Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier: Dr0KhBw3Bhjl/3j5J+SWJI0vvGrSzxWmdKVee+Dwqlo=
Subject key identifier: C9:B6:D5:15:34:15:24:FB:13:3D:24:A4:59:88:7A:3C:E2:BD:36:20
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial: 019A01EBDB0BB7944FB64A001D8A16827DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number: 1156
Signing time: Mon 20 Oct 2025 14:00:25 +0000
Manifest this update: Mon 20 Oct 2025 14:00:25 +0000
Manifest next update: Tue 21 Oct 2025 14:00:25 +0000
Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: hVzvF3N+HYKO5/hwLUlWoJmKnl+JFSKMd2mDVQJFH+s=)
2: vmvMz7iYINXEEkk8q3hTcUEqEpc.roa (hash: cIoty3QgZcrRdlAsEyLTb5L8GB5LiEjn7CzAwFabxRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:db:0b:b7:94:4f:b6:4a:00:1d:8a:16:82:7d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Validity
Not Before: Oct 20 14:00:25 2025 GMT
Not After : Oct 21 14:00:25 2025 GMT
Subject: CN=c9b6d515341524fb133d24a459887a3ce2bd3620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:0c:8d:84:68:45:bb:24:58:07:5d:0b:97:
8a:95:c7:e7:70:7c:a4:bc:e1:26:f1:bb:bc:c4:15:
a9:05:6b:e4:f1:77:56:71:71:72:ea:4a:04:f4:de:
d0:81:98:15:76:18:ee:2b:e3:5f:d9:4a:46:6a:12:
83:37:2f:e9:3e:2e:c9:d9:7c:ce:5f:8a:36:3c:41:
50:43:96:cb:42:4b:f1:c2:e4:ed:2c:65:f0:70:09:
f2:42:ab:68:69:6e:07:d6:60:c6:32:c3:fe:7b:ae:
36:7d:26:e0:cb:6a:4b:46:be:48:e7:87:83:cf:4f:
d8:f9:e6:63:76:38:44:c5:01:94:1b:59:59:ce:46:
89:9e:83:57:7b:92:95:59:a8:f3:9c:0d:63:56:55:
21:68:39:76:cf:10:28:a4:b7:41:89:39:13:e7:09:
cc:6e:95:99:b5:fc:20:c4:d3:56:dd:6b:fa:a6:36:
e4:69:27:46:46:54:ae:e2:bb:3a:64:56:ce:79:82:
d8:7b:1a:c2:72:72:b1:b3:bf:05:8b:ce:37:c5:8b:
6b:b3:cb:45:aa:45:18:ce:7a:fa:60:63:18:37:7d:
7a:74:20:57:85:5e:b3:cc:f8:68:f4:41:8b:37:8e:
b8:7a:e6:18:b1:a7:ce:a0:b6:5b:75:e5:23:87:dc:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B6:D5:15:34:15:24:FB:13:3D:24:A4:59:88:7A:3C:E2:BD:36:20
X509v3 Authority Key Identifier:
keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4d:38:f9:67:dc:88:c9:57:2e:91:96:50:4d:9b:d7:81:85:
63:12:e9:05:54:d8:8a:a7:99:8e:a8:76:11:45:16:59:69:4c:
85:fb:a8:26:cf:6f:9f:cf:4b:3c:da:a7:66:51:f4:92:76:74:
a1:69:ed:f5:d8:fe:61:f5:d2:c1:7f:fc:d9:52:88:84:08:e7:
c7:ca:e4:04:bb:c1:a4:5d:0f:da:5a:f0:26:45:cf:c0:93:29:
dc:11:a4:02:7d:44:37:41:c2:2a:c3:93:ad:57:94:2e:64:b1:
04:5b:e3:09:38:a5:f5:1a:c2:5c:15:91:ba:7b:da:38:e0:a6:
a0:3e:77:11:07:c4:8d:22:e0:1f:2f:0e:01:11:08:5f:53:db:
bc:56:35:42:69:fe:7d:67:b3:94:fc:71:fc:2c:b0:6a:ae:45:
55:bc:e0:0b:34:5b:97:fe:7f:20:d9:07:bd:b8:a6:35:c3:c0:
32:b8:ae:3d:2c:30:cd:25:6d:71:ce:9e:c8:04:d3:ee:66:03:
d4:e4:f8:d7:b7:0e:96:57:31:fa:45:ef:06:19:67:ed:15:c5:
ed:fa:31:30:f2:34:67:e6:6a:dc:57:be:05:90:30:88:8d:47:
d5:71:da:49:75:34:c3:88:30:bc:b4:23:ab:26:aa:6d:96:ff:
b3:ce:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:50 2025 by rpki-client