Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
File: S_2cFAbIyhL_UAsf1MgAQUai2ks.mft (raw, json)
Hash identifier: 6opGAVYTW848o5q8kRbo36rEjY8wiV7lW9c9NUldZt0=
Subject key identifier: DE:3F:65:71:2E:89:A0:57:0A:CC:96:13:A2:18:12:DD:8B:F9:79:D3
Authority key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
Certificate issuer: /CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Certificate serial: 0199FE102A7BF8AD5DDC1C18A8C48C372847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
Manifest number: 0268
Signing time: Sun 19 Oct 2025 20:01:36 +0000
Manifest this update: Sun 19 Oct 2025 20:01:36 +0000
Manifest next update: Mon 20 Oct 2025 20:01:36 +0000
Files and hashes: 1: S_2cFAbIyhL_UAsf1MgAQUai2ks.crl (hash: W2+qnVz1Kj2QrG8y4eA+Zja9OfkAGZKRN9lOzJ+YVA0=)
2: nMfaA-8pTlQ2Ik01XjOzaXsz8S4.roa (hash: 9j/+zG1+gdxJdHggAHxvXOVulCvMT9Y+f9TRZ3Vf7+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:2a:7b:f8:ad:5d:dc:1c:18:a8:c4:8c:37:28:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Validity
Not Before: Oct 19 20:01:36 2025 GMT
Not After : Oct 20 20:01:36 2025 GMT
Subject: CN=de3f65712e89a0570acc9613a21812dd8bf979d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:15:12:17:35:df:fc:1e:d0:17:19:ba:77:
ee:65:f8:85:4c:48:c8:be:6c:60:c5:1e:b5:8c:0a:
64:d9:5a:0d:ae:62:83:15:d3:ea:cc:26:6d:d6:0c:
10:94:20:c7:05:1d:d1:86:d5:6c:52:f2:8f:43:38:
cf:fd:e3:bc:5c:f6:5e:39:2d:56:cc:ac:ba:ca:a3:
18:7b:df:13:63:d2:17:e4:c4:be:ee:12:b1:42:cc:
46:07:b8:72:d4:e7:f2:f5:4d:c4:fb:c7:a5:54:ee:
ae:08:9d:fe:38:87:b7:af:16:39:fe:f3:dc:e8:45:
a6:ea:38:e4:76:5d:fa:a1:e2:4b:66:9f:6d:0a:87:
b7:2b:c7:69:99:d3:af:86:aa:f1:76:6d:d8:20:88:
f2:07:d3:1d:d1:41:03:ed:96:e3:9c:63:80:a0:b3:
d9:c6:0f:34:49:30:78:0d:f6:3f:2e:ee:f3:61:3f:
55:6d:64:38:1e:23:44:7d:82:35:ba:be:07:11:7e:
d0:35:67:7a:07:e3:43:9e:ee:25:7b:87:b0:2f:b9:
d6:b3:b9:1b:52:29:f4:0c:2a:7f:30:f7:72:06:e6:
51:ff:7c:2e:a0:7f:d0:2b:78:b9:df:ab:9f:1f:6b:
02:ad:c8:29:58:3d:88:a7:ad:69:07:7a:9f:a1:2a:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3F:65:71:2E:89:A0:57:0A:CC:96:13:A2:18:12:DD:8B:F9:79:D3
X509v3 Authority Key Identifier:
keyid:4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:25:eb:df:aa:b1:65:05:be:d0:42:d2:42:08:78:82:48:c0:
bd:b5:72:3b:ad:c9:56:9f:59:eb:02:00:78:72:0e:e1:3e:a9:
6d:68:f0:2a:0f:56:db:3a:66:86:ac:4b:eb:b9:c0:a0:54:a3:
b3:3b:99:1a:9d:ae:58:18:64:f7:ac:4f:ae:d7:0d:5b:b6:16:
d0:a3:3b:5e:97:b8:20:d5:22:32:94:00:58:cc:fa:91:cd:fc:
c6:c1:0d:57:cf:05:b5:c2:6d:ee:6e:7c:3f:40:bc:e0:69:46:
30:43:3b:de:52:60:63:67:e5:69:1e:0a:2d:6c:75:19:05:cd:
6f:41:63:4b:c8:42:c8:4e:b6:d4:e8:14:17:3a:a0:0b:94:98:
d3:4f:27:fb:16:cd:d3:34:80:1b:27:f3:a7:39:21:f4:5c:05:
cb:cb:24:0f:b6:23:7a:34:ad:69:5f:2b:a4:84:9d:75:1b:5d:
52:22:d4:bc:ca:17:8f:eb:b1:dc:ee:a0:e1:34:5d:d5:f8:30:
77:48:fe:74:56:e9:35:c6:e8:ac:89:6f:2d:fd:47:cc:59:b9:
91:a2:fb:3d:97:aa:78:3f:35:f2:1a:2d:53:e4:d6:4c:d8:db:
39:df:67:fa:02:ac:67:8a:62:1b:97:60:ea:64:71:dc:f1:44:
b2:e3:0e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:40 2025 by rpki-client