Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
File: 2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json)
Hash identifier: DccjswaXX1c54mjUiFYFY3B2/MqY1mkVgijECn/WYyc=
Subject key identifier: 2E:31:8B:B9:E4:54:6F:92:DF:8C:6C:1D:14:43:AC:6C:D8:48:2B:08
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial: 0199FDD92A6C8A74DCDD720004397D57C102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
Manifest number: 0709
Signing time: Sun 19 Oct 2025 19:01:31 +0000
Manifest this update: Sun 19 Oct 2025 19:01:31 +0000
Manifest next update: Mon 20 Oct 2025 19:01:31 +0000
Files and hashes: 1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: E3UQn6noA2vgdQrZ650Otn9ydj9B8IIS4f0SJNpV0rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:2a:6c:8a:74:dc:dd:72:00:04:39:7d:57:c1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Validity
Not Before: Oct 19 19:01:31 2025 GMT
Not After : Oct 20 19:01:31 2025 GMT
Subject: CN=2e318bb9e4546f92df8c6c1d1443ac6cd8482b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:e1:a2:3e:0c:e3:ff:a3:db:70:4a:1e:4b:
8e:b5:9a:a4:8a:a8:bf:d0:9d:73:61:48:4c:df:c6:
1a:d0:e0:4f:11:e5:6f:1e:7d:c0:6e:af:98:c0:e8:
a2:c7:8c:c5:c3:4d:10:5f:53:93:1e:69:be:2f:bd:
6c:42:cc:07:6f:29:7e:9c:ed:1e:3b:42:ed:6d:13:
ff:84:fe:de:76:33:ca:38:27:1e:55:0b:a4:2e:51:
33:e3:33:98:b3:2d:7e:50:d6:50:7a:a3:2d:bb:d6:
47:e4:13:16:40:a6:53:75:ec:78:ca:88:60:ed:30:
50:16:9f:7e:22:cc:41:e5:c9:ce:f4:14:ee:59:69:
af:2b:4a:05:bb:36:4b:e6:f3:2d:05:32:20:4d:37:
f2:68:ab:48:48:4b:2d:f2:df:ca:2f:f0:23:44:eb:
01:33:37:ed:09:94:e7:99:77:42:4c:b7:ed:ca:c5:
42:88:8b:e3:90:15:f2:17:c6:18:3e:38:42:03:25:
d8:34:f7:60:20:ce:a6:32:8b:64:b2:3b:ab:bf:81:
0b:7b:bc:ee:f9:e5:fb:60:42:38:1c:4f:66:9b:d0:
40:ce:c7:63:73:ec:8f:a7:f5:fe:23:d7:50:40:36:
b6:0d:64:a2:be:91:c6:0e:df:af:dd:d9:4f:c4:ee:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:31:8B:B9:E4:54:6F:92:DF:8C:6C:1D:14:43:AC:6C:D8:48:2B:08
X509v3 Authority Key Identifier:
keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b0:d7:95:11:f4:75:eb:52:7a:96:cd:25:fe:fd:25:6e:3a:
b2:e4:37:e0:db:de:3c:bc:4d:9b:83:48:9e:78:24:17:4e:5d:
b5:00:8a:2b:12:bc:1c:76:32:cf:c0:84:4a:8f:24:c5:1f:ca:
9b:3f:b5:58:9b:af:e5:3d:00:74:a6:82:e7:9b:41:2d:3d:1b:
3e:28:7b:d6:1d:3a:5c:6f:f6:b9:dc:96:c4:aa:09:a6:fa:a8:
85:a6:8f:c5:ab:98:20:41:85:90:28:bb:12:e5:40:1b:42:5e:
12:0a:10:92:92:7a:4b:f8:b9:40:1e:1f:bf:d4:f6:ea:d8:7a:
2a:f7:e2:f8:14:48:34:67:d7:20:20:13:91:b9:1f:a5:41:6c:
65:65:c1:4a:ed:1d:80:c7:94:a3:3c:22:85:6b:3b:af:83:b9:
86:eb:b1:a9:6d:6d:b9:a6:5a:9c:a9:49:be:1a:ac:30:58:87:
1b:e6:f3:5e:eb:5a:e1:fd:15:75:2e:70:b3:d1:9d:86:31:12:
75:97:b1:ba:4b:1a:14:c2:a1:55:1c:e0:b7:e8:52:08:e6:f8:
bb:9d:28:a7:5f:e5:52:3c:e6:60:43:09:fe:52:56:6f:4b:e3:
7d:20:da:6f:36:ef:6d:f2:49:6e:06:31:d9:21:0e:f0:3e:f7:
0e:cb:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:52 2025 by rpki-client