Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: nbpMWJgDzuXc+VmcThDQL+iSfz5Akv1SGfwJoJvjC90=
Subject key identifier: 7B:C1:47:1C:A3:9F:EF:F6:F9:37:09:C4:FD:61:6F:C4:72:15:95:C3
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 0199FBEADE4E45DABFF8B0F9FA9E0DCEAC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:37 +0000
Manifest this update: Sun 19 Oct 2025 10:01:37 +0000
Manifest next update: Mon 20 Oct 2025 10:01:37 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: xNxC4zveT8prn8gkZ7Vo+14b7YgM55GelQutUZ/ywyQ=)
2: TtL1ROIX4qoe3FCQrbezbJvdiQE.roa (hash: EUtuOvVr+TGeDq+HxLBuoNhksrH6/dbzAs2zVkQm8sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:de:4e:45:da:bf:f8:b0:f9:fa:9e:0d:ce:ac:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Oct 19 10:01:37 2025 GMT
Not After : Oct 20 10:01:37 2025 GMT
Subject: CN=7bc1471ca39feff6f93709c4fd616fc4721595c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:fb:43:b3:d4:6e:73:7b:82:bd:23:cf:40:
24:b1:ab:50:03:c7:1b:b2:83:4f:84:0f:b1:df:b4:
7d:5e:f4:10:05:cd:54:64:f1:ee:17:3e:7a:87:7e:
90:d5:4a:99:fb:41:cf:9e:16:d1:ab:11:e3:06:d0:
82:d4:44:52:f8:69:e3:c9:6e:d5:7f:04:96:63:9f:
7b:df:1f:8f:f0:ac:7f:ed:c3:6e:a3:91:ed:17:5a:
3c:77:fc:0e:6c:83:58:bd:be:97:79:67:df:78:4e:
17:71:f7:84:0f:6f:0a:79:43:9f:a6:9e:4d:74:e7:
be:9e:af:ab:5e:53:31:00:5e:3b:4c:38:3e:13:d2:
12:fc:ed:bd:3c:a4:25:a4:fa:dd:4e:df:bb:f3:7c:
3e:13:f8:f7:3d:6e:43:8e:d0:8f:ba:c2:58:12:51:
58:13:9f:e2:29:79:9a:d3:96:9e:8c:dd:a9:b1:3f:
71:95:1b:4b:f5:60:03:6c:0c:56:ff:ab:a9:8b:21:
33:18:2b:3a:50:02:49:c5:63:1b:21:15:10:65:13:
ae:b1:36:8d:ab:5b:20:02:93:57:94:49:fd:b8:74:
23:22:be:5b:e7:44:e0:7f:21:4e:f2:2d:1f:20:41:
e3:93:57:50:1d:28:4d:70:3c:65:99:21:cc:72:29:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C1:47:1C:A3:9F:EF:F6:F9:37:09:C4:FD:61:6F:C4:72:15:95:C3
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:43:e3:cc:2c:05:cc:5c:46:4a:41:95:04:c8:6b:90:23:20:
1c:bb:44:86:76:2d:11:ac:00:8b:a7:32:ea:db:28:00:fc:7d:
d7:1f:f9:1b:7f:21:4f:fe:e4:64:de:35:e1:70:d5:48:fe:4b:
88:f9:4f:4b:42:19:2e:f9:b5:34:94:dc:02:5a:ae:43:56:79:
95:5f:86:81:c7:7a:5b:22:49:80:99:d9:f6:b1:40:d0:da:3c:
12:22:6d:0b:34:bb:ad:9f:e2:26:4d:b5:ae:e3:ec:32:df:07:
50:d5:06:6c:73:0e:09:f9:12:e3:87:e4:5b:ba:00:d7:1a:19:
9d:12:be:77:74:b7:a3:10:31:5e:1a:8b:0e:5c:80:f8:17:cb:
c4:1e:0c:d9:6d:c8:75:e2:bc:88:11:4a:7e:52:f2:78:1d:e5:
37:ce:9f:07:18:5d:8b:46:cc:e4:b1:f1:21:8a:e8:0c:ee:44:
a9:8e:97:7c:36:d7:7c:76:13:15:18:49:74:35:f9:fd:0e:48:
4d:66:60:9c:01:a8:59:aa:cd:40:1c:62:2e:2d:fd:9e:a0:fe:
7b:24:80:dd:38:f3:4b:98:9a:ec:02:e0:fc:fe:2e:3d:f8:15:
1d:e9:66:2a:cf:98:64:cf:ca:69:aa:b7:17:a6:ac:3e:4a:3c:
d5:88:04:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:44 2025 by rpki-client