Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: 3H+7VrqIm+iyDUsUrVnOQ/2ay9K9nvUDGfPklY2DWkw=
Subject key identifier: 77:50:3C:C0:2F:AE:FE:C7:5D:9C:DE:19:E0:1E:90:9F:BD:E9:93:E5
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 0199FC216226A2C1FB5C0403014FE05D5245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: EFiJCM+yP/Hbaaj7qNihvALdARybQF3Mlhh5IIRM84I=)
2: tC1yV2tBIFtyur1CynjIgKWGcBM.roa (hash: 1+DYEAvIp/jbF3nPZX2n/Pi9ZPPyvPQVRKTGpXSrouQ=)
3: yHaEkoOTCPurcY3b0F-9VL88Kwc.roa (hash: Y+GSgGL/KpLcJxeK38gow6fyI44wgNDdjmQduqWLn3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:62:26:a2:c1:fb:5c:04:03:01:4f:e0:5d:52:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=77503cc02faefec75d9cde19e01e909fbde993e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c4:61:7e:5b:16:80:65:ba:80:74:2b:2f:41:
8f:35:63:64:d3:06:47:1b:c4:68:6c:4f:0e:df:a5:
2f:3c:9a:8d:be:40:2d:0f:fe:e2:14:99:4c:b1:2d:
81:70:e2:e6:2b:cc:68:6b:bd:6e:41:1d:8d:07:95:
3a:e8:7b:cd:41:64:92:8c:b2:82:90:ec:f9:a8:94:
df:dc:85:77:22:75:49:97:6e:22:f5:0d:8d:df:8f:
6d:0d:d8:d7:52:a2:02:17:5b:e2:5b:c4:11:f5:3f:
c2:ef:c4:57:49:fa:a5:c9:4d:80:4d:e1:bc:65:17:
c8:1a:af:5a:0b:33:80:72:2d:3e:89:b9:a8:73:8b:
3f:35:aa:d0:1b:65:3b:f0:05:38:c7:d1:ed:5a:3f:
be:3f:5f:71:ff:81:1a:77:16:64:e3:7f:b7:e5:30:
df:1f:c1:0b:37:3d:f6:d1:1f:cc:f4:f6:d2:b9:1b:
54:15:54:50:b7:98:f3:ff:df:d7:dc:3e:4d:3e:40:
95:3e:3c:8b:a8:c2:3d:6b:7c:22:1c:6b:98:40:97:
e7:7a:9d:6a:69:52:8b:22:7d:5c:d9:5f:4b:19:19:
b0:b4:54:6a:e9:02:c0:53:d9:a8:96:fd:d7:32:f6:
40:0c:25:18:b1:52:d0:74:46:d9:c0:da:4f:86:fc:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:50:3C:C0:2F:AE:FE:C7:5D:9C:DE:19:E0:1E:90:9F:BD:E9:93:E5
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:03:9e:bc:83:6e:9f:5f:7a:40:31:65:b6:be:c0:68:0f:69:
36:a8:77:1d:98:6d:91:06:7b:88:0f:40:be:d3:c9:62:cb:b4:
cf:cd:25:a4:14:35:d6:10:2d:54:0c:f5:94:06:84:52:75:8e:
75:2d:a4:f9:3a:e6:bc:fb:c7:62:ee:39:da:9f:56:46:d4:49:
d4:ae:e4:29:54:02:22:1e:33:24:8b:bd:ef:0b:be:1e:0b:30:
7f:00:6d:0f:75:fa:8f:81:04:6f:aa:63:e2:cf:b2:96:c1:10:
12:2c:50:e0:e2:b2:8a:10:06:c1:27:ba:5f:3f:4c:d6:65:d9:
ab:a3:9f:bc:c4:e4:f4:72:ea:9f:1f:10:81:41:52:a8:7b:8e:
43:5e:44:39:5a:4f:a1:70:9e:b5:d4:f2:a1:4f:de:e2:b4:66:
72:15:b6:9d:66:02:4c:6e:47:fb:31:d5:4d:9b:98:cc:25:01:
8e:44:35:f2:94:33:ec:e8:be:1e:e9:83:38:31:4c:8d:b6:35:
52:52:e0:6f:95:cf:80:ff:77:e8:85:5e:68:1a:22:35:b5:42:
d8:31:c6:80:f3:45:e0:9a:aa:cf:6f:f0:0c:1f:83:54:6f:a1:
54:b1:5c:6a:b4:a9:ba:e9:9e:6f:57:54:5d:fd:d7:88:68:42:
8a:c4:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:00 2025 by rpki-client