Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
File: V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft (raw, json)
Hash identifier: gNO/XImRBt5FdkTFQJ9f2yGny7hvZgaCP1sguvOfufI=
Subject key identifier: 2B:DB:7C:B9:AE:52:D8:31:6B:CC:59:56:0A:BF:94:A9:75:F7:0D:0C
Authority key identifier: 57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
Certificate issuer: /CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Certificate serial: 0199FC218A0BED09F6B37ABD8FCF21B09A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl (hash: QGXMX2V+QSzRzHNmuddmWSWVgV9DasZ8JABV9kT52Yw=)
2: We1vlMV5F0WOOHhpojHWiZ1mpOk.roa (hash: kb4mbEAAu4J7YcsoL9X19jWq28MWG1KM2kpIpY/qIwQ=)
3: uXQZBDj9ZtkXG_83Mo1I8Z6Fydw.roa (hash: SGdXI5i5fIsWQdG6sYWkGmfc2P0KTqH/WAPHrOQF1V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8a:0b:ed:09:f6:b3:7a:bd:8f:cf:21:b0:9a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=2bdb7cb9ae52d8316bcc59560abf94a975f70d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:d8:03:2e:5a:c7:cf:2a:25:4a:9b:a3:d9:
63:d5:05:d2:32:a8:a0:03:f4:20:d1:74:01:d7:cf:
40:12:b2:1c:70:99:7b:05:89:cb:2f:c5:79:86:c6:
25:f3:b3:a2:da:e4:43:85:19:26:dc:c1:93:d2:56:
8b:dc:f1:31:cf:bd:6e:54:fd:e2:70:e8:0f:80:c3:
2e:7a:d4:a1:6e:8f:f7:7f:44:a1:cf:2e:21:22:aa:
a8:ae:61:97:49:ea:5a:7d:10:f7:f5:85:c3:44:ca:
09:3d:82:d0:5e:e0:34:b9:ff:25:5c:ad:95:2b:d3:
4d:0d:3a:76:61:ed:97:d6:6e:a4:1e:17:b7:45:19:
b5:38:b6:26:4e:94:c3:2f:db:6b:69:7f:9a:15:1b:
a5:4e:92:5e:95:53:11:bc:97:cf:24:8d:88:ad:23:
d0:d8:38:f5:2f:2f:de:37:65:d4:21:f9:f7:ba:74:
c6:f2:67:3c:d4:dc:72:ed:84:92:0a:a7:93:68:02:
8c:b7:44:ab:ea:18:51:31:64:c6:fa:78:f0:0c:99:
4f:c9:8c:bf:32:e2:36:89:10:60:27:36:b8:98:57:
06:da:16:25:eb:ea:84:27:83:f5:53:98:df:26:48:
cd:1f:1b:d4:5c:f1:70:f7:a6:5a:2c:b7:04:60:86:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:7C:B9:AE:52:D8:31:6B:CC:59:56:0A:BF:94:A9:75:F7:0D:0C
X509v3 Authority Key Identifier:
keyid:57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:59:59:74:cb:09:b9:e1:20:7b:9b:59:7d:56:e0:a6:84:91:
fb:5a:65:7d:04:9b:e2:4a:fd:4a:dc:80:48:9e:d4:d5:82:4b:
f8:cb:48:6f:40:65:42:2c:57:47:6b:5e:a2:7c:68:dc:d4:b8:
b8:47:f2:6b:0c:19:cc:e2:d1:9f:4d:90:d9:0c:be:a0:c4:39:
6a:34:c1:dc:c2:56:70:f1:e3:f6:f9:90:9d:3e:a5:a9:3e:f5:
03:30:88:77:1b:da:a7:dc:a2:1c:62:1f:18:16:76:c8:50:ce:
55:29:bb:77:13:3a:35:09:a5:9d:30:f7:00:8d:fe:bd:be:16:
a7:80:5d:27:1a:44:af:43:83:9d:b7:81:37:7f:dd:34:33:95:
91:7d:b1:fd:09:a6:9d:ef:72:1b:09:9d:ee:84:22:a2:19:8b:
b6:45:a6:13:05:a7:d0:16:e2:57:34:bf:76:81:29:d4:3c:3b:
d0:8c:1b:29:d9:1e:ba:c3:ca:3a:79:6a:c4:21:4e:f0:be:be:
5f:87:49:ce:93:fd:c9:d9:2f:60:aa:ae:72:6f:f7:6e:be:45:
b9:0c:e0:b2:56:93:ac:60:ff:c7:5b:63:e5:cd:59:dd:19:b9:
09:5e:73:df:8e:96:33:a5:1d:61:93:90:da:58:73:fb:e7:3e:
36:3a:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:40 2025 by rpki-client