Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
File: c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json)
Hash identifier: 2tvBigPpNC+lE672zsYtumREF7Owz7BggHTENxe2Hyw=
Subject key identifier: 64:8A:D7:0C:80:B3:40:93:CA:5F:44:04:35:CF:F0:1B:C5:F7:65:12
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial: 0199FC8FC6F054AF7139C3EED744A750D4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
Manifest number: 08DB
Signing time: Sun 19 Oct 2025 13:01:44 +0000
Manifest this update: Sun 19 Oct 2025 13:01:44 +0000
Manifest next update: Mon 20 Oct 2025 13:01:44 +0000
Files and hashes: 1: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: MqfQb0P4EPIhSlkL7i6WRUejHcQ073NUiM90Vh1kISc=)
2: zxcUujcSrD8SI1LnYGJEIzlJLRs.roa (hash: 9DpZ6fCwMNxgzvUI8W4qG2/5GfqMuaNy171SPmB26NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c6:f0:54:af:71:39:c3:ee:d7:44:a7:50:d4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
Validity
Not Before: Oct 19 13:01:44 2025 GMT
Not After : Oct 20 13:01:44 2025 GMT
Subject: CN=648ad70c80b34093ca5f440435cff01bc5f76512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2b:7b:e8:a6:71:9f:8f:83:93:e5:68:14:29:
a0:f5:49:3b:d9:8a:52:19:fc:53:c8:b7:08:a6:e7:
62:7d:67:8d:cf:1f:5c:4c:15:2a:ba:91:44:9e:a7:
97:8e:0c:a6:49:d8:05:17:8e:2f:f8:7d:d7:8b:78:
fc:5d:38:5b:86:cb:be:62:40:34:ee:1f:17:4e:06:
3e:b6:f2:15:10:a0:cd:c4:b5:85:f0:c2:5b:f3:b8:
1f:aa:f8:51:56:25:f0:74:1a:05:0b:4d:37:0a:5a:
dc:d2:d5:c8:36:20:55:74:f0:88:4b:72:38:7b:87:
2b:0c:c5:8d:71:78:8c:00:cd:d9:70:f4:2d:74:d0:
34:43:2b:b3:7e:dd:b1:d7:40:9b:dc:9f:72:e3:8b:
7c:73:f8:0d:17:8f:4d:b2:fc:d6:bd:44:58:bc:6c:
be:17:b9:c6:52:b9:c2:a2:16:82:56:3b:1f:57:ae:
83:ef:41:d7:7a:19:a1:1e:f8:c7:1e:6c:4c:f6:5b:
fc:be:22:3e:c5:02:16:a0:3f:09:89:8c:9a:a2:5d:
73:2f:ae:a5:0a:c1:a9:f3:60:dd:d4:85:55:ed:52:
7c:96:c5:0f:66:42:86:d4:06:a6:4b:4f:92:b2:6e:
d1:04:b3:59:86:e8:f7:04:24:c1:fc:1a:67:43:13:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8A:D7:0C:80:B3:40:93:CA:5F:44:04:35:CF:F0:1B:C5:F7:65:12
X509v3 Authority Key Identifier:
keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8b:6d:56:e5:ad:46:4e:b8:cc:7d:07:81:fa:e4:54:3d:4d:
19:9f:46:42:e3:98:b6:76:54:ae:0c:77:35:c2:55:df:52:a6:
d1:d4:aa:22:51:12:51:c0:65:1e:c7:6a:60:59:18:c7:7f:5d:
f0:b1:1e:b2:05:c6:da:34:20:1f:09:41:84:fc:ab:07:a0:6c:
66:05:4b:8c:06:f9:bc:35:0f:e8:a1:1d:74:31:3e:c2:68:0b:
f4:26:57:b5:61:c8:ca:f6:14:5e:ca:43:39:54:6b:09:4c:46:
69:14:85:cf:d7:11:aa:c8:78:1d:38:c2:e7:d8:36:4f:cb:d2:
ec:0a:92:17:d8:9c:2d:e4:61:60:1a:f3:79:41:9c:62:9a:96:
90:86:46:36:92:db:11:15:be:ec:db:78:7d:c0:62:b7:af:a1:
5f:5c:f9:8c:c5:1c:41:4a:77:01:d6:66:ea:c6:8f:2d:05:cc:
a0:be:26:d8:69:0a:55:3c:21:a5:fa:24:c9:8e:90:4a:cc:35:
23:78:71:36:56:ff:38:93:20:56:8b:18:44:6e:f7:7e:11:cd:
3e:ba:12:fe:16:d9:b2:b4:d7:d5:dc:fb:15:1f:92:cc:b3:30:
96:e3:10:cf:ca:6b:7d:5a:9c:08:e1:51:58:22:4b:bc:77:c3:
5e:67:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:22 2025 by rpki-client