Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
File: x2v2t4G8-MKACKjo_d5g564xIqo.mft (raw, json)
Hash identifier: E1nOdrpQ0EA9qcUXXon+kFYDG51I0gwp0kUR7Cweqtg=
Subject key identifier: 4D:F3:C6:59:17:D0:36:70:91:BF:C2:73:2D:6C:2A:87:62:D5:09:E6
Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
Certificate issuer: /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Certificate serial: 0199FDDA6AFDF5B5E16BA4E02AE66D164F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:02:53 +0000
Manifest this update: Sun 19 Oct 2025 19:02:53 +0000
Manifest next update: Mon 20 Oct 2025 19:02:53 +0000
Files and hashes: 1: 58adO5UB1FKlEoStUB0aT9zK1OU.roa (hash: VcDtIG0g4QLm3R4L3wJoUxzRN4qEZkuyhBUiyX4ea8Q=)
2: x2v2t4G8-MKACKjo_d5g564xIqo.crl (hash: RgA9T9/DEzRyr4EuXjL5mKVzSA9uQgnVjcHOlAQzW0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:6a:fd:f5:b5:e1:6b:a4:e0:2a:e6:6d:16:4f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Validity
Not Before: Oct 19 19:02:53 2025 GMT
Not After : Oct 20 19:02:53 2025 GMT
Subject: CN=4df3c65917d0367091bfc2732d6c2a8762d509e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:a6:8a:3d:cd:3b:ef:32:70:06:a6:bb:d8:
14:02:93:e6:ef:08:8e:00:00:46:90:e1:88:6c:1b:
bd:05:75:9b:06:bd:26:d2:2d:0b:df:4d:73:93:4c:
c9:fd:51:a8:32:41:04:0e:74:54:79:53:fb:90:df:
cf:a8:cc:a5:07:6d:79:f4:af:af:a5:3b:ea:48:9b:
77:45:21:18:1e:5c:3d:b4:cb:db:b5:e0:4a:62:ca:
99:00:6b:ef:7e:21:dc:3b:61:01:e9:6d:bd:5a:ff:
c6:78:c1:2b:6c:12:ef:07:5e:8c:81:93:7a:b1:57:
67:f9:7e:f9:52:ca:0e:85:6f:be:86:c3:69:b0:c4:
04:7f:c2:01:1f:db:3d:0a:26:92:94:33:ab:71:8a:
30:ec:44:4b:56:4a:b4:4f:dd:91:c1:23:dc:77:3a:
be:6d:e7:45:0e:68:e1:49:3d:4e:cd:9a:f2:6e:92:
fd:5f:fb:d2:b1:6e:fe:84:cb:9b:a8:49:9e:1c:66:
ea:5b:3c:95:08:56:1c:6b:76:4e:a1:61:aa:0a:e1:
f1:47:d6:6d:a8:e6:19:97:a1:f1:87:4e:46:83:4a:
74:56:ec:ab:14:13:ac:5f:30:36:2e:7b:ba:ef:51:
d3:38:11:36:e2:a9:b8:b5:0b:86:a5:bd:84:08:f9:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F3:C6:59:17:D0:36:70:91:BF:C2:73:2D:6C:2A:87:62:D5:09:E6
X509v3 Authority Key Identifier:
keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ce:59:22:a0:64:1e:9f:4a:60:f7:f1:22:1f:8b:fb:14:fb:
ec:b6:92:4c:ea:9c:16:bc:2b:75:5e:78:18:36:16:80:e5:61:
04:dc:8d:88:af:b8:6a:e7:9f:ff:12:a9:9a:2a:6a:48:d1:bd:
14:aa:13:b0:bf:3f:2c:02:51:89:e5:19:1d:f3:ea:1f:72:65:
a2:bc:0c:ae:f6:e7:7b:dd:19:50:33:c2:ea:30:f7:48:3e:68:
6f:bd:57:db:26:1c:34:de:57:a3:73:d6:95:26:20:89:bc:20:
6b:91:ff:39:84:33:c0:f4:cf:a9:77:28:33:2a:2f:a1:1a:dc:
69:c8:f3:77:17:b4:03:79:61:c5:5d:1e:ff:23:18:39:93:f7:
c9:0a:5e:7f:98:95:bd:a1:ed:75:df:51:61:fa:69:81:0e:20:
f6:60:55:bb:d2:1b:fa:1b:ec:d4:6e:f5:cb:0f:c4:79:12:42:
9d:14:7b:d6:11:d9:e5:51:00:97:98:07:12:3c:17:b7:d0:bc:
47:4a:da:ef:7d:60:6c:86:ee:d6:0c:76:8a:ed:66:4c:ce:f1:
38:b2:39:de:e4:bc:39:e4:fe:90:e6:fd:20:7f:a7:bf:b0:98:
48:e0:96:a5:20:d0:45:4e:dd:db:e7:98:90:38:bd:fd:aa:c5:
d2:47:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:07 2025 by rpki-client