Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: UA6QxRxUGDlgmTSuFuni+JwthWo0SxATsMrcjba7aNE=
Subject key identifier: 76:6F:7F:C2:A6:DC:7C:80:05:76:4E:62:68:9F:36:CE:E3:5A:D8:00
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 0199FF22540A9A7BDBBA72728075BE800F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 09C4
Signing time: Mon 20 Oct 2025 01:01:03 +0000
Manifest this update: Mon 20 Oct 2025 01:01:03 +0000
Manifest next update: Tue 21 Oct 2025 01:01:03 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: de0pQ/LKyDabPqL0IfEkqeze9awuOBh5Yc+JhFAfkzE=)
2: XqPuIdI9HApjv_WddMq3bI6d3ZM.roa (hash: q6fnYgYmczuLoF1SwqP9SdLFNt57s6mvo6al6s6SG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:54:0a:9a:7b:db:ba:72:72:80:75:be:80:0f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: Oct 20 01:01:03 2025 GMT
Not After : Oct 21 01:01:03 2025 GMT
Subject: CN=766f7fc2a6dc7c8005764e62689f36cee35ad800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:51:9e:44:ad:86:e2:a4:30:a2:98:5c:06:
85:6b:ac:07:d1:38:01:a5:18:f5:d2:2b:bc:17:0b:
96:35:49:97:bc:e3:68:fd:4b:27:71:88:b3:a9:86:
66:3f:50:b5:35:64:81:f1:82:ab:64:d6:32:08:21:
7a:5c:0d:0d:26:f2:03:c4:7d:5d:d7:3c:d4:15:f0:
f0:c4:be:c3:7e:9f:fe:15:b8:94:0f:9d:8a:84:c3:
fa:8e:93:ad:fb:59:61:4d:49:a5:15:38:b8:ab:1e:
1c:09:ef:31:06:62:91:55:98:f0:ce:46:0f:48:f7:
b5:c7:ee:51:d4:b8:f6:a8:1a:cc:e7:7e:d7:7f:55:
1c:90:3d:36:93:ef:2e:17:92:48:26:f5:29:96:ca:
42:7e:2a:f4:e5:3d:97:b7:68:1c:cc:51:51:5a:e9:
0f:f1:5c:27:f4:96:90:ed:40:7b:46:f2:3f:01:3f:
2f:d8:0d:9b:a9:ec:ea:ec:10:d5:10:79:3b:b8:0b:
5c:7b:ec:98:a0:6c:c6:12:82:8e:18:ee:ef:d0:9c:
b4:0a:e8:85:9f:8c:cb:c0:ba:c7:d9:53:48:4d:29:
2a:30:fa:02:4c:cd:38:fb:58:f5:2b:c4:06:90:c9:
f9:7d:9f:f2:5f:f1:69:42:10:a6:57:bd:57:e8:4f:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6F:7F:C2:A6:DC:7C:80:05:76:4E:62:68:9F:36:CE:E3:5A:D8:00
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:85:23:b7:c5:24:3d:4d:11:4b:77:98:c3:38:31:e6:76:97:
1e:89:3e:f1:08:14:7e:bb:b9:78:21:16:93:b3:2d:6e:8d:e0:
5b:17:9f:d8:90:2e:f4:71:02:17:f9:a1:02:d0:50:a5:bb:8f:
62:00:2b:0c:23:07:12:2b:76:1e:d5:8a:51:1c:f9:87:b6:65:
72:18:db:19:51:65:a8:52:3a:dc:f1:3a:72:67:a7:c7:55:43:
e8:d5:c1:e8:4d:4d:15:73:85:c0:c1:1c:fd:b3:dd:31:0e:3f:
5d:af:e7:90:3b:af:a7:88:79:bd:f0:aa:f4:7a:89:a2:ce:54:
ac:75:c2:1b:2b:7f:57:65:60:f2:44:37:f3:51:50:62:03:e5:
29:b3:70:29:26:67:35:26:33:8e:fa:b2:aa:4e:ee:13:c4:e6:
34:89:77:9f:7c:b8:6d:e6:26:23:2b:e0:ea:5b:3c:6a:bd:76:
25:6a:69:d6:5e:43:94:4b:98:e6:00:0d:a9:b9:99:01:53:0d:
9b:a3:b7:ac:16:16:4c:2d:14:1e:3f:c4:34:14:db:c5:6f:b2:
2d:56:0f:4d:41:a6:f4:9e:c3:f4:43:95:96:3f:36:bb:cd:60:
59:4e:e7:61:c0:09:2d:7e:f3:69:85:6d:f2:24:e5:78:a9:44:
76:5b:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:16:43 2025 by rpki-client