Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: 9f3gWWreQ8m3W0z7fFgEd0JQ9HBVFrWQXwCm5IsXXYM=
Subject key identifier: EA:E1:C4:0F:E1:29:0B:94:A7:9A:0A:D1:FD:FA:05:D7:2B:33:76:B1
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 0199FBEB78DF6C172380E433CD4B8029002E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0B39
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: cj99p8vk5J6ljhzBwGK9AMDgUDgdNu3nXdTDcnNWQac=)
2: empYwKrx4ABahFY0k2CZXZft5Pg.roa (hash: lQyRrUFjZRPH9Yib0Mwz+z/3ALSf5u0tcJRbBn2hjqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:78:df:6c:17:23:80:e4:33:cd:4b:80:29:00:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=eae1c40fe1290b94a79a0ad1fdfa05d72b3376b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:0b:0c:b7:6a:1a:82:03:f3:f7:28:2d:26:
81:40:03:66:43:e0:62:d9:96:52:2f:cd:5d:b9:c0:
db:72:13:18:ed:00:33:29:70:12:b2:d9:d0:3e:5c:
1f:05:77:81:0b:6a:26:ea:8c:32:ab:e1:c5:9f:cb:
5e:68:b7:ff:4b:21:9a:26:70:ad:37:49:b9:c5:ac:
5a:6e:f6:6e:41:a2:6b:de:df:d5:15:da:e3:1b:b5:
ee:82:5e:43:5f:51:b6:8a:9a:6f:e0:3c:77:f6:64:
5c:f4:65:9b:8a:aa:9d:3b:25:bd:5d:00:f2:b7:a0:
91:47:e4:15:7d:07:a3:0a:e8:8f:be:e2:e3:51:30:
d3:c9:ef:ef:69:d8:fa:47:a7:5f:3d:59:e6:42:15:
9e:45:cb:87:7e:0e:6d:b2:ea:d5:34:ba:17:47:e6:
45:e0:c2:15:7e:3d:91:71:fb:e3:23:2d:1c:49:e5:
dc:d8:ba:b7:9b:44:a4:8d:3c:dc:3a:ca:d0:b5:08:
78:fb:88:3b:0d:9c:81:ee:40:de:8d:7e:de:ce:e9:
dc:44:23:d2:24:31:6d:aa:64:9c:0a:4a:2e:d7:2d:
1e:7c:f9:17:49:37:ca:98:d5:83:b4:d3:58:71:7d:
6b:af:cf:30:d0:be:16:73:22:06:e6:bb:41:00:58:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E1:C4:0F:E1:29:0B:94:A7:9A:0A:D1:FD:FA:05:D7:2B:33:76:B1
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:47:41:86:72:79:a6:08:a1:66:f7:3f:48:c7:09:bb:bf:80:
36:30:5c:3a:29:f5:60:ab:34:e7:43:5a:ec:8f:b9:a8:d7:15:
6f:60:52:65:31:79:1e:aa:1d:3f:a5:4c:3d:36:0d:a4:1f:ee:
e4:66:c2:b6:04:7b:58:4e:d6:fa:59:ec:2e:01:8e:b2:cf:b3:
03:d9:c4:9a:68:b8:47:a3:61:03:f8:b2:71:51:19:73:fb:d7:
82:7d:d1:ea:0b:be:2d:28:b3:c5:54:27:36:5a:fc:16:b7:f3:
bd:3e:49:d5:14:ee:6b:1c:99:70:80:04:33:5d:3d:c3:05:b3:
fd:c8:36:65:06:04:28:cf:96:66:12:ae:93:80:9a:03:a3:fb:
f0:4f:2e:67:8e:63:44:2e:7b:45:0f:1f:57:2f:9f:aa:49:64:
aa:f3:8c:dd:c1:ab:4f:8f:34:c9:39:0b:83:ac:1b:e8:d4:ae:
1a:2b:97:2c:60:73:a0:a1:69:05:fe:80:22:26:a2:12:ea:9c:
ae:63:f1:4d:1a:aa:67:5b:eb:32:5b:b7:26:70:d8:5d:c2:b7:
d2:83:6b:8f:38:71:d8:80:c9:2a:6c:7f:1f:f6:e9:b9:0b:cb:
fa:28:6f:03:76:60:33:fd:93:15:8f:18:5e:05:b4:c7:b0:3f:
a2:f0:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:45 2025 by rpki-client