Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
File: s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json)
Hash identifier: /KTtv0cmSUN4kJDyfDl1GJOmQC0qCHiCiPLyNr0+2KY=
Subject key identifier: B1:5A:B6:E6:C8:12:32:5E:04:A7:3A:59:2F:D1:54:4D:2F:B0:24:8C
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 0199FCFD873BD8945B74D8DB1C98D7593469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
Manifest number: 06B9
Signing time: Sun 19 Oct 2025 15:01:37 +0000
Manifest this update: Sun 19 Oct 2025 15:01:37 +0000
Manifest next update: Mon 20 Oct 2025 15:01:37 +0000
Files and hashes: 1: 9pPz27JGQLU2k4Cv19ksHTIF6XA.roa (hash: UiF2JHV9wR4fk8UlKATn/RRbasL4AJJse9aZNGFTtIM=)
2: PHlmZzsVHNdtkbgZZGVIzuxsSOI.roa (hash: nURq80w5QR4Tg4i37nqE1f7UXJnobOs0QVmX70MkIAU=)
3: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: u7fOhS6CwOwC+ZF65grxLKgNplbJYBdc42/14Wxs84s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:87:3b:d8:94:5b:74:d8:db:1c:98:d7:59:34:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Oct 19 15:01:37 2025 GMT
Not After : Oct 20 15:01:37 2025 GMT
Subject: CN=b15ab6e6c812325e04a73a592fd1544d2fb0248c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0b:e5:f7:cd:f0:1e:56:7f:1c:6a:da:21:01:
c5:d0:91:23:7f:ef:b7:ac:98:26:d5:0a:2b:4b:4d:
86:1c:d4:73:0d:59:14:3f:21:72:f1:79:fa:24:67:
b4:1d:99:56:f6:5f:8d:bc:a5:0c:65:c1:94:3c:83:
1c:00:13:3d:58:03:b1:6a:87:16:83:13:5b:a4:3f:
0d:61:b0:d2:03:d0:cf:db:04:ca:04:01:57:83:a6:
31:36:48:5d:2b:30:4e:f3:39:78:3b:49:f8:d5:20:
44:ea:c1:2a:48:f7:17:0c:44:47:c5:12:98:26:d8:
10:58:6e:e6:60:57:57:54:d9:e8:a1:68:b4:22:a4:
03:89:4e:ef:f5:74:d9:4b:36:73:7e:a7:c8:ab:47:
2c:08:6a:c8:c5:ab:66:6b:9f:1d:cb:56:31:4c:08:
01:7d:ad:96:62:e7:49:cc:2f:86:e8:f4:46:5f:86:
d5:11:53:49:7d:66:1c:86:0e:89:0d:7d:ef:c4:96:
9b:8f:ec:fa:e8:8a:87:0e:27:78:14:08:f0:7d:90:
dc:98:6c:c4:2d:48:fd:3f:ad:0c:5b:70:71:78:ef:
2b:23:28:e7:b3:f1:42:3f:f9:2a:fd:17:b2:1c:cf:
2f:78:25:ea:84:e0:c8:b5:95:73:71:a4:61:cb:c7:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5A:B6:E6:C8:12:32:5E:04:A7:3A:59:2F:D1:54:4D:2F:B0:24:8C
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b1:62:67:8e:e2:2f:99:de:e8:4c:74:25:a6:a4:7c:85:ac:
69:22:a6:92:6b:9f:bb:d3:7e:15:3d:1a:c3:b9:b1:89:6a:09:
8b:fb:46:7a:0c:2d:25:64:63:f8:83:d8:f0:97:03:fa:85:d5:
bc:9c:d1:93:5a:25:cb:ce:85:93:01:e8:64:63:91:bf:e4:bf:
50:42:b9:5f:ec:37:2a:db:2d:90:b5:fd:93:07:df:6d:09:aa:
a6:86:fa:f3:aa:0b:72:ad:fd:dd:2c:93:ed:4c:23:f8:db:25:
e8:f9:ea:ae:6b:17:95:79:31:49:23:d4:c5:5c:e3:4d:6f:ad:
59:61:fe:d5:5a:94:e3:36:33:39:d9:d6:24:68:ee:a1:ee:3e:
43:d2:54:77:86:ce:45:a6:63:bf:22:e5:e6:f5:c1:90:16:14:
4f:e5:da:fc:b1:da:2c:3d:3a:62:86:00:20:7a:66:84:ed:6b:
a9:bc:3b:8f:ea:ed:db:09:77:f8:d0:c9:f1:09:84:21:67:b6:
26:38:e9:f0:d1:87:c7:ad:a0:36:f6:ab:cd:d2:cd:a2:fc:33:
39:34:c6:b8:c4:67:15:53:19:75:14:34:7e:87:3c:d9:f5:df:
5d:c1:f2:9c:3d:a1:f5:75:6c:16:7e:7a:74:90:83:6b:10:a1:
d8:fa:db:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:50 2025 by rpki-client