Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
File: 2RTaVuGpNGSdoClkrBLro0xcuE8.mft (raw, json)
Hash identifier: Ocqkz0oeZLtrJ1xNGujD2BEL3Zx3Y28tHjoNnwkUtqI=
Subject key identifier: D6:E9:0E:A1:4B:67:DB:F2:EB:FC:62:DC:BA:1C:05:D2:63:08:F0:F8
Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Certificate issuer: /CN=d914da56e1a934649da02964ac12eba34c5cb84f
Certificate serial: 0199FBB36BE1DD5677F00993BC6D1DB33C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
Manifest number: 043E
Signing time: Sun 19 Oct 2025 09:01:03 +0000
Manifest this update: Sun 19 Oct 2025 09:01:03 +0000
Manifest next update: Mon 20 Oct 2025 09:01:03 +0000
Files and hashes: 1: 2RTaVuGpNGSdoClkrBLro0xcuE8.crl (hash: jvXVijBXILl9uNi+ZVOD2juR3lJLt8I0Mo1CGEH0z/E=)
2: As7V6ZE1xBs1gl2SXAEbNIUHC00.roa (hash: kQVt6PxymkEnwafOS16jS1OEQiU/aYHOchiiJ14/rGk=)
3: PIhsP1al3YizxN861NowDoYoHI0.roa (hash: R9+qOpDwEb0Q5efJFh94SK/9P5J9FFbPDMd4Z1g9adY=)
4: RVfWb6AeQUrXaw0eh9r6r19sjZE.roa (hash: v4r/LVDf839QcMU4tAbsB+argaU/EH+WPkLUSna1SOM=)
5: h2By371OCvj77wNVdyQcqgznsSg.roa (hash: soUA/0DY5+xPnyfK/0AF2K5yBnM6iGB14VNuRKlaQjI=)
6: yP_dwUj9wkpGZraCJm3_QUlcxSc.roa (hash: PpcRyK/zlLSo8ZccoU5Ov6j3mDsKb8kB7dCU9P4KBZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6b:e1:dd:56:77:f0:09:93:bc:6d:1d:b3:3c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f
Validity
Not Before: Oct 19 09:01:03 2025 GMT
Not After : Oct 20 09:01:03 2025 GMT
Subject: CN=d6e90ea14b67dbf2ebfc62dcba1c05d26308f0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:29:b5:28:60:8d:e8:fd:d7:fa:52:61:38:19:
22:81:13:8f:21:34:74:bc:71:d2:68:0b:ab:58:c7:
3a:dd:81:9c:a2:63:06:a5:df:b9:8f:c8:37:92:0e:
b3:24:2c:db:98:d9:28:c3:21:e0:af:e3:8e:36:b1:
a0:61:4c:a1:ca:ad:b4:85:4a:a1:d1:02:5a:ef:fc:
f7:6e:ee:35:96:fa:e6:c8:ff:1d:b1:87:9e:32:0e:
87:9a:80:5a:81:ca:03:e8:7f:f2:95:6f:94:52:63:
79:db:86:58:92:b9:95:4b:46:5d:ea:69:ba:91:32:
86:44:d2:18:39:f5:d8:c7:76:c6:cd:1e:c9:f8:bf:
f8:8d:db:3a:85:76:aa:8f:f6:af:a4:72:43:b2:90:
ec:fb:b9:96:98:fa:4b:38:46:40:ae:1a:77:27:2d:
9d:50:17:ab:a6:05:6f:a6:68:36:8b:f4:37:3c:0e:
68:ca:93:d6:4b:15:bf:3d:69:62:7e:96:87:c1:9d:
7c:57:01:98:17:a3:ba:53:00:b4:e1:ee:05:53:41:
d5:ac:b8:a2:53:05:e7:ba:51:75:a0:84:e3:45:18:
65:1c:24:cd:e9:58:b9:d2:32:2e:ca:d0:75:af:a3:
49:fb:bd:50:d5:de:48:97:21:b0:1b:66:bf:90:fc:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E9:0E:A1:4B:67:DB:F2:EB:FC:62:DC:BA:1C:05:D2:63:08:F0:F8
X509v3 Authority Key Identifier:
keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:be:bd:ae:31:82:a5:79:2b:14:6b:7c:7f:5b:2b:bc:05:ac:
25:43:1f:cb:48:b5:90:82:7f:b3:a6:bb:8e:c3:7b:a6:2a:e5:
22:0f:d9:58:7d:ac:47:7a:59:47:6d:ec:78:12:9e:8d:4d:0a:
5b:d8:68:35:a4:d9:ea:50:17:bb:75:3d:76:f0:34:38:1d:89:
0a:89:b7:33:20:25:ba:e6:a4:86:4b:5d:83:ff:ff:cb:63:6c:
58:27:f8:af:54:43:c0:d6:62:fb:3f:d7:9d:36:ff:3e:09:24:
a2:fa:d5:6d:54:fc:13:ac:89:94:8c:b8:44:18:f0:9a:ec:47:
e6:1e:21:15:9e:7a:29:58:83:13:b6:42:13:77:a0:f3:74:55:
4e:71:63:34:8b:aa:ad:0f:59:01:b8:38:a4:0f:39:6a:21:73:
30:98:18:bf:ab:1f:8f:71:3b:1c:ea:dc:ad:90:22:70:ab:4a:
95:84:43:6d:2a:b5:16:a9:ba:d7:1f:f3:44:7e:b5:f6:2c:e6:
8a:d2:02:dc:0d:4d:a9:b0:ba:29:85:32:6a:91:d3:e8:cd:20:
9b:73:c4:33:a3:46:59:53:ff:3d:1a:03:dc:5c:f2:97:b1:e8:
df:91:c4:5b:4f:35:fe:f4:b9:c8:14:1e:5a:0e:bf:25:7c:15:
d2:b9:4e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:31 2025 by rpki-client