Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: R2zS7jtcMWFV3TjnQeI9YhSNnzaEtxOWOzuoiLacw0E=
Subject key identifier: 46:41:9A:7B:D4:DA:CE:EC:F5:6B:83:30:49:E6:E8:D8:5D:FB:0D:C4
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 0199FCC67EF0693168BEBDAF41817E981362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: VDcMObtePvtoqL4SQSkJO3/I4xQqucYZy+pmWf/d/lk=)
2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7e:f0:69:31:68:be:bd:af:41:81:7e:98:13:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=46419a7bd4daceecf56b833049e6e8d85dfb0dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:87:6c:c7:8b:ea:91:01:92:e4:c1:9d:d6:
33:82:af:ae:e6:dc:90:14:9e:52:84:b1:ec:fb:16:
ec:f1:8d:7f:3f:4a:4a:83:05:3c:1d:ed:25:da:03:
6e:60:6b:3b:c2:fe:2f:54:01:51:ad:da:c4:3e:c0:
c8:9b:bf:e9:16:51:49:77:ef:76:61:31:63:d8:f8:
ed:1f:e3:c1:93:fa:c1:4e:8f:80:f1:50:82:72:67:
f1:3d:e6:e5:70:00:58:fe:22:57:14:d0:06:b9:13:
a4:b8:8a:47:8c:e5:3f:5d:a8:16:69:ed:f5:85:af:
e4:e7:f2:10:1d:de:8c:8f:c7:29:56:1d:be:53:47:
72:d5:84:14:c3:be:d9:6d:b7:f8:8b:fb:33:e9:ea:
dd:ff:ef:c6:f0:fc:b1:3b:a9:85:a8:ce:51:37:54:
91:f1:70:6f:43:b2:8b:23:8b:dd:3b:cb:71:a8:3e:
79:59:9f:c4:f0:50:45:7c:85:e4:fb:f8:e0:8b:57:
2b:6c:2c:72:2c:2c:aa:ae:e7:0f:a3:e5:fb:6e:2e:
e2:b6:56:a5:a8:cf:6e:13:10:f2:24:56:31:88:61:
6d:01:53:b5:43:08:b3:79:dd:ef:47:5e:86:84:0b:
53:20:12:bb:6f:2b:16:14:80:7a:5e:78:40:2f:11:
ef:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:41:9A:7B:D4:DA:CE:EC:F5:6B:83:30:49:E6:E8:D8:5D:FB:0D:C4
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a8:ed:45:41:50:18:05:ed:89:80:18:2f:c7:4e:45:7c:46:
54:b9:a7:c4:72:30:b8:6b:76:31:7b:d7:e9:2e:cb:da:aa:43:
3b:e9:9f:5f:39:7b:15:81:11:9d:c6:4f:a1:1c:8e:c8:90:ee:
97:cd:c5:b9:d3:19:ce:90:8a:b3:37:97:84:4c:c7:cf:33:8f:
b1:0a:e2:82:53:6b:f6:57:79:ee:2c:8b:72:a7:00:bb:d1:f4:
9d:73:46:18:85:26:80:3e:e5:4f:f2:a6:42:31:6b:e9:36:81:
16:14:1c:8c:11:1d:37:05:64:ea:3c:94:4f:d6:75:ee:b9:20:
df:a0:d6:89:c6:f9:37:c3:f3:2a:4e:ea:c4:31:90:65:2b:f5:
45:13:09:91:a2:55:bc:81:b0:0c:00:91:64:ce:cf:4c:03:a6:
6c:dd:07:b5:0c:c7:c7:5e:b3:46:ca:73:f3:bb:4c:28:f7:4d:
10:01:fa:ec:ff:89:b7:f4:a4:6e:bb:4e:36:ca:b2:d4:1d:bb:
29:8b:9c:d7:93:ba:d9:24:0a:e2:38:33:82:c4:2c:ce:2a:81:
22:8d:01:54:e6:11:85:fd:38:d6:99:d4:d3:45:c8:67:f6:22:
7b:95:6d:41:9f:47:ce:52:1a:59:ad:d7:e7:c5:34:ae:8a:fb:
9c:4f:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:38 2025 by rpki-client