Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
File: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft (raw, json)
Hash identifier: VXwX/YIWvvZn2e5zGJGFAB7oMwUaToHauc31kurhTIQ=
Subject key identifier: 8A:62:DD:9D:93:BF:6C:30:CC:9D:22:59:69:85:7A:46:25:4A:0D:54
Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
Certificate issuer: /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Certificate serial: 0199FEB4B92BA48F509AE9C8C7AA130F6E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
Manifest number: 15AC
Signing time: Sun 19 Oct 2025 23:01:20 +0000
Manifest this update: Sun 19 Oct 2025 23:01:20 +0000
Manifest next update: Mon 20 Oct 2025 23:01:20 +0000
Files and hashes: 1: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl (hash: 7qF3wSiHtEjlPV40Zxl+qAPrQ30PMOtdM2w7V9E7yUg=)
2: jnl0pkc8VZioDFc1rU2LXYR9u10.roa (hash: hBLoItEXtLXi0Hx0eyOzMHvYDZZAUIWBeCW6pZ7dYGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:b9:2b:a4:8f:50:9a:e9:c8:c7:aa:13:0f:6e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02
Validity
Not Before: Oct 19 23:01:20 2025 GMT
Not After : Oct 20 23:01:20 2025 GMT
Subject: CN=8a62dd9d93bf6c30cc9d225969857a46254a0d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:6c:40:d8:1e:97:75:88:a3:97:af:4e:22:
1e:42:ae:c5:17:55:af:91:d0:95:99:04:be:da:7c:
55:00:86:a1:0d:36:c3:ef:cc:6b:23:57:40:59:80:
55:92:1d:fe:30:3f:c7:8f:ba:19:e7:e3:bd:f4:8c:
f5:3a:f6:bf:c3:6f:89:a2:22:42:12:0f:85:9c:3e:
5f:0a:ad:06:2e:44:21:21:f2:21:91:f9:3b:15:21:
99:65:d2:5b:e0:b1:07:9b:ea:b7:5a:86:9f:9c:6b:
9b:fb:b9:a6:68:2a:cf:ac:21:c0:6c:38:98:c8:86:
2d:be:2f:d8:62:83:f5:ed:ff:c8:0f:fe:8e:57:a1:
55:f0:41:7d:92:ed:98:83:3f:06:06:31:17:8c:3d:
00:fe:a9:3b:06:70:11:6d:c0:20:b8:28:aa:d7:bb:
de:4d:02:a8:7d:51:bd:4d:c3:79:57:27:14:d2:2f:
d5:e5:18:fc:b7:24:b7:8b:9e:b0:92:94:4a:fe:dc:
47:bb:4c:ec:42:b2:38:0e:a7:82:52:03:ac:72:b5:
96:aa:a7:65:cc:2b:a0:0a:d4:bd:5c:e0:2a:83:07:
7a:e5:b2:ba:62:01:de:35:52:07:64:75:0f:e2:d9:
06:01:9d:ac:6e:1e:58:67:cd:29:9b:c9:7a:66:03:
72:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:62:DD:9D:93:BF:6C:30:CC:9D:22:59:69:85:7A:46:25:4A:0D:54
X509v3 Authority Key Identifier:
keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a6:18:c4:cc:64:e3:3e:1e:d3:f9:38:88:02:7a:57:45:06:
dc:82:5a:78:3a:11:0d:0a:b4:95:10:5b:13:66:1d:c5:4a:34:
a0:02:64:1b:56:5c:32:67:f6:61:03:a1:da:e1:f4:59:73:f6:
85:a4:eb:67:ab:66:5f:5c:16:49:97:8e:24:8f:80:20:4d:f8:
36:2a:54:73:ac:8f:09:35:28:29:33:6b:d5:8b:cb:33:bb:2d:
85:91:39:f3:fb:7a:0e:71:5a:19:72:5b:4d:ab:eb:65:aa:25:
6a:a3:29:cc:82:2c:0e:df:53:b2:29:34:d8:1d:d6:eb:11:1b:
32:29:ec:89:98:40:ea:7d:a7:e1:43:30:3a:ad:43:b6:dd:c6:
b7:75:5d:84:a9:73:ac:e5:27:c0:cb:8d:a2:fc:7b:4a:2a:c2:
55:b3:0a:f5:f8:0a:cc:ea:f4:ae:69:e3:d7:57:13:7e:af:fc:
21:80:d7:3b:94:30:65:37:aa:f2:1e:d7:07:62:af:6d:56:3f:
1b:ac:dc:28:a9:69:13:63:58:1e:ff:de:bd:02:95:f7:3b:da:
57:cb:2b:9c:76:3a:10:f5:d7:de:09:b5:7e:dc:76:57:e9:75:
e5:f6:63:a3:d0:97:e0:a4:be:f3:7d:5e:31:71:cb:81:0f:96:
04:02:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:05 2025 by rpki-client