Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: 8foVwZrl32TR2d4AM4HNoxsYukuunhicx/06oHb1aCA=
Subject key identifier: 46:08:CE:F3:4A:40:ED:7E:49:FD:0E:10:42:9F:C4:FC:38:9A:C8:9B
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 0199FB45BF745F45B482962A960C5DBA93F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 07A8
Signing time: Sun 19 Oct 2025 07:01:16 +0000
Manifest this update: Sun 19 Oct 2025 07:01:16 +0000
Manifest next update: Mon 20 Oct 2025 07:01:16 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: cbN5FWIgRsF/ZlgKU4xAutlFLiNNB3hInlvOEYNnqFo=)
2: qg_gTG3kMJ8yASDHg8Zr6JAQqu0.roa (hash: wvAdPaglsI8ZgswNM7MBvLU8hMlTWlPPe6zU3kuMz4A=)
3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:bf:74:5f:45:b4:82:96:2a:96:0c:5d:ba:93:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Oct 19 07:01:16 2025 GMT
Not After : Oct 20 07:01:16 2025 GMT
Subject: CN=4608cef34a40ed7e49fd0e10429fc4fc389ac89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:24:35:dd:7c:45:81:d4:fb:2f:86:b6:cc:
c7:fb:06:96:f3:ab:6f:70:c1:6e:96:98:f1:90:66:
20:41:7d:e7:f2:73:30:69:99:b8:c6:af:8a:f9:f9:
9f:e5:9e:9b:1a:c0:7e:58:15:45:57:14:21:9f:42:
ac:88:1b:a6:f2:c3:3b:4a:a9:7e:29:3d:9a:75:2f:
43:f9:c1:f7:49:9e:e8:6f:65:7a:cb:43:58:6e:08:
b1:74:40:d0:66:f4:7b:29:5e:5a:bd:7d:6e:95:17:
30:3b:c5:a9:75:46:35:74:aa:e0:e9:75:9f:c4:d5:
fb:fe:7e:57:6f:8b:81:3b:1e:79:64:b6:6a:35:1e:
98:32:8e:bb:8c:2e:6d:21:80:91:f2:32:b3:78:ab:
a1:13:dc:63:8d:40:dd:37:05:c6:30:bc:17:6a:d4:
29:09:29:61:b8:e2:18:12:13:0e:4f:e8:c7:20:f3:
f2:57:b2:a4:a3:27:f2:f9:17:2e:73:9e:ec:65:e6:
cc:bc:68:21:ae:87:f4:a9:26:f4:b0:bd:dc:ef:3f:
02:95:6c:78:a6:dc:48:9f:1e:80:61:e2:a8:58:bf:
03:c0:2b:09:cb:49:c7:cf:46:3d:fe:20:6b:25:72:
a3:31:78:29:37:60:b5:bf:23:69:1e:36:9d:2b:46:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:08:CE:F3:4A:40:ED:7E:49:FD:0E:10:42:9F:C4:FC:38:9A:C8:9B
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e5:3d:10:52:f6:92:0f:71:10:d6:9f:62:4d:58:12:9e:50:
9d:51:3c:ea:a2:2d:57:ee:75:fe:55:24:b8:40:08:41:37:ee:
85:3f:82:4c:d8:84:20:8d:fb:64:a6:f7:1e:28:9e:95:50:31:
1d:9e:a5:9d:c3:4f:73:bf:ce:8c:bc:88:c9:29:2b:10:ef:0e:
61:04:f1:26:49:b4:67:01:05:17:f2:98:af:9f:d9:52:56:c4:
6e:88:12:5a:cb:cd:a6:ac:77:ed:c2:c5:83:14:3c:eb:6a:3c:
75:b5:bf:a3:51:43:37:06:6a:4f:c7:e9:6c:1d:91:34:a2:da:
e2:25:9f:5c:9c:8e:47:37:e4:cc:de:b6:49:2e:c3:bc:a3:c9:
5e:9f:a5:ee:fe:51:05:76:62:24:51:1e:0d:2e:e6:d8:f2:a4:
6d:c3:cb:0c:d9:b9:3b:57:95:a9:4a:b7:46:a9:03:23:cb:22:
d0:ab:87:7f:47:00:0b:eb:a6:2f:e0:2d:24:c7:e8:8e:0e:b5:
a6:4b:60:d1:3d:fb:67:40:cc:76:c1:76:12:74:04:a2:fa:e5:
81:51:a0:c5:94:3d:f5:05:2d:b3:23:82:37:d0:3d:af:2f:fb:
5f:32:b5:e2:79:22:9b:49:16:11:f2:af:ba:6d:e1:f6:f1:3e:
23:12:2f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:25 2025 by rpki-client