Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
File: 2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json)
Hash identifier: X9Nv+u9fM3gAe9aIUZM3Nt3LBT0z4wRb5a6jk8SRdMI=
Subject key identifier: E2:A8:DC:E6:57:9D:6D:5A:65:3A:2D:4B:78:A5:F8:2D:9F:56:87:29
Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
Certificate issuer: /CN=d89919fb51a705111d6996eec30ffc442de97a2f
Certificate serial: 0199FB45FA7347168D88EC076758D9A93E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 07:01:31 +0000
Manifest this update: Sun 19 Oct 2025 07:01:31 +0000
Manifest next update: Mon 20 Oct 2025 07:01:31 +0000
Files and hashes: 1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: +j12bufNcLc9p1lxsd5oSmf/sr5BcFpLG8EUqvFGEJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:fa:73:47:16:8d:88:ec:07:67:58:d9:a9:3e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f
Validity
Not Before: Oct 19 07:01:31 2025 GMT
Not After : Oct 20 07:01:31 2025 GMT
Subject: CN=e2a8dce6579d6d5a653a2d4b78a5f82d9f568729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:50:65:83:9d:20:b0:db:b1:f0:00:91:f1:
24:42:c9:a8:05:5e:6c:b1:32:4e:27:95:54:58:1e:
19:c6:d3:b8:82:9d:c1:86:1f:97:2a:ae:ca:f0:34:
85:48:fd:b2:cf:05:b5:37:f8:97:56:a5:c4:d1:74:
a8:f9:46:a8:95:59:79:24:9b:8d:95:ad:b2:13:65:
0c:62:55:ff:f1:52:b9:4e:2c:65:17:dd:e2:ad:fb:
12:73:70:cf:1e:99:98:3d:84:1b:0d:f1:13:cb:f0:
72:f6:af:b4:a7:3e:7f:0f:24:57:f7:51:9b:37:06:
ad:b4:e7:dc:12:2d:a8:8f:07:0e:80:64:5b:9a:0f:
25:2e:a5:47:5b:c0:8b:89:64:fd:ff:a6:cd:59:d6:
5a:86:b6:dc:a1:95:c3:e9:79:9f:1d:90:13:8d:ee:
ac:95:10:fa:9e:c5:1a:23:b4:1c:bc:ea:16:25:20:
f3:59:4d:6e:4b:6f:4d:05:7e:38:ed:12:94:e8:8d:
db:3d:55:54:ed:39:17:da:ce:fe:f6:89:20:eb:bd:
85:11:a5:22:30:1a:0c:bc:96:6c:bf:8d:69:71:2f:
97:80:af:da:40:6d:8b:bd:c5:30:2c:0b:1e:21:d6:
ca:1b:0f:df:ae:ce:e7:a7:40:45:16:05:c2:7c:da:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A8:DC:E6:57:9D:6D:5A:65:3A:2D:4B:78:A5:F8:2D:9F:56:87:29
X509v3 Authority Key Identifier:
keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b1:5e:ca:31:48:f4:5f:48:a5:d1:f0:77:b1:0c:66:15:8f:
63:1d:ce:0b:7e:29:97:7f:11:b4:16:60:42:1a:5d:b2:98:53:
61:3a:b6:1d:8f:d1:bc:88:35:96:2b:6d:11:86:10:95:db:46:
62:a7:86:06:48:a2:63:3c:49:52:ad:67:ce:97:3b:88:1b:bb:
ce:d5:8a:8b:0b:aa:60:7f:bc:db:59:3f:77:94:0d:31:c3:91:
52:f5:8b:bc:7a:97:2e:f5:bf:7c:75:62:72:06:77:9d:7b:74:
6d:e0:f1:20:2e:1b:e7:c6:b7:cc:f6:54:1c:7c:23:20:2d:c0:
09:38:1a:63:63:31:50:88:37:de:e8:57:39:fb:9a:e7:b3:24:
df:cd:03:30:4b:41:8c:e8:02:c3:73:6c:92:16:6d:54:f9:21:
69:73:06:57:6a:b4:ab:be:2c:1a:14:28:5d:8a:5b:7e:fe:9d:
62:c5:30:df:d3:28:93:69:2b:0b:13:9b:34:b4:54:2e:de:64:
b8:30:7b:58:94:f2:fd:ab:03:66:f5:87:62:96:0e:e3:d7:2e:
43:90:25:74:21:e5:d1:66:f3:93:ff:3e:b2:e8:91:e7:55:76:
14:85:bc:06:f2:75:b0:a3:1a:b9:08:f4:54:f3:03:dc:a6:99:
bc:27:5a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:46 2025 by rpki-client