Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier: 7N7PIjicA40i9FRnXcFNHOmtCcORJ3JRf7ig3zlrs5U=
Subject key identifier: 98:32:39:49:A4:04:5F:EC:22:93:0D:26:99:1E:B8:26:11:05:71:9D
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 0199FC21AF12107741714630457E2C55926B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=)
2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: Egk0VVB7spdAmWofjtnnXVBxUt+47ws8bg5XK1f7vRY=)
3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=)
4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=)
5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:af:12:10:77:41:71:46:30:45:7e:2c:55:92:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=98323949a4045fec22930d26991eb8261105719d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:65:36:75:b8:47:25:36:0f:bc:14:92:bb:
40:65:54:8f:6f:14:6b:04:4f:b4:71:08:bc:df:0f:
fd:20:f6:a7:59:cb:51:3b:92:17:60:21:ca:b2:57:
fd:be:5a:d7:86:15:c8:ad:37:72:8a:9e:72:df:bd:
bb:46:f9:a9:e0:85:00:c0:98:a5:1a:0b:95:a5:4d:
e4:b2:7c:a2:42:97:b9:c5:8b:fb:c9:ba:f8:15:59:
db:42:26:0e:46:fb:32:94:7c:d8:7a:f5:90:fd:8a:
be:ba:85:ea:b3:18:6e:df:c1:2f:c8:2c:97:b3:7d:
03:7f:9b:8a:97:4a:b3:97:3e:38:4a:83:a7:95:88:
d1:7b:f3:37:6a:73:69:da:64:ef:b1:52:dc:66:80:
92:d9:0e:de:09:39:7e:84:60:5f:8f:5f:a6:ae:fe:
2e:c7:f6:21:ac:a9:bc:88:6a:06:4d:fc:46:71:79:
2f:40:3a:1b:61:88:41:c6:d6:37:47:b7:eb:ca:20:
98:3f:e2:dc:17:19:37:4a:b7:ac:3b:03:f8:83:16:
26:e4:81:0b:12:18:a6:c0:99:76:f0:f4:e3:8b:cc:
4f:8b:2d:7e:9e:36:0b:51:7d:1d:2e:4b:20:63:f7:
10:7c:d8:e9:69:1f:71:63:9f:91:51:02:8c:28:8f:
29:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:32:39:49:A4:04:5F:EC:22:93:0D:26:99:1E:B8:26:11:05:71:9D
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9d:17:db:02:64:d8:70:b9:13:38:b3:29:46:6b:be:1e:7d:
88:bc:7e:d5:77:ed:9e:d0:aa:52:5f:5a:7e:97:7f:ec:2d:30:
10:8b:25:e8:aa:f0:eb:92:3b:e7:da:fc:83:98:db:b3:8a:50:
49:1a:c6:87:d7:56:ff:c9:2a:23:d8:df:8f:65:ee:5f:de:40:
05:85:a0:17:15:fa:be:a0:44:0e:d9:b0:a6:94:f1:41:47:c8:
e3:b1:cd:c3:06:bc:7f:36:eb:7d:70:43:31:2f:c3:de:dd:dd:
75:45:ee:51:ec:31:a9:fa:d6:81:5d:22:1d:42:4e:b7:4c:2c:
57:9e:c2:4a:7a:aa:d4:89:d2:b8:c8:ed:87:41:4b:d9:74:58:
6f:5d:6d:4c:24:28:9a:0c:ba:7a:06:5d:77:51:32:1c:5d:ae:
43:75:73:ac:e8:65:90:ce:41:81:93:b9:d8:53:0b:ed:bd:08:
33:06:7f:e6:bb:0a:23:d9:cd:e5:f4:b8:5e:1d:3b:08:c8:16:
17:76:7f:e7:d3:b9:d5:33:10:39:bf:9c:22:84:3b:cd:69:ed:
ee:63:d4:1b:34:9f:cc:30:45:e0:22:b0:27:46:13:cd:59:24:
32:2a:7b:8a:21:c9:9a:7f:7f:ba:63:cf:1c:6b:26:34:31:ea:
d3:07:52:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:27 2025 by rpki-client