Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: /B1mYaV2uGtTF1TcTb7PYxaZlY+2uBT6gJ9aCSeoJjc=
Subject key identifier: 05:A2:91:B0:EC:24:CF:38:0C:6A:D3:4A:E3:0D:10:54:3F:40:D6:DC
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 0199FCC67C3F4430BAE84312309127852B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0CC1
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: qza6J/aTJOO4D5U8oHxsv6rofUTXBWZOOCJmRHQer8Q=)
2: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (hash: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7c:3f:44:30:ba:e8:43:12:30:91:27:85:2b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=05a291b0ec24cf380c6ad34ae30d10543f40d6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:0b:33:e7:0c:49:0e:b9:66:8a:83:1a:ac:
ba:85:fb:d6:c1:0d:ab:31:cd:81:a5:3b:72:fc:8d:
5d:e9:2d:a6:7b:c7:4a:fe:2b:f5:a4:6e:90:5e:7e:
26:3d:ea:ef:d6:55:4e:c0:a8:dc:ed:d0:ac:c5:27:
06:52:dd:d0:5c:af:09:44:52:6c:de:f2:eb:ab:0d:
3f:89:41:a9:e1:de:0f:20:42:ba:77:8e:96:05:ab:
92:1a:ab:21:27:f9:85:d2:ee:52:e5:1a:27:be:f0:
08:2b:f3:8e:c7:69:ed:10:1d:d7:e0:07:f3:91:e8:
02:a9:b1:9b:b0:57:bc:d6:a1:e1:b1:a5:23:72:98:
02:17:71:d9:d5:67:52:c7:bf:ab:e0:1f:46:2a:2d:
e8:6c:3a:c7:13:a5:22:85:11:fb:eb:3e:6b:5d:57:
c0:74:eb:76:10:77:5b:08:e2:92:e1:bf:42:a7:25:
11:c2:d7:ef:af:79:9f:61:e1:e4:d1:f8:2c:93:59:
6c:b2:e6:66:d8:55:26:45:ef:81:20:d9:05:39:90:
54:13:13:1e:1c:43:99:7b:a3:34:c2:c6:64:5e:51:
7d:ec:7e:e2:f0:69:ac:72:5e:99:ad:c3:a1:be:3d:
c6:d0:db:91:e8:7c:0b:fd:3a:0b:fd:cd:d5:df:3a:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A2:91:B0:EC:24:CF:38:0C:6A:D3:4A:E3:0D:10:54:3F:40:D6:DC
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:81:42:3f:31:aa:a9:d0:ca:9d:f3:61:f0:53:fe:a2:d2:1d:
96:e5:9a:b6:30:36:2a:ea:74:37:b6:f6:5c:9a:73:c1:47:2b:
d6:2f:39:3a:e0:64:27:6f:f2:4e:ca:dd:4d:a1:1f:c9:a7:88:
ee:27:df:eb:f2:08:1e:7a:8b:b7:9b:d7:9c:bb:da:d8:ce:cc:
ac:bd:41:c4:dd:99:7b:d0:3b:68:ff:a5:49:87:cd:94:69:36:
66:d4:52:a7:d6:e4:94:3f:2a:24:d6:c2:b2:a6:63:4f:60:28:
9a:c6:55:5f:81:6b:a3:f4:82:4c:13:b7:78:68:9c:66:14:19:
a1:d0:ea:c2:c7:76:d4:39:94:ab:e8:8f:c4:a7:e6:8c:79:66:
c5:7a:1d:33:59:26:12:ee:69:4d:6d:8d:85:31:bf:f6:9d:b1:
fd:c9:46:7c:8c:cd:07:f0:e9:f2:c7:97:a0:58:9f:71:ce:36:
00:43:9a:b3:30:0c:7c:2c:ff:f1:dc:59:e4:f8:ca:7c:06:63:
22:2a:6b:2e:6d:a5:87:09:28:5e:7b:a0:48:7a:75:4c:5b:c3:
f4:9d:08:91:d7:83:84:17:d1:1e:ef:7f:0e:15:47:dd:21:a1:
a6:56:11:7a:da:35:62:84:fb:1e:06:8a:d7:97:d1:6a:a1:99:
7b:66:84:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:33 2025 by rpki-client