Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: 4puOWHaNq+obI5gm1t6WZO7SI5hBj2NGCkgB04q0U1A=
Subject key identifier: E7:34:C6:38:9D:BC:62:45:58:3F:45:37:8C:8A:E0:D7:56:EA:BA:68
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019A006C48E6B67F13D92159B8C6E726C0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: E2
Signing time: Mon 20 Oct 2025 07:01:27 +0000
Manifest this update: Mon 20 Oct 2025 07:01:27 +0000
Manifest next update: Tue 21 Oct 2025 07:01:27 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: /iR5ymlz056WZ/vCSe5ivnZLbZDc0P5iX3s47lQUbyw=)
2: Yl5dVHvt8TLEuXDW_2N88snHkxY.roa (hash: RVpoQeieFNCy2NDCVSw5A9nvcWMxgvqJyoDHS7AWVvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:48:e6:b6:7f:13:d9:21:59:b8:c6:e7:26:c0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Oct 20 07:01:27 2025 GMT
Not After : Oct 21 07:01:27 2025 GMT
Subject: CN=e734c6389dbc6245583f45378c8ae0d756eaba68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:32:96:07:d9:f5:ca:81:e0:fc:1b:8c:bf:
1f:c6:8f:bb:34:89:b3:fd:29:48:b6:09:34:4f:9c:
dd:c7:c9:54:e5:5e:f1:e6:27:bd:34:34:05:75:7f:
81:58:d6:5c:3b:18:94:e0:cc:f2:49:88:14:fe:f9:
0c:22:ac:f6:e0:da:06:ab:80:e2:d7:1c:de:49:23:
63:47:74:f3:12:a3:e5:14:61:6b:34:b2:12:ba:d4:
4b:db:96:bd:e7:6c:ad:47:be:3c:73:68:b1:19:b6:
87:c6:3e:a9:6f:15:8b:66:10:08:43:6c:5a:48:3b:
be:65:62:cc:96:df:0c:e2:2a:12:2a:ad:eb:09:3e:
f9:86:d1:a0:04:e8:36:9c:d8:3f:a8:9c:13:0d:37:
b4:1c:11:4b:75:ba:09:d3:f5:a7:89:4e:d4:ef:d5:
94:41:47:ee:13:d4:3f:5f:80:55:13:4a:9c:e8:57:
30:91:58:fb:ce:6b:be:c9:be:b6:3c:59:c7:e1:37:
4c:9e:ff:67:e8:2b:6f:1a:ac:f1:3b:4a:87:a5:8f:
a1:9f:bd:fd:c3:a9:1b:65:23:96:d8:d5:6a:7d:99:
cb:78:3e:88:98:cc:34:87:c7:bc:7e:31:b4:db:8f:
ab:c4:89:b6:e8:d9:be:bd:2c:61:35:84:6d:20:12:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:34:C6:38:9D:BC:62:45:58:3F:45:37:8C:8A:E0:D7:56:EA:BA:68
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8d:d2:2c:9c:11:f9:1b:3d:19:ba:8c:f3:bf:6e:a4:45:b5:
15:52:6c:c2:3a:2e:7d:6f:01:67:03:c7:9a:a7:51:d7:60:95:
a9:5f:6b:8c:51:7d:67:59:b7:4d:7f:b6:0a:88:f7:17:9b:4f:
ad:29:b9:2c:23:7a:06:69:5a:d6:cf:e9:a3:a9:9c:c0:99:83:
95:5d:87:95:6b:a8:0f:1a:46:7f:e0:e7:b5:9f:07:99:4d:23:
7b:6b:7f:6a:ac:1f:87:5a:e4:e2:5e:23:32:04:2d:1f:ab:04:
cd:07:87:4b:83:83:19:42:62:b7:39:5b:8e:59:f2:9d:ed:a7:
e2:d5:82:9e:36:19:fa:63:10:0b:35:c9:00:94:3a:aa:ac:e5:
ef:77:40:ef:19:e7:40:1d:bf:0c:8c:1f:10:dd:1b:e6:29:55:
1b:b1:f7:25:9d:88:99:78:d5:f7:af:1c:62:5c:69:9c:57:bc:
a4:40:6d:57:dd:30:2e:c8:75:66:57:c7:8f:e7:21:1a:38:0a:
ae:cc:0a:67:ae:2b:76:39:64:0e:1c:a9:08:66:69:c6:ac:27:
2e:77:be:95:e2:3c:84:c1:fc:29:18:14:4e:9a:b0:0a:14:a3:
c8:8d:83:a2:73:65:5f:59:2a:69:fb:6b:37:a3:7f:2a:76:cd:
3d:e5:68:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:40:53 2025 by rpki-client