Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier: NMwRwsCvEZXt2XIjl6opHP8EHZF13y2HQNAgzZTJHDc=
Subject key identifier: AA:44:86:1A:99:C4:F3:4C:6F:BA:8A:D1:6B:F9:8D:4E:7D:92:BF:C7
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 0199FC8F9A9A29E784327FC47C0709461F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number: 11BE
Signing time: Sun 19 Oct 2025 13:01:33 +0000
Manifest this update: Sun 19 Oct 2025 13:01:33 +0000
Manifest next update: Mon 20 Oct 2025 13:01:33 +0000
Files and hashes: 1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: cZTwAIQSK1TfQjR03UeYyVmFMuy2c/qm/e/bvKZmH7k=)
2: 2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa (hash: h6MTPJcLMkfrB1kWDTEOldnlj7IXiEuYpsdekwYMKvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9a:9a:29:e7:84:32:7f:c4:7c:07:09:46:1f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: Oct 19 13:01:33 2025 GMT
Not After : Oct 20 13:01:33 2025 GMT
Subject: CN=aa44861a99c4f34c6fba8ad16bf98d4e7d92bfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:3b:18:e7:ac:19:6e:5a:fd:44:63:fd:94:
03:c6:76:92:d2:18:12:c4:18:9c:cc:40:70:1b:12:
17:96:32:f4:ad:c1:5c:11:b7:c8:4c:e1:8e:9a:17:
cb:6b:ab:72:df:b8:78:16:ad:d8:34:81:23:fd:c3:
f1:70:9a:6d:18:38:c0:e7:74:94:15:64:0f:32:f7:
04:12:58:58:64:13:4c:50:33:b2:de:23:59:6e:d8:
cc:15:ab:e2:52:3d:03:3e:28:c8:0b:94:8a:75:73:
06:5d:eb:ac:9b:c1:9f:30:79:5c:c7:47:04:db:1d:
35:8d:ff:35:8f:bc:1b:19:ce:c0:40:95:3d:3d:e2:
6e:0f:3c:54:e0:b1:2a:3f:a1:c3:21:19:bf:26:13:
d5:b0:fc:06:17:bd:11:f1:c7:b5:1f:7d:76:60:82:
f7:c5:5b:8d:ec:08:3b:c2:fd:61:9f:a5:f5:c7:cb:
5d:48:59:0e:64:af:4f:2d:85:a6:47:b6:c1:6e:10:
09:32:51:a2:9d:fe:77:65:eb:ec:07:c9:7e:dd:7c:
af:40:ae:4e:26:be:a5:13:1e:e1:df:62:3b:7f:80:
01:82:ff:43:0c:da:01:43:c1:e2:95:ab:40:22:d6:
09:23:55:59:cf:c5:35:33:3f:47:e7:83:a1:4a:b4:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:44:86:1A:99:C4:F3:4C:6F:BA:8A:D1:6B:F9:8D:4E:7D:92:BF:C7
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f6:0a:f3:b3:5c:f7:02:7d:fc:74:c0:38:39:c0:f7:b7:88:
37:65:5e:76:56:39:09:54:56:82:6b:38:64:2e:2a:cc:83:86:
d4:95:e6:c9:4c:c2:92:f4:05:ae:b3:d4:a6:dc:98:65:ec:a3:
56:a7:99:d3:78:26:45:8a:49:31:eb:9b:91:ec:68:ff:42:0f:
f0:e8:e6:00:10:46:fc:eb:5d:84:c1:19:35:81:91:ad:ba:ff:
c8:a3:6a:55:ac:a6:28:04:a7:f2:9b:09:59:af:e7:3b:94:ba:
be:47:b0:ae:8c:c4:c4:ce:f2:cc:21:22:da:8a:34:9e:35:0b:
30:81:d4:79:cb:be:3a:2b:be:94:d2:5f:1e:2b:78:16:a8:61:
c6:f8:ec:ad:4d:9a:71:e0:a3:96:ee:05:f4:d6:c8:97:5f:98:
51:2d:1a:8b:24:19:47:df:14:4a:ee:60:2c:0c:24:cc:c0:9d:
7e:c6:4e:07:60:3e:f2:07:08:30:25:3b:f5:e5:b5:fd:3b:bc:
5e:7e:b5:32:0d:b9:df:aa:14:cd:a9:9d:d0:f3:32:72:c7:fb:
fd:25:e1:71:5c:31:c4:19:c6:b3:b6:f2:f3:9a:8d:6d:db:37:
04:9e:0d:c3:c9:da:8b:06:52:4b:cf:08:e3:c2:bb:e7:02:15:
da:68:2c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:15 2025 by rpki-client