Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier: Utl9zNBt/Viyoh6Lfdtu6/VnKVxSSb8fl1gIHDqfacI=
Subject key identifier: EC:33:CC:C5:4A:19:24:0E:CF:A5:8C:0D:FB:30:72:6B:23:E3:DB:A2
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 0199FE7DC455894CEC6ED7AFC63C3B4BAD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 22:01:19 +0000
Manifest this update: Sun 19 Oct 2025 22:01:19 +0000
Manifest next update: Mon 20 Oct 2025 22:01:19 +0000
Files and hashes: 1: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: ljKGx8wGYEndGPtDmur7WE7sGqiABsbnPnqhcWY+t70=)
2: ULHC_eqps-Zhve3ylast8DZ7_B0.roa (hash: rS2DzXzv6b1NgQdmnOKMIDSPXpweT7iIgimqwwzrLDM=)
3: VuGkSohHUfq_yXd_IRur3wQhe6Y.roa (hash: BWYBYUzZHQt0NYFkHSXMP74Q5d+hL0sst0bi6Iqm6QQ=)
4: mqcBsZguJ4u7DQyG9frvwf0EmHo.roa (hash: 0n6BWPSoOW6nqo6SiNgRiIzfLmFx0RVI3omPqv7vWao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:c4:55:89:4c:ec:6e:d7:af:c6:3c:3b:4b:ad:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Oct 19 22:01:19 2025 GMT
Not After : Oct 20 22:01:19 2025 GMT
Subject: CN=ec33ccc54a19240ecfa58c0dfb30726b23e3dba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:96:33:d6:44:3c:2b:6b:cc:0e:fa:1e:b7:
85:9d:d5:f5:96:f5:24:ed:6d:3a:88:6c:1d:e2:b7:
f6:6c:b1:06:3c:c1:e4:54:ee:df:29:bb:85:57:2d:
dc:b1:68:94:7b:31:bf:a0:1c:ef:a8:f7:2e:8f:d9:
2b:c6:2d:69:dc:a5:d5:41:ee:3b:f0:6a:15:38:81:
66:5b:09:0c:68:0d:38:8b:53:a1:06:a3:c5:89:5e:
eb:1a:17:a2:5c:4e:a4:e4:fa:08:31:1a:52:1b:30:
60:94:0c:05:fd:3c:e8:5e:59:ee:e3:fe:e0:af:f3:
c8:6d:3d:9b:55:af:da:d4:41:b7:82:db:8c:ea:91:
8f:75:47:e8:03:96:73:2f:18:57:e0:d5:5c:b4:7b:
06:ca:e8:a1:fa:0f:7d:40:0b:44:e5:06:d2:7a:08:
93:84:b1:05:b3:db:86:23:76:2c:d8:f9:18:75:f1:
e0:62:92:b3:45:87:85:2b:d6:f0:ef:f3:79:64:43:
f5:e2:be:53:73:1c:1a:2c:fc:15:54:a6:dd:da:73:
52:b6:18:1c:69:49:2b:26:79:52:b4:03:d6:82:4f:
43:d2:83:38:76:83:ed:bd:d5:5d:36:ad:44:d1:b2:
2d:21:2b:ae:a6:54:d1:02:ed:cc:65:60:ed:4c:6c:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:CC:C5:4A:19:24:0E:CF:A5:8C:0D:FB:30:72:6B:23:E3:DB:A2
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5b:c9:34:85:c3:3b:bf:e6:10:3c:31:dc:f5:e7:e4:8b:7a:
d5:98:c6:e5:de:f9:3d:64:60:b9:b3:60:6c:d5:cb:3e:6e:1f:
07:53:4d:e8:75:47:54:e4:8e:72:65:6c:ea:e5:b4:cc:10:1c:
db:d7:c9:87:a5:4a:cf:f5:35:cf:78:40:b2:50:a7:bc:8c:aa:
d2:b7:81:65:10:31:98:02:6b:9d:7f:0d:57:07:09:17:1a:4f:
bd:50:08:7d:84:7d:fb:8e:c7:6f:41:6d:70:8d:cc:6e:7d:48:
56:88:d1:95:e4:be:5e:ce:1b:cb:b3:57:64:ae:1c:8c:49:99:
93:52:f4:97:1d:45:78:a3:9f:ca:d1:b2:8b:bd:fc:6e:22:14:
4a:01:75:43:b7:b6:16:dc:30:fe:ec:b8:8b:c9:af:87:4d:06:
5a:73:72:80:29:fa:bb:61:c7:9f:e5:c3:d9:e1:fe:45:4b:33:
bc:f5:0a:d0:70:e7:bf:e2:c6:c5:6e:01:1e:f3:e4:af:56:02:
ad:00:b8:26:ee:24:8e:a2:da:7e:38:16:04:7e:34:98:ae:ae:
5c:c1:b3:da:52:fa:12:f8:3e:2e:ff:bf:b0:1e:63:a2:4a:95:
80:76:2a:a2:57:5d:31:fd:0f:a8:38:7c:41:c1:b9:aa:9e:cb:
91:6a:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:28 2025 by rpki-client