Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier: vXdPANMn7JQY4l5GhkxCvZ/IaC5fLRMQQE9YDYPpUmo=
Subject key identifier: 82:B8:79:84:21:D4:2E:6B:F5:A3:DD:E3:3A:CC:7E:BC:24:CB:C5:7D
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial: 019A006BE27B3BC9375D8C897EB20083B633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 07:01:01 +0000
Manifest this update: Mon 20 Oct 2025 07:01:01 +0000
Manifest next update: Tue 21 Oct 2025 07:01:01 +0000
Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: LB3ZXiymiqDpaku2xjfIObCryDN16zBGuXIjx1rNs08=)
2: Kz3po1HxXV0o_QrY9XITSTFXVJI.roa (hash: VAFUPoAe7hllDMdDCgHvMZTasRHVjamq6QvBPj1A6Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:e2:7b:3b:c9:37:5d:8c:89:7e:b2:00:83:b6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Validity
Not Before: Oct 20 07:01:01 2025 GMT
Not After : Oct 21 07:01:01 2025 GMT
Subject: CN=82b8798421d42e6bf5a3dde33acc7ebc24cbc57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:df:a4:44:d0:c6:8b:84:c9:7b:ab:f3:0e:fe:
0c:69:c8:45:29:77:29:62:07:db:69:20:14:8e:1c:
ac:c9:2b:b9:7b:67:4d:6b:19:ab:91:c2:eb:45:2d:
17:13:ec:73:ae:8e:ce:ad:37:70:ad:df:c4:c3:e3:
3e:4a:3d:29:55:e3:b5:94:e7:2e:90:c0:a9:62:89:
d8:ab:8a:9a:3f:29:21:ae:3f:c8:17:f5:5f:1b:cf:
49:5b:7f:7b:d7:d4:53:45:ca:d1:09:12:ec:c1:bb:
8c:68:ed:3f:e7:2c:5a:79:77:d1:4e:cb:e2:4a:9c:
cd:57:6b:4b:cb:b7:80:06:b5:2e:2c:ba:64:39:bf:
a2:e1:35:a0:78:80:fa:bc:c8:29:de:d5:10:35:93:
f9:56:bc:ae:c7:e2:f6:08:42:fe:41:cc:c6:d5:d4:
fe:af:a4:09:34:94:a5:8c:79:61:23:d2:9d:c0:9b:
a2:f9:9a:28:93:cf:15:e0:76:20:25:50:4d:31:c4:
10:0e:2d:01:72:46:89:26:f3:76:63:f7:0b:5d:c9:
4c:e3:84:d4:6c:e2:b6:9b:92:70:33:67:f9:68:07:
4f:2f:08:75:61:c2:77:e8:4a:2b:5f:4c:b7:58:0f:
b2:35:c2:36:dd:d4:86:c5:f7:d9:2e:4c:09:6f:5b:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B8:79:84:21:D4:2E:6B:F5:A3:DD:E3:3A:CC:7E:BC:24:CB:C5:7D
X509v3 Authority Key Identifier:
keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f6:03:1f:d3:c4:9e:4b:8a:20:b0:47:71:8a:93:f6:8c:82:
3f:ac:53:90:1e:e9:24:a1:1e:03:bf:7d:56:a6:ee:ee:ea:78:
6a:0b:3f:ea:7c:89:83:83:0c:d1:fb:5a:76:b7:72:2d:19:d0:
34:86:6a:10:3b:f0:36:0c:9e:39:dd:72:fd:a6:3d:9b:63:fa:
f2:a4:37:a1:a7:84:af:b9:0e:61:82:24:2d:fe:eb:25:30:72:
65:84:2b:b5:fd:31:66:99:49:e5:68:92:09:31:5b:ba:25:10:
78:e2:76:f9:75:91:d8:22:08:26:93:90:e3:9b:d6:a0:41:64:
86:35:1c:10:7a:ff:b9:a6:20:23:ad:9f:21:e7:e6:67:d0:2f:
c4:2f:0b:6f:0f:8a:f4:c0:96:09:2a:1f:7b:7f:8a:71:95:57:
13:fd:8d:df:76:5e:5e:af:a1:61:4b:ac:f7:2d:65:1c:58:83:
45:ba:fc:49:74:3d:a6:75:e1:59:7c:3c:df:7a:1e:18:8f:f3:
2a:ae:d7:42:cd:c9:01:a1:e7:6d:6a:49:7f:92:18:ae:28:3f:
7d:62:31:54:84:b0:84:f8:75:67:a0:f4:3e:e7:ab:0b:e6:9b:
87:25:c1:bc:ba:8e:44:6a:3e:35:6c:4f:24:31:8a:78:b3:5d:
56:96:1d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:10 2025 by rpki-client