Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: jNpUqSOU6ofO7JX+AKFxN8TIktu8kQqZVS2bFgA34r4=
Subject key identifier: C2:00:36:37:DF:71:ED:23:3D:32:1A:CA:B5:27:61:F6:60:F2:53:45
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 0199FC8F35D3FA921D8E6BFE47C1D08D9FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0807
Signing time: Sun 19 Oct 2025 13:01:07 +0000
Manifest this update: Sun 19 Oct 2025 13:01:07 +0000
Manifest next update: Mon 20 Oct 2025 13:01:07 +0000
Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: z6hii9ggeaEmjefSnOC6LzhPbQ3zXoNlDgqx9XPZ+a0=)
2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=)
3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:35:d3:fa:92:1d:8e:6b:fe:47:c1:d0:8d:9f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Oct 19 13:01:07 2025 GMT
Not After : Oct 20 13:01:07 2025 GMT
Subject: CN=c2003637df71ed233d321acab52761f660f25345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:63:4b:13:84:63:f5:35:67:c1:aa:49:9f:
5d:09:c2:b5:2c:92:98:9a:8c:fc:4f:42:68:c9:c5:
9d:37:4b:c3:05:c5:f6:97:6f:a2:ed:41:6e:5d:3a:
ef:6d:44:c3:38:3c:4b:2f:18:67:c5:9e:51:45:c4:
b5:fa:d1:79:6f:62:ae:65:b6:31:df:20:a7:12:57:
0e:11:bd:7a:e9:24:4d:3d:0c:33:7b:13:af:59:72:
80:a9:3b:52:1c:d1:35:2e:f4:33:06:00:21:ce:a5:
bb:94:d7:70:27:38:86:f7:b9:90:f4:25:1c:33:b8:
18:66:7d:fa:32:39:6e:4d:cf:00:3f:48:ea:56:b3:
be:b9:94:85:13:22:ed:28:34:1c:fc:db:85:93:5b:
f9:6b:e1:43:e7:67:29:56:ce:bd:80:9e:00:ba:d3:
cb:0d:0c:6d:68:f8:0b:28:61:f3:27:b3:77:09:2a:
25:75:36:12:cc:9b:8a:6c:55:22:85:7e:24:a6:75:
fa:62:3e:0f:5a:88:cf:0c:c8:dc:4d:4d:a4:52:d4:
04:23:0f:83:1b:fe:01:31:85:b8:59:62:a2:0b:dd:
bf:74:74:a2:bb:a9:0e:d2:b4:e5:83:06:34:5d:fb:
41:c0:54:f2:91:ba:d9:19:f0:39:41:ec:6b:94:be:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:00:36:37:DF:71:ED:23:3D:32:1A:CA:B5:27:61:F6:60:F2:53:45
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:51:ec:33:5c:8d:bb:f3:f4:93:01:48:1e:5f:e3:e3:ec:e4:
64:b6:ce:2c:a1:6d:9a:90:7e:ec:bb:49:32:a3:bf:aa:f1:95:
bd:49:ad:01:cf:45:f5:9b:dc:25:12:59:ea:19:c3:40:1d:c4:
87:23:03:ff:44:44:9d:9b:52:e3:a0:62:8c:0e:4f:f6:4b:36:
1f:53:e0:b7:a4:f7:57:60:9d:ba:44:3d:e6:b8:28:b0:09:6d:
44:a4:4c:d6:da:67:53:54:4e:16:0b:f3:a0:81:ed:a0:47:27:
4b:64:9b:4d:3b:9c:f1:c4:b8:1f:a4:77:96:91:81:76:8a:a6:
d3:2d:60:1e:54:c3:04:7c:21:1e:79:aa:63:de:7b:55:e6:09:
3b:ca:e4:d2:4d:78:96:16:f0:85:7d:ea:4e:e0:cc:44:ed:a5:
bf:10:eb:25:64:e0:7b:b4:43:4a:c1:50:b9:b6:49:79:b2:6e:
50:5a:5a:55:4e:98:3a:c1:45:c0:90:5b:95:0a:68:cb:af:58:
2d:4d:47:e9:39:b1:e1:ac:67:08:3f:13:e8:62:3a:36:6b:73:
a1:af:56:a5:ff:58:05:b7:78:25:bc:8d:1f:c3:d1:15:21:06:
63:61:68:26:be:09:48:94:02:07:22:17:53:b4:7d:7f:ab:25:
dd:9b:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:11 2025 by rpki-client