13:67:6a:c6:55:72:b3:8d:27:cc:8e:fb:76:e6:
48:c7:96:df:bf:32:dd:d1:71:06:70:3d:9f:03:d5:95:cd:01:
4f:bf:cc:64:6e:3c:e3:8f:6c:30:77:26:11:0d:be:7f:8f:f3:
43:cc:5f:15:15:49:5f:2d:7b:80:9c:fd:74:3b:56:b1:89:a2:
1e:97:c9:06:ae:b4:95:39:9b:3a:35:f4:53:17:e9:7b:14:24:
a4:e2:89:b5:d5:c3:d9:43:8a:2c:db:32:34:cd:d2:e3:ae:f7:
21:b4:4c:32:72:17:9d:b0:9f:c5:bc:e3:40:dd:31:a4:71:4b:
3c:31:fa:0b:c0:ef:95:1d:38:dc:b4:14:41:7b:0a:f1:2e:5f:
46:23:16:8b:86:4a:66:64:36:7a:9a:10:b2:a4:11:e2:74:5d:
9c:60:65:8a:e3:1a:db:11:76:05:1f:4b:5b:2e:fd:7f:b1:ca:
65:f1:b1:b2:95:50:44:e2:56:06:69:b0:19:aa:66:ac:03:db:
94:16:b4:b6:f0:95:ce:72:88:46:77:3a:78:bf:3b:7c:7e:21:
6c:6b:52:cd:cd:ef:fd:ac:2b:4d:1d:18:3f:c1:5a:de:e2:a4:
bc:57:81:09:c8:70:9f:50:d5:46:4d:fb:86:a4:fa:b8:c7:a6:
70:7a:9f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:51:38 2025 by rpki-client