Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
File: 2yadDqjKpAx6cEOCyrU-GwJta0M.mft (raw, json)
Hash identifier: Oiq3+yPqQC4bOTEUTOgGHiN1PKRyDxW0MypgADChPfE=
Subject key identifier: 1F:F7:2C:CC:4E:F8:BE:11:0F:BC:56:F2:7D:48:14:38:7F:FA:6B:55
Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Certificate serial: 0199FBEB859B248B659431B8B1CBFBE422B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
Manifest number: 12D5
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: 2yadDqjKpAx6cEOCyrU-GwJta0M.crl (hash: qTzTKH2WzfWciedxA2K7WecVGNcVGupIsoBQ2wnVIGg=)
2: RcnM5lD2VLhEfstSA8lcgXJNriA.roa (hash: GF0NRv6wYAFFTQXDxXlqCyxzESzyOdSaMUY2OronBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:85:9b:24:8b:65:94:31:b8:b1:cb:fb:e4:22:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=1ff72ccc4ef8be110fbc56f27d4814387ffa6b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:be:4b:89:a9:87:b1:ca:68:a6:a7:f4:b0:
81:49:92:db:99:dd:e0:ee:ad:11:59:2f:dd:11:77:
41:2f:55:cd:b2:d5:5d:33:82:ff:22:79:76:30:4d:
24:50:b4:c9:13:9d:9d:63:71:68:8f:05:19:0c:d6:
eb:55:25:e0:6e:a7:9a:6b:42:3c:ed:44:2f:39:97:
e6:92:60:14:e3:61:e6:c2:e5:5e:d7:42:99:7b:58:
71:7d:69:3b:a5:b7:a2:a2:83:72:47:2c:fc:fb:b9:
88:bf:eb:00:24:1f:99:0a:c1:c9:9e:23:ed:4a:68:
9a:23:d0:4e:3d:87:41:c0:c3:54:10:e9:06:d9:e2:
40:db:93:d2:24:fd:ce:cd:8c:2f:83:00:68:d9:ae:
e3:d8:7a:8f:69:f0:d8:dd:bc:90:3d:51:44:42:db:
9f:6f:ed:4d:28:f8:2c:20:ca:66:85:55:be:05:51:
4b:60:b2:54:15:d5:7e:46:39:53:f4:45:57:f8:fd:
14:e1:c6:81:f4:85:f7:d4:3d:ac:4a:11:a4:3e:77:
cc:21:18:73:12:55:76:d6:67:98:44:38:da:29:75:
da:85:f3:88:64:d2:3d:76:ae:58:c9:37:41:59:11:
91:71:3d:4e:fe:6a:87:c5:66:4f:69:d2:31:14:25:
e6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:2C:CC:4E:F8:BE:11:0F:BC:56:F2:7D:48:14:38:7F:FA:6B:55
X509v3 Authority Key Identifier:
keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:2d:3e:fc:54:88:cf:98:80:d7:70:ff:6e:d5:a9:21:84:29:
84:c6:db:17:17:a4:20:83:58:13:57:db:6a:56:e9:6f:b9:96:
68:36:13:e0:de:39:cb:87:01:7d:01:31:9e:e4:66:27:a9:18:
02:8e:c1:8e:3d:ed:10:32:c6:a5:6b:78:2c:1b:7e:72:15:12:
24:4f:84:ff:bf:ec:65:1c:e3:1f:6b:f1:64:45:c5:77:3d:88:
78:4d:eb:2b:f6:3e:f7:01:f7:22:8b:32:23:43:6d:c8:74:d1:
29:4c:fd:e2:95:1c:b2:98:3c:e3:63:05:13:04:ae:5a:2e:0a:
7a:40:49:5d:f7:d8:3f:e3:01:16:20:03:60:27:0a:22:46:01:
a7:cc:c5:53:c4:ad:71:72:26:20:00:30:6b:5a:49:70:cc:9d:
23:1b:ac:54:ae:33:51:94:af:1d:ef:74:26:f8:dc:6f:05:08:
62:30:10:35:88:51:be:1d:f9:1f:b9:b8:37:f6:4b:71:95:7a:
04:c2:47:50:2c:65:61:42:c8:ed:c0:4d:3d:01:ca:83:85:16:
fe:87:bf:ac:47:80:54:aa:e4:fb:ff:ef:1c:ed:2f:82:d7:08:
01:16:8b:32:e5:e9:87:fe:e0:aa:6d:81:58:ab:43:74:ab:28:
aa:d4:3f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:36 2025 by rpki-client