Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: brbxJACkiYhI+wjmtlDDf8iJL3Aok4EK2wolBjPBqJM=
Subject key identifier: 3E:8F:3A:06:2C:E4:99:24:E2:27:08:A4:98:60:7F:47:20:98:33:DE
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 0199FB7CE334DC58B39424CFA8F0BDFE5BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 0420
Signing time: Sun 19 Oct 2025 08:01:29 +0000
Manifest this update: Sun 19 Oct 2025 08:01:29 +0000
Manifest next update: Mon 20 Oct 2025 08:01:29 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: k+DAywEEzgS3Z9ct9V3BRkaarl1lTPRVgCbhnGp1wtM=)
2: Cx9kha5bv103Kq3bAG_MTrrJE34.roa (hash: johgfLtk10gvNPvG8Domyd4XBTCwy6ebk0g5h9P2w50=)
3: SWoEFelEatU_dibcF-_TT8FcqBU.roa (hash: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e3:34:dc:58:b3:94:24:cf:a8:f0:bd:fe:5b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Oct 19 08:01:29 2025 GMT
Not After : Oct 20 08:01:29 2025 GMT
Subject: CN=3e8f3a062ce49924e22708a498607f47209833de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:b9:d8:b6:80:c0:46:00:46:6b:20:ac:33:
af:70:fb:3c:0e:4f:ff:ec:24:b2:81:36:ca:06:5a:
fd:40:14:4e:66:e2:8b:00:56:ba:90:cd:d7:ae:c0:
fd:2b:ad:8d:f2:8f:0f:8a:cc:a8:46:f8:a2:b1:cd:
af:f9:cf:2c:1e:f7:e2:f2:c6:5a:2c:c9:a5:f6:67:
76:0f:cf:8f:3b:3e:da:5d:6e:cf:45:48:5a:cb:b4:
cf:47:7b:52:09:49:de:66:36:76:82:d8:4c:a0:39:
03:c7:33:67:e5:6d:d1:e6:2a:83:5a:d5:b9:55:61:
a6:0e:1c:16:55:69:91:86:f3:9f:b4:16:b3:3f:94:
72:7f:6d:41:b4:68:62:ad:82:19:29:21:e0:0c:b5:
24:61:b8:05:2c:42:96:3a:84:46:3e:55:d0:55:e3:
d3:60:9f:25:c9:56:6e:ec:27:1e:35:cf:e7:c9:65:
0c:5b:a9:16:04:47:f6:96:42:ce:b2:89:9b:9e:cb:
a5:d9:98:1c:48:f4:c2:96:31:3e:ec:20:86:4a:7e:
d0:5a:9c:63:8d:a6:67:28:e5:15:a8:58:6e:e1:30:
81:90:0c:ac:6a:cd:7f:c6:a6:96:99:c1:95:ae:91:
7f:70:f3:6b:8e:1f:60:cf:2f:52:14:39:bf:89:57:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8F:3A:06:2C:E4:99:24:E2:27:08:A4:98:60:7F:47:20:98:33:DE
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3c:67:96:8b:0b:70:18:fc:cc:aa:07:ea:1e:7b:83:87:e7:
4e:1d:1e:5c:9b:ca:5c:eb:c4:25:2c:6c:77:c5:3d:82:cf:97:
f8:3a:26:f3:51:e8:ae:8a:8a:51:9a:a5:4f:d5:c3:85:eb:9e:
bd:a9:98:3a:0f:b1:37:78:fb:a2:a8:5f:d7:eb:76:dc:91:f4:
9c:8e:03:9a:db:03:36:6f:f2:e0:f7:4f:96:57:78:02:2c:bb:
73:de:fa:8d:8f:65:79:9d:3e:17:e1:6d:a7:60:9f:fb:a7:83:
4a:19:d3:00:c1:68:2b:c0:ca:ae:16:89:e1:ad:75:b0:cd:29:
ed:11:2d:fb:dd:aa:5e:34:83:79:ff:4a:c2:b8:80:23:a8:f3:
c5:02:ca:68:a5:ad:87:a2:09:5e:81:f3:d8:f9:fb:ce:f4:a7:
14:80:6b:f5:12:ee:07:a6:63:cf:b2:71:a7:3a:d6:c4:9f:6b:
62:0f:cd:8d:99:56:cb:b5:40:81:8a:9a:d2:5f:c0:dd:cd:9b:
28:a5:92:68:43:74:68:6d:6b:54:94:2a:e6:35:2a:f4:e7:7e:
13:38:76:a4:14:41:fe:b9:7a:f2:20:c8:29:4d:7f:ba:0b:8b:
0f:37:d0:93:23:ec:71:82:5f:44:dc:7c:d9:90:15:b0:18:ca:
a5:94:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:56 2025 by rpki-client