Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File: 2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier: GW5KhXq9prk5hCHkLeZX2UcH12y5jKegnL1y9XmRzhE=
Subject key identifier: DC:60:49:DF:E7:23:C1:FE:F4:64:04:5B:53:C4:32:CA:54:42:4F:62
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 0199FE7D7C35C47E3F51926EA5C7C73060D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number: 16F4
Signing time: Sun 19 Oct 2025 22:01:00 +0000
Manifest this update: Sun 19 Oct 2025 22:01:00 +0000
Manifest next update: Mon 20 Oct 2025 22:01:00 +0000
Files and hashes: 1: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: ppjjULDK2Zumy3kTLjLsx3AtUeDu8JGftgtcbda2Qms=)
2: QwB_J4IBjr_kwpZ0DSZt7jLyFUw.roa (hash: xjQoVVO98cxf92eXukztlmvd0mAJHZVRoWG3GH3edIU=)
3: RZQ5y55NZ91q7qGueZI2kyy2lHI.roa (hash: s/DyWvu0J1swkDaWXLLyRdJ0euIh4+uqvas0DU4Xq7I=)
4: noQO1tLrNCKz3bIWnBbDMmvuYLg.roa (hash: hYTtEju7KkB6LYquIBvGjeZyYymRK8/pFRz4XyGZMT8=)
5: qWeBIgMT9yofaevmnsJv-k3J7gM.roa (hash: OVmNg3h2HayVISC+svzIkwU6u8HmPx4SN/OehOmAqgY=)
6: qq3OJ7E8FdGE4BJdu3ZOq4LInY8.roa (hash: jyVlOFzMs6a5a3ty01oIP3DwXzFAJhXu3CIHkhRdIo8=)
7: v5y-XO_c3BUL4I2vKl0yvM3sR48.roa (hash: job18wRUBRjomyukO0QxaFg1pEdwxYB+4rsX0iFAoJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:7c:35:c4:7e:3f:51:92:6e:a5:c7:c7:30:60:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Oct 19 22:01:00 2025 GMT
Not After : Oct 20 22:01:00 2025 GMT
Subject: CN=dc6049dfe723c1fef464045b53c432ca54424f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:06:ca:53:da:c4:23:f4:10:37:65:c4:20:f0:
83:73:81:8d:b0:8a:b9:76:e6:3e:a2:f3:b1:ab:df:
7f:38:6d:e6:f1:2a:f3:c8:63:2b:79:ce:6b:1e:81:
cf:66:ab:7b:46:77:0e:e8:7d:91:ef:83:f8:38:9b:
4b:c6:af:c5:94:0b:6d:5d:49:a0:1d:f8:8e:19:c5:
05:69:35:aa:bf:fd:92:4a:1f:58:6e:57:83:d6:02:
65:37:86:cf:b7:a7:44:9a:9e:f1:d9:cc:87:3b:04:
c4:fb:8f:f9:9a:7b:3b:79:bc:bb:3a:ec:29:31:10:
12:48:ef:1d:04:be:78:0f:56:90:60:88:1a:78:5a:
13:55:ed:28:32:6d:1a:2b:35:be:c4:b7:b8:2e:04:
c9:1f:59:b9:ee:76:24:fb:19:64:88:55:94:7e:73:
90:82:2c:c5:94:9f:0c:b8:3a:99:f0:8a:80:af:60:
fa:9c:0b:1f:82:8e:85:12:95:e5:5f:9a:7d:1f:61:
05:96:a0:54:3b:68:fe:48:f2:4e:41:a3:aa:4d:a2:
23:82:4f:9f:d8:fe:aa:6e:ed:be:fb:f5:3c:32:d9:
8f:b5:10:bc:ce:66:ac:68:b5:53:8b:9e:b8:eb:e8:
b7:c7:da:f1:70:23:9e:40:2d:76:b7:ec:c8:c2:5d:
df:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:60:49:DF:E7:23:C1:FE:F4:64:04:5B:53:C4:32:CA:54:42:4F:62
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:ac:86:0c:64:57:59:35:7c:7f:7e:d6:81:f6:6a:e2:5d:c2:
71:f8:24:36:c1:c2:07:d3:12:7c:24:46:6f:7a:0f:44:7a:40:
b0:6f:67:5c:88:03:56:7a:72:cb:0d:e4:fd:06:c1:71:c0:dd:
1d:48:e9:89:df:e4:67:72:48:02:1e:15:dc:ea:63:14:f6:1e:
40:de:f6:c8:f4:45:0f:98:03:04:08:73:76:0c:24:79:24:fc:
de:cd:7c:d2:e8:3b:33:af:28:48:aa:c1:df:30:d2:29:4a:76:
0a:60:2f:99:b6:ed:84:50:10:c7:91:86:41:d6:da:9c:db:9b:
c0:6f:0c:6a:26:7a:db:73:fb:cc:07:e2:a1:ef:85:58:ee:c4:
34:06:15:ad:45:22:3f:fe:ce:d6:c1:9a:63:e3:f2:c7:06:e2:
dc:e4:7d:9f:4d:36:8f:42:6b:b3:6d:99:7b:0c:8e:b5:9a:2b:
2f:58:e2:6e:20:41:f7:06:41:6f:56:d7:f7:68:5d:e0:78:5e:
b5:a3:cd:8b:6c:28:eb:60:80:da:c9:dd:a4:8a:0b:f8:19:58:
82:af:fa:e4:fb:c9:78:8a:84:be:fd:fe:34:17:d3:6a:69:15:
23:9a:20:47:c5:9d:53:01:2d:69:f5:86:b2:5e:a5:a2:a2:ac:
50:c9:80:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:16:14 2025 by rpki-client