Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: CX0ZYauHbtFcsVtA/Lv7oRcIUZdeo6agZS8ve5jCQPw=
Subject key identifier: 34:E9:4A:C3:2B:ED:BC:06:DE:03:9D:AC:91:20:D0:C8:E8:A5:57:39
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 0199FC8F3CB452B96E4E9D85B8B66D236797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 1546
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: /h2bbYsfNteFjkP2vQf3m5JHaJbFylf+qZgMYJetB7Y=)
2: LP9-87x2sFdExSVGnQl66ksWebM.roa (hash: FCz58YZkBtrnj9bFMj0dGjpjaE2bGxIe0P3tBukrHxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3c:b4:52:b9:6e:4e:9d:85:b8:b6:6d:23:67:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=34e94ac32bedbc06de039dac9120d0c8e8a55739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:3e:19:fc:d8:4d:5f:b0:12:eb:7f:31:c4:
7b:06:80:76:cb:53:7e:84:a0:c0:3d:cf:60:a9:6f:
18:cd:c7:f1:cb:c2:23:28:5d:b3:19:98:93:d9:0c:
57:83:c0:a5:b1:89:c3:57:70:08:0d:22:d5:7a:4c:
46:b8:e9:09:57:f3:41:dc:a8:c2:65:08:05:be:2c:
98:fa:b4:f5:c3:ca:62:5a:ae:25:1e:ab:88:f5:32:
c1:91:04:58:84:5a:ea:e5:ae:c6:db:97:55:d2:26:
05:e5:b6:3e:bf:c6:27:3b:1d:c9:48:46:f4:6a:70:
d3:35:95:9b:6d:95:a6:d8:98:65:5b:32:50:b4:b8:
bc:5d:a8:d4:5a:ea:5b:d2:4e:80:24:b4:e8:50:a0:
a8:ba:02:e3:51:7c:84:1c:55:0f:87:2c:b8:b6:7c:
fa:9b:49:1c:c7:bb:b1:cc:8c:d2:95:47:0e:3e:c9:
fa:4d:9e:5e:13:8a:4a:fd:ba:96:17:93:5c:be:7e:
81:47:b5:2a:17:6c:32:dd:38:cb:64:76:44:2e:86:
0f:39:58:7b:34:fe:c6:36:1e:e4:aa:5d:fa:7b:5d:
bc:e3:2e:b6:d1:f7:1f:52:f9:1b:70:14:bc:44:60:
f5:cb:c5:af:28:8f:8d:21:7c:c2:9b:16:59:b7:75:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E9:4A:C3:2B:ED:BC:06:DE:03:9D:AC:91:20:D0:C8:E8:A5:57:39
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f4:1a:81:1f:8f:b3:36:3a:18:98:20:ec:a1:c7:97:ea:e4:
9f:66:a5:1f:cc:f8:89:c6:31:2f:34:11:3b:66:4b:7e:73:5d:
0b:3d:1f:aa:e3:ff:e5:69:dc:5d:f7:09:f6:35:80:67:a2:5f:
a4:fc:bb:37:07:ec:87:a7:02:8c:b5:54:a4:e8:11:2a:a3:27:
80:cb:a5:59:1c:2e:d1:bc:1b:e8:3a:1c:3c:66:68:0e:04:dc:
f6:32:d2:7b:37:30:e5:f5:3e:cf:11:d2:8d:a1:02:a7:06:25:
f9:d2:50:72:f7:67:82:ec:65:ed:ac:5d:8c:51:43:30:83:18:
ca:ec:d3:39:a2:eb:55:00:21:95:1a:49:db:28:e4:f6:70:49:
05:8a:ed:09:28:7f:c1:49:ef:90:b2:04:91:c5:ea:cc:94:8e:
2d:67:dd:91:28:d5:78:ab:a2:4a:36:df:f0:4a:25:6e:5f:b2:
26:34:2b:23:97:df:17:7f:81:b3:b6:72:90:81:a0:21:2c:4f:
19:cc:55:d2:9e:53:49:ca:dc:23:d0:dc:4b:d3:b4:0a:23:9b:
61:dd:5f:4d:ba:16:fc:6d:08:eb:e4:b7:3f:1d:85:30:11:4e:
5d:3f:60:f1:5a:5d:29:38:01:07:2c:3c:79:ff:c7:b6:77:5f:
88:72:b4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:02 2025 by rpki-client