Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
File: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json)
Hash identifier: wtKGNR3YzL218aSM6OVoPasvpEejio/HKoef0qYLgPM=
Subject key identifier: 16:F8:61:1D:B1:3F:AD:2F:C6:4B:3E:26:21:07:BE:8C:48:D9:56:39
Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
Certificate issuer: /CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Certificate serial: 0199FA6A49DC4BD4F57BDE0A3FE44577B561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 03:01:33 +0000
Manifest this update: Sun 19 Oct 2025 03:01:33 +0000
Manifest next update: Mon 20 Oct 2025 03:01:33 +0000
Files and hashes: 1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: b664Psx3D0xBYPrvF8INEoN7HmPqFhme9xCTVp1wIBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:49:dc:4b:d4:f5:7b:de:0a:3f:e4:45:77:b5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Validity
Not Before: Oct 19 03:01:33 2025 GMT
Not After : Oct 20 03:01:33 2025 GMT
Subject: CN=16f8611db13fad2fc64b3e262107be8c48d95639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:21:58:69:e7:0e:c2:28:53:6f:a4:4e:93:9c:
a2:75:53:62:96:3d:80:14:10:02:cf:10:ca:67:a5:
17:95:68:ee:cf:2e:51:b4:5b:5c:60:cf:ff:ee:84:
85:29:1f:8e:4d:31:f7:14:b4:90:4b:b5:e3:28:fb:
09:a9:57:b3:9c:99:36:81:05:07:17:5c:6a:b8:68:
16:55:4d:fc:a9:3f:26:20:77:10:d5:f9:1d:f4:3c:
a9:cb:73:76:79:cd:62:ea:56:32:d0:c3:aa:53:f4:
6c:89:d0:ed:4c:39:a1:63:ea:95:6f:01:bc:38:f1:
7e:47:20:25:07:4a:0e:9b:dd:ce:0e:a8:dc:23:7c:
3e:f1:33:f4:81:2a:49:df:49:a3:df:12:c2:bc:00:
9e:27:39:bc:c5:a2:b0:28:91:c0:80:6d:c9:ae:ba:
3e:00:38:62:7c:c9:de:3a:88:21:60:d7:63:2e:ae:
52:fc:7b:59:95:23:f6:72:50:df:12:85:28:2d:a6:
b9:cf:48:b4:f0:c6:ba:4a:b3:97:ff:57:c9:34:2b:
51:e2:4a:64:06:67:7a:99:78:4a:fe:26:4c:3c:2c:
dd:0e:01:3c:7b:99:ec:91:ad:c4:93:0f:b4:5b:fa:
98:23:ef:73:b1:6d:e0:04:db:b9:eb:69:34:90:cb:
72:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F8:61:1D:B1:3F:AD:2F:C6:4B:3E:26:21:07:BE:8C:48:D9:56:39
X509v3 Authority Key Identifier:
keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8f:97:db:61:64:6f:39:13:20:05:c2:60:e0:aa:cc:89:3c:
d0:06:2f:44:b4:2f:e8:7a:9b:a2:7f:af:c6:06:54:dd:33:ef:
c2:d1:4b:22:56:de:c0:d1:d1:87:48:23:54:49:17:78:7b:cf:
57:65:9a:90:34:5c:56:43:ed:af:3d:50:0f:bb:5c:b5:3c:ad:
e6:37:7e:b6:ac:1c:10:44:f3:15:fc:c7:bf:3d:69:38:fe:e3:
a6:55:89:64:a7:b0:e6:95:b4:43:1d:65:9e:a2:a4:3e:6a:d9:
f0:74:01:93:a0:32:b2:73:e0:a5:a8:d6:e0:f5:c0:cb:d8:4e:
6b:1c:8d:60:62:c3:48:cd:7f:b3:23:1e:08:09:35:6c:9c:d8:
a7:9d:17:68:7e:01:91:84:17:2f:1a:b0:e3:0e:e8:9b:22:2c:
3d:9d:2b:ec:ba:06:5b:78:f0:86:70:28:5f:16:e8:81:0a:92:
fb:d7:0e:27:3c:f5:6c:56:ec:ee:98:92:92:b2:7f:7d:bf:08:
37:b0:c8:b4:c5:fe:a2:c2:ef:ed:55:b5:9d:29:e2:8d:28:06:
22:b2:97:60:f7:ae:bc:51:62:9e:6c:92:9a:64:9c:69:ed:29:
1c:71:d3:17:48:58:43:f1:f5:3e:0c:5e:95:a7:54:3c:16:53:
a5:93:30:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:08 2025 by rpki-client